Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
File:                     IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json)
Hash identifier:          gQ2z2QBVlYgJCb5evXbHrDlR4LbFOw5lLZ3Ux5+keDM=
Subject key identifier:   55:F0:54:44:97:6A:63:28:DE:C3:50:B1:D7:C0:13:B5:3A:61:09:F7
Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
Certificate issuer:       /CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Certificate serial:       01962E987BCF7E4252FF9625E6A8018D7985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
Manifest number:          0F37
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: NvkiXDy7W11twZSX5wnjFtqr1RQoCIjV+Zn/ps+Y+9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:cf:7e:42:52:ff:96:25:e6:a8:01:8d:79:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=55f05444976a6328dec350b1d7c013b53a6109f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:86:1d:ca:c1:25:67:a0:e9:32:0d:d7:16:
                    d6:c1:89:51:aa:88:b2:5b:86:15:d8:da:31:d4:d9:
                    3a:76:34:95:88:4e:dd:8a:cd:02:66:58:56:62:fd:
                    91:43:a3:b8:22:c5:ec:c1:9b:7e:d3:95:42:c3:81:
                    d6:05:3c:82:34:1b:fd:ac:be:a7:3e:28:59:6a:64:
                    2d:66:40:e2:8c:ac:cb:e6:92:71:da:23:d4:ea:50:
                    2e:bd:2b:39:1f:df:a1:9e:03:cc:e7:59:90:61:4c:
                    ef:2c:c2:7f:5c:23:67:c4:9b:be:e7:aa:b3:1c:22:
                    97:02:54:0d:6a:be:af:83:4a:7c:51:e6:75:af:c5:
                    23:f2:81:66:af:82:46:65:2a:cb:a7:91:fe:20:95:
                    b2:8d:8b:66:d3:9a:a2:7f:02:ec:45:4a:6f:98:93:
                    ed:df:e2:08:60:8d:0f:72:20:17:f5:fc:3c:32:98:
                    58:89:d8:93:53:b1:77:ca:12:2c:eb:82:87:60:26:
                    73:bc:eb:8b:9c:01:8f:96:dd:b6:ed:90:13:14:2c:
                    f7:02:6d:e9:72:4e:f9:25:e4:3d:73:3d:1f:79:ec:
                    28:39:0d:96:b0:44:4c:5d:9f:ae:76:e3:35:db:07:
                    14:0e:25:c0:0c:5d:0f:89:23:6d:5c:a8:14:ed:e3:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:54:44:97:6A:63:28:DE:C3:50:B1:D7:C0:13:B5:3A:61:09:F7
            X509v3 Authority Key Identifier:
                keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:26:f4:74:a2:1b:fd:8f:7b:5c:38:7b:fe:a6:5b:e1:96:22:
         78:7d:52:f8:07:2a:cc:9e:86:a7:64:7a:0c:0f:98:ff:99:52:
         a8:5e:8c:77:b7:9a:24:4a:8b:c8:de:8f:cc:28:df:24:89:0f:
         02:da:44:e5:10:ed:47:e3:e0:46:3d:f8:ef:78:31:6d:aa:a4:
         00:0b:73:0f:1e:6d:a0:f7:00:2b:b9:4a:75:95:02:c4:b6:3f:
         a2:b6:8d:40:33:54:07:96:30:07:db:db:c2:32:88:71:f6:85:
         bb:36:26:cd:7e:e0:7a:ac:70:b1:8f:a6:dc:28:4d:fd:8a:9c:
         5c:de:2b:89:3b:ce:f2:bf:e4:a9:66:17:d6:01:ea:de:8a:34:
         c0:43:6e:d3:7d:38:32:2a:82:22:49:9c:ce:9b:aa:4e:6a:46:
         b2:17:69:64:3e:93:29:45:ac:3d:35:c5:eb:84:2e:1d:c0:d5:
         a0:f5:a5:5f:5e:39:7b:21:4d:31:a5:7a:b9:6b:de:82:b0:b5:
         2d:28:2b:7b:e4:71:d5:9b:4d:26:79:b3:09:bb:c0:25:63:37:
         9d:b2:96:68:b8:3b:9d:20:9d:a5:03:3a:80:83:52:f0:7f:d8:
         f5:d9:27:80:7c:bf:db:6c:9c:87:71:53:92:f6:c9:80:7b:39:
         62:27:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----