Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
File:                     uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft (raw, json)
Hash identifier:          oGXkxz/OiI4CyguZpudcq8sEUGWE4To906xPJS0IZtA=
Subject key identifier:   61:A3:24:E2:A0:DE:6E:38:6B:91:DB:B8:D2:D4:9A:65:88:D0:34:32
Authority key identifier: B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02
Certificate issuer:       /CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
Certificate serial:       01962E9982076884795CC070AEBFF9B13007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft
Manifest number:          0F3B
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl (hash: JQGjEsbZsHLiAkM1pC6gJNa98rt7dKyHO8OMwJCICE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:82:07:68:84:79:5c:c0:70:ae:bf:f9:b1:30:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85e0be6b7279cdecf78bdd64105f8443d0c0c02
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=61a324e2a0de6e386b91dbb8d2d49a6588d03432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:60:53:e2:8a:32:86:14:76:4e:da:c2:3b:
                    7f:11:77:04:e6:3c:0d:56:24:44:db:b9:09:b1:d8:
                    8f:60:87:ed:d4:49:fe:28:48:6e:66:5b:2b:72:34:
                    c5:ca:22:47:36:96:34:73:35:6a:11:6d:98:22:bb:
                    41:15:f2:6b:f8:c0:76:10:19:b5:0c:e5:4b:3a:cc:
                    05:82:3c:4d:25:45:90:bb:69:79:05:04:28:d3:23:
                    b7:52:6d:28:39:38:fa:13:95:a9:87:7b:7f:e3:67:
                    25:6a:c3:b5:9f:4f:26:5d:11:3e:ae:b6:16:c8:48:
                    ac:7e:f5:09:6c:a0:63:39:6a:d9:14:18:d7:71:6d:
                    e6:a6:10:ad:fc:6d:6a:fa:f2:bc:87:3a:34:b9:01:
                    14:fe:e2:d9:fb:94:04:cb:c6:16:6b:70:22:33:dc:
                    5a:15:7a:e9:64:ca:29:d5:23:fe:af:c6:fc:d9:3f:
                    c5:7d:89:d9:7b:f1:17:9b:93:16:00:40:a5:30:ff:
                    89:c8:f3:2b:8c:31:27:69:a1:9c:41:b2:09:b6:78:
                    ef:13:7b:49:7c:3a:8d:0d:27:db:c6:89:60:90:97:
                    02:e5:e0:32:7e:00:9c:29:ba:99:9b:48:e0:41:5b:
                    f7:02:85:2e:e9:20:a9:15:b9:01:13:e8:0b:4c:c9:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:24:E2:A0:DE:6E:38:6B:91:DB:B8:D2:D4:9A:65:88:D0:34:32
            X509v3 Authority Key Identifier:
                keyid:B8:5E:0B:E6:B7:27:9C:DE:CF:78:BD:D6:41:05:F8:44:3D:0C:0C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF4L5rcnnN7PeL3WQQX4RD0MDAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6e1f38-6807-4866-a9ed-43bf1c43ec0f/1/uF4L5rcnnN7PeL3WQQX4RD0MDAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:36:48:9e:db:c7:45:01:32:81:00:e7:b6:4a:48:f3:1f:
         60:b8:ea:65:68:63:fc:8d:0a:cf:fa:b8:99:85:39:a8:95:98:
         5e:77:8c:19:5d:bb:c0:fb:f7:21:a3:8f:f3:0b:8d:4b:75:2c:
         21:bb:67:5b:6f:b4:41:db:a3:79:8c:8e:6e:b4:a2:6b:ae:84:
         bc:56:f5:c5:26:b5:13:28:fe:c8:e9:54:a7:7c:31:9b:d6:f8:
         b5:1d:c7:9f:8e:ff:06:e5:0e:37:a4:d7:8f:98:9b:31:e2:66:
         d7:9e:1e:bf:4e:77:d6:00:08:13:a7:5f:a8:78:81:df:3d:ad:
         9b:56:a8:e0:d5:69:9a:16:07:b5:46:1c:8c:4c:90:26:17:b0:
         6f:f5:e8:a4:35:12:b6:95:de:49:bd:28:98:84:3a:ec:db:8c:
         e9:1a:a7:8f:f6:6f:8f:34:4e:1d:93:fd:4c:73:c2:d9:32:d5:
         2b:51:ab:f2:b8:70:66:70:5b:7c:b7:9a:34:bc:5d:a9:01:2b:
         44:47:b3:92:29:16:bd:2c:eb:3d:d8:24:90:32:49:11:e4:36:
         ee:98:1f:ea:df:44:7a:81:fd:8f:33:25:62:00:c3:a8:c8:83:
         46:b4:4f:69:d9:42:bf:80:62:78:ea:82:66:01:80:2f:8f:18:
         b5:b0:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----