Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
File:                     xASkYSDKwffLHkNvWWnWxDaJoFA.mft (raw, json)
Hash identifier:          ZnmcRZ2rmiWX1eKE315+YHv2PCIXTh2AOo7f6NkyORk=
Subject key identifier:   65:EB:FE:0C:DF:23:2D:F0:29:89:0E:B8:5F:2B:06:A1:67:48:06:5F
Authority key identifier: C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50
Certificate issuer:       /CN=c404a46120cac1f7cb1e436f5969d6c43689a050
Certificate serial:       0195477EE42191D78B4DD550EFDB0936AC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
Manifest number:          10F3
Signing time:             Thu 27 Feb 2025 13:00:53 +0000
Manifest this update:     Thu 27 Feb 2025 13:00:53 +0000
Manifest next update:     Fri 28 Feb 2025 13:00:53 +0000
Files and hashes:         1: xASkYSDKwffLHkNvWWnWxDaJoFA.crl (hash: sDI5MkNYxvUHubZZTeqVLY1KUGr8BOgFJn1aOMnszZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:7e:e4:21:91:d7:8b:4d:d5:50:ef:db:09:36:ac:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c404a46120cac1f7cb1e436f5969d6c43689a050
        Validity
            Not Before: Feb 27 13:00:53 2025 GMT
            Not After : Feb 28 13:00:53 2025 GMT
        Subject: CN=65ebfe0cdf232df029890eb85f2b06a16748065f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:bb:5c:c9:f7:bc:6d:02:87:97:41:c8:5e:
                    db:bf:69:c2:2c:61:10:21:34:88:92:6f:20:57:ea:
                    0d:c9:a0:79:d4:68:8b:b8:89:99:c1:1e:0f:f1:53:
                    45:5e:8c:f3:34:4e:fa:cb:32:d0:b3:9e:b5:5d:fe:
                    ac:ed:82:dc:2e:76:91:1a:27:86:a6:ef:10:ea:9f:
                    58:89:0a:99:1c:df:a9:a0:e6:86:88:d3:33:d0:e3:
                    7a:81:43:64:c6:a0:8b:f3:5d:38:82:4f:c7:10:fa:
                    dd:d2:9b:18:98:57:4a:7b:24:d0:5a:b0:43:d7:56:
                    c6:00:e6:ee:c4:37:da:6a:7b:bd:07:10:98:61:52:
                    26:b6:44:39:5f:0b:3b:a9:cf:60:50:b9:db:9c:a9:
                    47:e7:2a:7a:ea:a9:0f:94:81:23:32:32:74:8e:ca:
                    e3:b4:a1:3e:20:25:3e:70:26:17:14:b6:3a:bf:d3:
                    ae:b4:e0:09:f2:57:e5:70:35:e6:d5:ab:bb:e5:c4:
                    8f:3c:fb:77:ed:87:13:d2:bf:05:ba:09:96:05:c6:
                    7e:21:ff:2d:dd:cc:c9:65:e7:5e:0a:9f:95:c3:67:
                    ce:b5:03:0f:0d:21:d0:56:e8:b0:6b:fd:31:f4:ac:
                    69:00:d3:e5:6f:5a:e1:cc:3b:51:59:4f:08:44:9a:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EB:FE:0C:DF:23:2D:F0:29:89:0E:B8:5F:2B:06:A1:67:48:06:5F
            X509v3 Authority Key Identifier:
                keyid:C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:27:67:fd:d9:fe:1d:a0:0a:56:60:92:c0:df:e1:6b:a0:
         d6:b8:2e:ac:07:d5:31:2d:df:87:a5:3f:52:dc:b3:44:27:32:
         53:0a:95:98:88:f0:57:c9:f3:30:62:ea:83:a2:d7:07:8f:37:
         f2:bb:23:35:19:93:44:39:55:4a:c5:ea:02:96:18:cb:23:7c:
         1c:71:f9:8e:e3:91:5a:b2:70:47:c0:f6:d1:fd:5f:0d:37:99:
         17:af:28:87:f0:12:df:98:ab:e2:ad:f1:ff:e1:34:32:b7:7a:
         3b:ef:f7:7d:f1:ae:c4:cc:ea:96:09:44:c5:de:f3:76:e9:08:
         22:71:0a:a7:c4:b8:f4:fd:31:94:41:e4:ea:3f:20:41:10:61:
         61:c3:99:c9:e6:d1:93:fd:e3:08:7e:3f:48:75:cb:b9:db:a4:
         87:f1:a1:b7:a7:b1:3a:68:72:2c:24:cc:b0:a0:d0:64:06:12:
         87:3b:3e:0f:b9:c2:96:6e:49:1a:0d:32:da:c6:59:5c:53:e6:
         8a:9b:2e:8c:f4:8b:9c:91:37:07:32:37:40:44:4b:2b:40:96:
         6f:41:db:a4:bf:35:41:db:81:e8:5a:2d:b0:22:24:b0:74:b5:
         a1:11:57:03:7a:b1:2a:df:13:90:c6:74:c4:1c:5e:c8:ec:11:
         cb:07:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----