Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
File:                     h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft (raw, json)
Hash identifier:          pIv59mTXSskbFedA9frKGExfjOxj7TWn2bdVrlJoaGI=
Subject key identifier:   A3:84:6B:73:4A:1C:85:63:B9:DC:59:B3:90:D8:7A:D5:CE:88:DD:8F
Authority key identifier: 87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
Certificate issuer:       /CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Certificate serial:       01962F74908EE4CDE65EC1417CD837BA1962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
Manifest number:          08BE
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl (hash: 5sdUc7tu6ORBopawR4OMwyJZ286FKjsDTphA5juQbdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:90:8e:e4:cd:e6:5e:c1:41:7c:d8:37:ba:19:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c0a7b43d42924917a590598b44325e4cc92ee4
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=a3846b734a1c8563b9dc59b390d87ad5ce88dd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:87:fc:0e:16:be:48:d3:64:92:0c:4f:b2:
                    55:ff:2c:64:97:df:d7:72:6b:36:86:46:33:4a:a7:
                    84:9e:0b:0f:75:0c:0c:e4:63:f8:54:d8:4e:5e:30:
                    bb:e2:10:82:f7:05:57:48:49:88:a6:00:0d:ca:d7:
                    59:d3:86:ab:0f:ed:9d:bb:86:7a:e0:e4:31:29:48:
                    43:a4:5d:73:c0:57:a9:d8:15:95:8a:01:6c:4e:2e:
                    bb:ea:2d:06:69:ee:83:e3:ae:cf:57:00:9d:9a:70:
                    95:30:67:f9:ea:fa:07:1b:af:ec:15:fc:da:60:80:
                    69:f5:98:4a:81:ba:7e:b1:b9:46:85:3e:d2:a6:23:
                    3f:a0:c3:90:9b:63:60:10:2f:19:5d:eb:47:bc:b5:
                    42:ef:4d:a1:38:2d:3d:7b:2c:46:89:4e:b9:a9:f9:
                    3c:a3:6c:9c:0a:ad:57:ad:fc:26:ae:60:a6:d4:4b:
                    80:4f:71:ad:87:e4:98:8b:d4:1b:87:8f:b5:73:0f:
                    36:b9:e3:e0:b3:94:0d:e0:e1:b1:72:3e:75:27:e3:
                    b4:24:4d:67:68:40:66:84:b1:77:f6:bd:12:81:01:
                    8f:78:34:4f:78:fa:ab:5e:84:d8:68:00:54:c4:1f:
                    22:bf:d4:58:9d:65:8b:42:35:fe:77:b8:8a:ef:27:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:84:6B:73:4A:1C:85:63:B9:DC:59:B3:90:D8:7A:D5:CE:88:DD:8F
            X509v3 Authority Key Identifier:
                keyid:87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:a3:fd:56:29:c9:8a:5d:73:e6:5b:29:00:33:a3:64:45:
         56:98:89:80:91:78:50:a0:57:63:0a:82:56:6e:f0:ad:68:10:
         8a:06:59:51:34:7d:c3:09:83:b3:d9:d2:ce:4e:3d:79:fe:cd:
         87:ec:9e:b2:aa:16:ca:45:ad:03:ae:ad:db:d3:3b:06:46:a3:
         86:68:b5:09:b1:59:16:23:c4:42:8f:59:28:28:e6:88:ea:06:
         8b:80:aa:d2:a3:09:5b:53:26:56:13:48:88:99:68:fc:69:e7:
         82:fb:cf:d6:4d:11:59:63:5d:f7:a5:76:c9:46:6a:d4:a7:71:
         48:5d:24:31:d0:d9:2f:f1:41:e7:2c:5f:e3:64:5b:0a:56:fb:
         41:88:cc:9d:03:b2:51:c8:8c:8d:82:12:82:31:3b:48:31:2d:
         e1:c2:cb:61:f0:d9:f5:3f:8c:5b:b7:0b:3a:1e:b3:8a:92:df:
         0f:c2:41:e7:9d:99:3c:7f:ce:51:cb:1d:2b:a6:aa:0f:1a:50:
         ed:ed:ab:95:17:20:68:0a:4c:6d:53:e6:4d:5e:04:30:d6:bd:
         64:40:1c:4b:10:e7:54:8e:66:10:d6:9d:40:6b:70:c2:7f:a5:
         f2:01:56:76:6f:3f:13:e5:18:e6:03:e1:89:5a:75:25:40:83:
         01:4f:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----