Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
File:                     xRlGjFXmvnFcDagFzvta7IXTKSY.mft (raw, json)
Hash identifier:          8pf3dQ5jhzwfrQ3G2D9SbwFUb4kbPj4AZXl7tIETxwA=
Subject key identifier:   FC:20:45:B7:13:83:33:38:6B:4C:AD:F2:E1:A6:1A:B2:CB:32:19:33
Authority key identifier: C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
Certificate issuer:       /CN=c519468c55e6be715c0da805cefb5aec85d32926
Certificate serial:       01962E98769885F7931CA1AAF36B7A226CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
Manifest number:          0DE3
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: xRlGjFXmvnFcDagFzvta7IXTKSY.crl (hash: uzVB5QBs7stns4kVHzsHlcNFSu/9QmSBwzlWBhlei7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:76:98:85:f7:93:1c:a1:aa:f3:6b:7a:22:6c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c519468c55e6be715c0da805cefb5aec85d32926
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=fc2045b7138333386b4cadf2e1a61ab2cb321933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:5f:1e:58:b0:8e:0f:fe:0e:cc:19:92:22:
                    26:08:d9:6c:da:71:e7:47:3e:95:57:84:e5:ef:7f:
                    2c:76:66:86:b2:ae:62:41:19:94:37:3b:5e:a0:9a:
                    9b:19:b2:67:a2:84:6f:ca:b9:5a:ef:c5:8c:09:16:
                    d9:c0:73:ac:ef:a1:8e:7d:5d:34:8a:91:ad:ac:57:
                    2e:43:0d:63:29:3d:b9:63:dc:b8:04:2b:78:ad:76:
                    87:1a:bd:af:ad:61:3e:04:87:53:b0:bd:3c:6f:fc:
                    db:1d:95:58:b2:17:44:9e:1c:58:9e:e5:93:12:03:
                    88:5a:cd:29:c1:8a:18:68:a6:85:cf:53:40:d2:21:
                    dd:c7:a3:a6:3e:b5:fc:1c:c8:32:2b:ee:51:ad:c3:
                    c8:d8:f3:a1:42:10:d0:f9:7f:ce:5d:8a:9e:6e:80:
                    f6:5b:6d:44:b6:a3:76:e7:b7:b0:30:32:f9:c1:12:
                    46:53:77:1f:b6:10:2c:48:dc:06:97:a7:1f:95:a9:
                    54:a6:12:fe:40:1b:9d:78:e7:78:12:21:f1:09:86:
                    5f:09:b0:8c:33:72:51:d1:0c:23:eb:2f:0b:b5:57:
                    f1:5f:ba:83:54:f3:70:5c:59:b5:4f:2a:61:ce:95:
                    8a:18:29:1c:42:03:d7:31:6a:4d:35:30:fb:52:aa:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:20:45:B7:13:83:33:38:6B:4C:AD:F2:E1:A6:1A:B2:CB:32:19:33
            X509v3 Authority Key Identifier:
                keyid:C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:3e:41:7e:1f:59:4c:40:f0:69:7d:15:7a:22:66:10:ed:
         51:f9:29:28:cb:07:11:40:84:c8:7e:9b:f5:73:a2:30:d4:69:
         e4:25:b1:19:56:c8:44:34:a5:49:6d:05:18:1d:c9:22:58:aa:
         34:6f:74:f4:b7:22:98:dd:65:8a:a7:f4:3a:53:2b:49:f6:72:
         01:98:2b:0f:ab:8e:e6:05:53:87:4d:b2:31:3a:c1:2c:27:20:
         5f:e3:93:dd:5f:33:e7:49:44:16:6c:0b:62:82:f0:2b:06:66:
         0d:ce:41:3a:05:ab:27:cb:80:10:dc:91:db:ad:13:d2:ec:f9:
         80:be:e7:cd:05:c6:d8:26:7b:ec:34:f3:6c:6c:50:aa:89:17:
         91:00:1d:5e:e9:cc:5c:58:ad:0a:a5:4e:06:f6:cc:b2:db:ad:
         2f:90:aa:65:9a:b8:f8:a6:de:c0:84:61:05:66:f5:7e:73:3e:
         c1:fa:3a:a9:d2:e1:6f:b2:47:a9:5e:4b:e6:a9:5f:2a:1c:56:
         be:88:a6:f1:6a:a9:20:54:6a:cf:5a:95:12:20:e4:be:87:e0:
         90:59:48:ff:57:4b:9f:95:85:cb:72:52:b6:f5:57:05:e4:b7:
         5a:92:d2:a4:79:b5:be:32:96:05:21:2e:1a:e2:54:65:fb:84:
         94:9d:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----