Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File:                     L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier:          G8quQniPQxCZfjGbD/QiunM5eL4MOPdgVpwkvp9wJsg=
Subject key identifier:   28:69:7A:3C:CD:91:A7:08:E8:20:9F:89:7D:A5:F2:13:85:54:30:04
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer:       /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial:       01962E992CFFFCA5A4BBF6FF6A3BFCCCDD44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number:          1156
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: ll9M8sQhQ0NArTcnMQztjuiA/AWtePDbFNNF6JBznd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2c:ff:fc:a5:a4:bb:f6:ff:6a:3b:fc:cc:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=28697a3ccd91a708e8209f897da5f21385543004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:81:28:ec:d4:a9:ce:68:0d:dc:6a:57:91:
                    06:a2:de:ac:99:0c:a5:c3:9c:2e:ab:91:4e:d4:ff:
                    fa:6c:07:d0:81:f5:95:b2:32:2d:30:a5:2c:fc:f4:
                    25:ed:c0:c2:8d:ba:8c:81:f0:a3:d1:31:3e:f1:0e:
                    f1:9c:b3:63:85:99:b4:75:e6:f8:d3:fc:24:45:b2:
                    74:7c:fe:1f:20:1e:b9:02:e0:95:22:84:9c:b6:7c:
                    2b:a7:ba:81:0c:be:99:36:d7:46:0e:a5:29:5e:2b:
                    af:2e:18:4a:99:5d:11:75:5f:93:fc:87:e3:f5:17:
                    b7:a0:21:d2:93:1e:80:96:54:cd:38:b4:87:f9:b9:
                    0d:35:1c:86:c1:cf:61:f9:04:fe:e9:c8:44:81:65:
                    42:70:49:bf:25:c6:c9:d5:e7:e1:9e:e1:af:45:97:
                    eb:89:fd:56:3a:a5:90:78:fa:0e:69:45:4d:30:1e:
                    3f:bd:e9:1b:9c:da:69:29:41:c7:42:7e:b9:84:8a:
                    83:e2:56:81:e1:1e:10:33:ff:ca:75:2c:d1:4f:69:
                    96:26:e5:74:dc:6d:f3:7b:17:3e:8f:be:c9:62:da:
                    24:e6:74:cb:dc:48:20:a9:79:a0:43:77:31:3a:9b:
                    00:80:3b:3e:46:e5:b5:b3:76:b8:bb:6f:a5:9c:2c:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:69:7A:3C:CD:91:A7:08:E8:20:9F:89:7D:A5:F2:13:85:54:30:04
            X509v3 Authority Key Identifier:
                keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:16:56:4d:69:ff:1a:72:bf:21:25:92:cb:10:3b:6a:6c:
         24:d2:a2:44:c1:8e:71:b3:97:eb:85:06:29:31:83:a0:6a:cc:
         4d:e1:90:bb:e3:a1:bd:0d:5b:e0:c5:73:dd:b3:85:b0:c0:19:
         5f:39:56:9f:d1:34:6d:c1:d8:51:92:bf:f1:f7:34:f6:c9:f4:
         58:02:51:b6:87:eb:95:bb:20:42:b4:3b:fe:1e:5a:c7:4f:69:
         08:f6:b7:72:58:75:af:3d:80:f3:00:62:01:38:84:f5:02:c7:
         cb:9b:53:fa:93:15:79:07:e9:f4:0e:fa:4d:fa:5c:4d:8c:05:
         9a:d8:2b:13:f5:29:99:8b:7c:d9:96:43:21:2c:34:b8:47:c2:
         aa:49:f1:bd:7b:ea:e3:c7:20:d9:a4:d2:51:b6:a8:5f:44:11:
         ed:5d:56:31:2b:3c:3c:4f:ab:00:63:a1:25:7c:8a:52:8b:e5:
         4a:de:18:97:76:0b:62:9c:af:f9:bf:1c:4f:25:94:00:13:c9:
         98:59:6a:f9:f7:f3:46:7b:b5:ac:2c:d4:fc:61:f1:2d:a7:ab:
         65:05:df:ea:59:a7:c4:c2:ed:d7:a1:a4:5b:86:bb:bb:10:ae:
         d7:b2:57:2a:85:c7:1f:36:e8:5a:cf:ff:56:7f:2c:19:05:36:
         c6:97:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----