Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File:                     iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier:          aF8K+1xn4SFBtEBD4+7XUlBSRDHzCUwz3Bx5qT8WMxQ=
Subject key identifier:   D8:D2:32:18:BB:74:77:35:86:A9:1D:6A:F9:A2:70:B6:BC:84:49:DA
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer:       /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial:       01962ECF9CCCFBFDE6E30FEC254614401F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number:          02D3
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: PhedlWIghs3EcPTEv88/XMXO+1iLjZSMBawTM3o0aVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9c:cc:fb:fd:e6:e3:0f:ec:25:46:14:40:1f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=d8d23218bb74773586a91d6af9a270b6bc8449da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:4d:43:0c:4b:c5:cb:0f:e1:a2:cf:17:d1:
                    64:1a:3e:ac:92:2c:44:64:95:a9:71:cb:77:36:36:
                    ed:67:43:a4:72:28:49:c4:43:36:ca:34:ba:ac:1b:
                    71:40:6c:62:54:a7:9f:33:41:a3:cd:bc:c6:f6:7b:
                    74:55:4a:b7:08:55:82:3a:c8:34:61:13:66:9e:85:
                    f7:50:88:9b:76:24:1f:f6:65:18:ac:87:1f:57:a0:
                    76:bf:c4:c2:39:52:02:ee:17:6f:65:31:b5:ca:4c:
                    d7:be:8c:5c:35:ec:5b:5a:49:39:3c:3e:94:9f:fd:
                    7c:5c:7c:7c:a8:48:7d:ae:55:b6:ea:0c:b8:7d:72:
                    ca:90:3a:5d:f8:55:d9:e3:e6:1a:8e:04:63:5b:fc:
                    79:29:b4:98:19:a3:1c:2b:11:aa:c2:16:79:65:ef:
                    d4:1e:64:41:ec:68:c3:69:20:ea:b3:ac:c6:36:ab:
                    e2:85:5c:ba:12:a0:fb:3f:78:8b:cd:05:1f:bf:2c:
                    f8:cb:9b:f2:a3:c4:5c:3f:88:e7:0b:93:5d:7e:28:
                    4e:a0:9b:34:7f:fe:ac:41:2e:c1:b8:c1:0a:dc:58:
                    75:1a:3a:c5:bc:76:e6:58:7d:da:a3:f8:62:38:6b:
                    88:79:28:52:77:ca:3d:62:9b:0a:d0:ed:ae:9f:7d:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:32:18:BB:74:77:35:86:A9:1D:6A:F9:A2:70:B6:BC:84:49:DA
            X509v3 Authority Key Identifier:
                keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:84:36:98:f5:49:1d:a5:f4:c8:65:e1:6f:9a:03:f3:a7:38:
         e2:08:23:e0:88:ba:f5:8f:e8:69:ab:49:28:50:33:ad:46:f7:
         25:9c:11:4b:68:d9:7a:84:bd:20:f8:a8:53:fd:ec:03:b7:e6:
         b9:9b:57:5e:f2:ec:bd:f9:14:34:78:68:aa:26:da:29:14:af:
         93:a4:33:67:59:eb:fe:ff:0b:58:27:fc:4b:02:c4:db:54:95:
         15:62:cb:a2:28:52:ca:6d:76:99:6f:86:42:b9:74:cd:f9:b8:
         20:d9:f3:56:46:61:5a:bc:19:f3:2f:2d:a4:6c:de:c0:8c:03:
         2b:df:ff:d2:2a:98:73:aa:61:d8:3d:83:ca:ea:9e:8a:b1:55:
         47:60:66:10:9d:cd:cd:05:b4:c9:08:fe:a8:35:4a:cf:17:27:
         82:ec:fd:2f:9a:11:73:22:c9:a3:e2:82:ae:7c:a4:b5:05:13:
         e5:e9:93:ca:30:c4:53:ee:87:33:bb:bc:5e:36:87:f7:eb:64:
         9a:ea:65:97:ae:2e:34:0a:90:58:3b:4f:12:67:6b:ef:ef:4a:
         61:b0:30:40:03:48:4f:e8:b8:20:12:35:96:2c:9b:a4:87:4c:
         e8:aa:48:8d:d4:4f:47:2c:b2:4a:a8:14:f3:2c:08:09:9d:51:
         9c:7f:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----