Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
File:                     V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft (raw, json)
Hash identifier:          noQ5ml/QnvcaBS6dFH9d3Co2Y5YeIWLgNYqFHH7E5CY=
Subject key identifier:   B8:B7:02:0C:0D:AB:49:E5:70:E3:98:E6:9D:58:05:05:9B:AE:2C:D6
Authority key identifier: 57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
Certificate issuer:       /CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Certificate serial:       01962F070645AB747FBE4E67F33A870D96AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
Manifest number:          0516
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl (hash: xnWeQ7Z2Y0PeEPx/UDCOyJe2k595Jxh03l0hvHPMal8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:06:45:ab:74:7f:be:4e:67:f3:3a:87:0d:96:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=b8b7020c0dab49e570e398e69d5805059bae2cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:ef:df:9f:7c:62:e3:c5:40:85:3e:df:48:
                    70:d8:13:15:11:88:76:62:22:cf:f5:c2:7c:7f:7f:
                    d3:e3:76:0d:b9:dd:67:26:64:6a:12:2b:a7:8b:1c:
                    de:35:9e:0d:fa:ef:f8:2b:91:a4:ae:17:fa:df:0e:
                    de:1c:b3:f1:30:a9:51:a5:19:a2:2f:f4:3c:b2:4b:
                    61:ec:a6:69:b3:55:c0:6d:9b:25:84:6f:9f:ab:60:
                    60:11:85:b9:3d:c8:d6:7b:06:40:7b:b3:2f:32:17:
                    54:28:cc:b4:86:2d:78:09:40:6f:b4:72:77:ab:ab:
                    1f:77:81:fb:05:5d:25:3a:ca:2f:9b:0f:f9:82:00:
                    ac:2e:72:f1:40:7b:22:ac:90:f0:74:22:d8:34:f9:
                    5f:01:ac:6e:52:69:e2:26:3a:24:c1:10:d3:c6:c2:
                    a1:06:73:f6:50:2a:37:f6:34:7f:b1:39:78:8b:b0:
                    2f:58:71:8e:79:32:f5:c0:36:b6:01:2b:98:07:eb:
                    4b:1f:e7:61:83:64:fa:17:5d:28:5e:fc:b2:40:10:
                    3a:00:d2:f9:aa:a0:5c:10:bd:66:3a:0b:be:c5:82:
                    99:f2:4d:5e:4a:89:0c:eb:39:84:37:65:65:35:b0:
                    7b:e5:43:d5:fd:e7:e3:b8:cc:8e:6d:c8:8d:33:57:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B7:02:0C:0D:AB:49:E5:70:E3:98:E6:9D:58:05:05:9B:AE:2C:D6
            X509v3 Authority Key Identifier:
                keyid:57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:87:1c:fc:f2:94:17:73:85:5b:35:a1:a6:38:d2:1e:02:
         ee:54:14:10:0a:8a:a1:89:e2:a5:dd:85:64:16:94:d7:08:3a:
         53:ac:40:b6:58:18:b2:99:1f:9c:f2:59:a4:17:22:a8:dd:6d:
         e2:a8:cf:f9:a8:41:63:a6:95:d2:64:aa:61:7e:43:25:c8:50:
         79:14:06:79:bd:e3:42:2a:aa:d5:d2:36:49:69:88:c9:7f:6f:
         39:ca:9b:df:cc:a1:42:0a:c2:57:67:d1:84:4c:49:ae:71:fb:
         f8:24:4d:35:fa:a1:d4:0c:78:b5:81:e8:49:84:39:bf:53:ac:
         51:e2:63:d0:54:dc:a3:05:dc:ec:8d:b1:6a:fc:7a:f2:9d:38:
         ce:10:6b:c8:65:83:98:e3:f1:41:e6:9f:e7:5e:37:26:73:c6:
         16:60:d7:46:1b:2b:38:c8:0c:88:da:a5:a3:ea:9f:ad:02:a2:
         05:93:6f:6c:47:2c:9d:6c:8b:34:bc:16:67:54:3c:0f:18:7b:
         6e:f3:4b:8c:c9:c0:b0:25:99:be:64:94:52:c3:ef:8d:2d:22:
         c2:33:c9:7d:b9:c1:3c:6f:86:9b:9d:8e:1d:96:74:1c:1d:70:
         e5:4d:3d:59:28:64:da:e9:e2:b6:a4:f8:1e:4a:92:42:a2:aa:
         87:e3:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----