Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File:                     8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier:          gG7DUIJTJXVcDqbAuitukU5ltayZg9JHkZJnAPcgS0M=
Subject key identifier:   19:42:E8:5D:B8:3F:70:B2:91:8C:6E:2C:87:6F:D3:98:39:F2:49:3E
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer:       /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial:       01962F06C0531E35DB82B44D4FA427237CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number:          09CA
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: zXouV4KzJCGyvHzFdm///tQjXS+llFVtyduRiMtL7l0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c0:53:1e:35:db:82:b4:4d:4f:a4:27:23:7c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=1942e85db83f70b2918c6e2c876fd39839f2493e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:e4:5e:e9:0c:61:03:e9:5b:4b:d0:84:dd:
                    00:93:a2:ae:3f:b1:dc:03:e0:aa:63:ab:7e:fe:9d:
                    fd:9c:1b:63:90:48:ad:36:0c:db:ff:a3:12:bd:52:
                    18:e9:18:d3:3f:7e:e7:ce:ff:ff:b1:13:f2:5a:ac:
                    fb:10:aa:55:02:cd:ac:99:3b:1e:c3:60:69:d6:45:
                    20:dc:14:a1:af:99:57:8d:31:3e:b7:a0:54:f5:75:
                    4a:26:98:19:7d:1f:be:04:d1:91:c9:5a:e8:10:ac:
                    c7:0f:bf:a8:96:f9:80:de:ff:76:26:79:d2:9f:7b:
                    23:78:57:4c:f5:a4:14:98:0a:74:47:39:b6:30:2e:
                    7d:00:1d:17:6a:de:a3:55:39:5a:be:9e:92:2b:89:
                    53:c9:ac:b7:9c:a8:7c:b8:0c:c6:5c:09:2f:f1:86:
                    be:c7:bb:d6:5e:d0:e1:4a:a7:24:b2:df:b5:7b:88:
                    b4:05:78:76:81:49:ba:8d:a0:60:bf:0b:e5:bb:75:
                    ba:40:82:d3:50:b3:0d:04:a7:b6:18:8a:4b:86:d9:
                    4d:50:ae:d6:45:4b:32:81:ff:94:a4:bd:ce:59:bd:
                    c0:30:da:46:ea:3b:c8:e4:8f:e0:24:fb:2b:f2:18:
                    f1:3d:cb:cc:b9:db:41:f0:92:9e:ef:f2:93:a2:ff:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:42:E8:5D:B8:3F:70:B2:91:8C:6E:2C:87:6F:D3:98:39:F2:49:3E
            X509v3 Authority Key Identifier:
                keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5c:2b:15:67:3d:19:c5:b2:f3:a6:f7:66:d6:69:83:e9:6a:
         36:0b:b2:88:cf:bf:42:16:c6:5f:ce:92:e1:ca:de:51:e1:85:
         55:8e:0c:e2:49:35:42:c8:86:11:5f:7a:c8:f3:e8:a2:01:4d:
         99:50:8f:de:57:a9:37:f6:d1:54:27:35:b7:b9:27:44:73:1f:
         aa:d3:34:13:5e:76:10:98:95:e1:11:ab:ca:13:ac:7f:68:24:
         be:db:aa:cd:10:b6:b3:61:94:e6:55:b4:ba:1e:4b:9e:d0:2a:
         d2:84:55:6e:27:45:cf:bf:f4:23:60:54:33:54:9b:a9:25:78:
         c4:f6:8d:22:07:b2:93:1d:f3:3e:5e:c5:19:61:78:fe:96:c8:
         8d:70:5a:e9:23:04:c0:a3:70:36:18:71:c2:73:db:94:b9:16:
         1d:9c:e0:0d:6d:a3:62:85:1c:a3:20:3e:80:65:6d:a1:ab:96:
         f9:92:20:b8:5a:20:88:1a:de:6f:c9:a9:1e:f5:c6:29:0b:03:
         a6:39:15:0f:6c:87:be:95:84:48:14:18:12:b5:e2:14:84:7f:
         57:aa:eb:a9:60:28:32:82:fb:a9:5b:8c:a3:28:d4:33:d3:43:
         c5:60:43:68:60:4b:aa:df:4c:ac:d6:dd:ce:25:8c:d5:9c:68:
         68:ea:b1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----