Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File:                     7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier:          BxOaLaA+IQfwmZNcuHP+SCN9/5ZWh7nGw3Fqcw3DXSs=
Subject key identifier:   99:D4:34:94:F4:E8:BA:9F:22:CC:97:BB:91:7E:D1:66:A0:00:28:5D
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer:       /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial:       01962E99B48A2C4F1EADB8E7906172318355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number:          1325
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: K33Jzub2luufVujgaOxvUqeHtfZJcA7ujv5T8BMLO/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b4:8a:2c:4f:1e:ad:b8:e7:90:61:72:31:83:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=99d43494f4e8ba9f22cc97bb917ed166a000285d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:f5:19:72:5e:ae:ca:03:c7:f0:82:00:c2:
                    4b:ba:26:3e:6e:ac:d3:f1:0b:f4:61:15:63:53:f9:
                    38:2a:9b:df:ff:31:a2:dd:47:dc:62:97:53:cc:62:
                    5f:38:ac:49:c4:e0:9f:48:38:70:9b:6f:57:09:3d:
                    2c:fe:45:20:57:1c:3b:6c:b8:a8:29:ef:a0:a7:59:
                    f2:0e:22:35:c5:57:eb:ee:ca:08:90:96:b3:9f:9c:
                    fd:b9:86:9d:9d:74:a9:82:66:71:b6:8b:26:8b:1b:
                    7b:71:9f:b5:1a:48:50:d6:9f:b2:84:c1:52:81:83:
                    71:2f:0d:8a:7f:7a:f9:86:05:79:60:8f:0a:56:20:
                    33:4a:a3:af:7f:4f:2e:e8:7b:ed:b2:ef:80:0e:e1:
                    63:e3:b2:c4:07:21:7c:bb:84:c8:df:80:c6:d9:6e:
                    77:32:03:c5:7c:9b:d3:da:e8:1c:4d:26:89:8f:74:
                    c9:7b:d8:12:b6:31:8e:df:b2:84:c2:25:db:62:cb:
                    42:a5:ee:ea:7e:69:d0:d9:5d:20:a2:72:7a:a1:b9:
                    f2:50:ad:67:54:18:1a:78:dd:92:58:3a:6c:4d:9d:
                    87:04:ce:49:45:0d:b5:7b:11:a3:c4:6f:2f:54:6b:
                    c9:35:7f:b2:a6:1e:9c:36:88:3f:07:c3:0b:cc:c5:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D4:34:94:F4:E8:BA:9F:22:CC:97:BB:91:7E:D1:66:A0:00:28:5D
            X509v3 Authority Key Identifier:
                keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:b7:8b:09:cf:c4:d1:ef:b2:49:2d:4c:3d:22:50:fb:f7:
         82:00:24:0e:81:3b:7a:4f:55:d0:75:75:c3:6b:6e:7c:2a:1f:
         1c:43:5c:ab:e9:88:1e:fb:a9:5d:3f:09:d7:d5:25:97:72:6d:
         30:4b:b5:d5:8f:46:f9:b2:7f:51:e1:c7:a1:71:df:7e:8d:b8:
         80:7a:81:0d:8b:19:69:27:89:42:07:5b:dd:55:7c:e0:c4:cf:
         52:fc:af:3f:c6:41:6a:2b:5d:a4:90:42:92:d6:c3:37:a1:a3:
         fd:07:8d:fd:d8:c9:73:95:6d:25:b4:54:bf:c0:4e:58:ab:2f:
         62:c9:e5:ef:b8:ae:90:f8:e7:eb:18:ef:ef:95:e2:9a:c8:cc:
         dd:bb:e2:af:b9:93:88:db:52:f1:76:d6:d2:e5:80:56:8e:77:
         1d:b2:ad:00:af:0f:43:9e:3f:f0:9d:2b:b0:e4:fd:56:46:39:
         9a:f7:29:2c:af:70:15:1c:26:da:76:b5:d9:11:99:8b:c2:31:
         4a:ba:80:62:17:b8:04:bd:d6:1f:3d:66:bd:58:7e:42:49:38:
         73:3b:1a:2d:8d:07:ee:10:ee:e7:12:cf:04:9a:6d:2d:dd:bb:
         f0:60:d6:2a:b2:99:27:70:6d:63:3f:59:e8:3b:94:5d:55:c7:
         e6:ee:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----