Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File:                     8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier:          C1HVJPrAjTZDZ0pJl+AtsCEydwgjBtAuMc0zbjr8G78=
Subject key identifier:   32:D9:1D:83:E7:55:C3:64:4F:A7:2F:B7:F6:8B:D0:F3:3F:D8:46:AC
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer:       /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial:       01962E98F34654F4D35CECB80184434D34BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number:          0AC0
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: BsteaKrKd96Cbs3ZIyLi7AgZtqWhhBrpDUF/F2Mk1s8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f3:46:54:f4:d3:5c:ec:b8:01:84:43:4d:34:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=32d91d83e755c3644fa72fb7f68bd0f33fd846ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:44:89:6d:e8:7f:38:f7:39:07:fa:10:8d:
                    b0:8d:01:c4:61:39:c4:bd:50:4d:17:a3:84:35:16:
                    54:dc:bf:83:21:10:ea:7b:a1:f3:88:f2:3f:77:01:
                    ea:4a:4b:7a:05:fa:62:cc:51:40:cf:88:d8:ce:cf:
                    e1:bf:30:c3:6d:67:2f:f3:3f:20:fb:77:04:73:b9:
                    9e:9b:de:bd:47:6e:b3:a0:37:86:a1:15:01:e4:75:
                    96:45:79:61:46:f2:24:57:a1:08:82:7e:f2:b4:e8:
                    bd:c6:fb:05:5a:2f:28:78:37:bf:52:d2:ea:01:26:
                    5d:b2:35:72:d2:49:b3:0b:dd:d4:36:54:28:92:e3:
                    92:83:1f:4c:dd:d8:0d:7f:97:94:e5:76:6c:12:01:
                    0d:9a:17:b7:d5:c4:f0:7d:a4:7b:1f:0d:e0:bc:a4:
                    ae:d0:c0:69:b6:72:2a:ae:ae:c4:ab:ef:93:30:b5:
                    b0:53:9e:0d:f4:ac:e1:8f:93:27:c2:a3:bb:eb:26:
                    00:2f:88:ef:dd:60:03:cc:35:70:1b:29:eb:70:47:
                    0e:16:36:1f:c5:f3:e6:ca:0c:09:58:cf:a7:9d:90:
                    e4:ef:8c:5e:b9:1f:1a:5f:cc:dd:3c:8c:71:f9:cd:
                    3d:19:8f:7d:0f:cd:07:d0:f3:3a:2b:b2:a8:17:55:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D9:1D:83:E7:55:C3:64:4F:A7:2F:B7:F6:8B:D0:F3:3F:D8:46:AC
            X509v3 Authority Key Identifier:
                keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:46:a2:fb:48:c7:ad:a9:f1:bd:7c:7d:bf:eb:d6:11:9f:42:
         82:b8:e5:87:76:fd:1f:02:ca:22:e5:27:80:e7:74:a5:5f:b2:
         15:34:2a:48:54:4f:e7:08:0c:4e:71:1a:81:7b:c4:ce:c2:d8:
         9d:07:93:05:fc:b1:f0:93:49:2e:81:e0:32:27:74:5d:4b:0a:
         04:1c:76:c0:9e:ab:c4:f9:fd:a0:62:ab:2f:f2:13:a6:26:25:
         40:1e:4b:e4:9f:ee:05:d3:09:f0:14:1f:b9:ce:a8:83:8b:40:
         05:30:d2:7b:bd:b4:d0:ef:8b:41:57:bf:f2:58:ae:4f:eb:b3:
         23:64:af:42:5a:62:95:e8:af:21:ef:8d:f0:ed:04:2d:51:2b:
         b8:05:b9:e2:2e:87:77:cd:05:4b:33:e2:36:29:7b:f1:8b:32:
         f5:3a:54:fc:d9:e8:04:87:33:35:57:4c:4c:e1:77:4b:38:af:
         48:ca:a8:d0:e9:b9:d5:93:84:d9:76:3f:7f:6e:c9:bc:48:68:
         0e:db:a1:74:da:a6:ae:41:b5:8e:e9:31:6c:e8:fa:2b:d8:20:
         7f:96:47:fa:75:63:6f:03:4b:04:85:e1:22:48:74:05:ee:1f:
         b4:65:a3:c8:0c:4a:62:52:41:a5:b7:f6:6a:c5:12:31:2a:2b:
         fe:94:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----