Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File:                     i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier:          NPfkDe85hgM6mTM2M+XivNFXGalZV1YMd2yewMX4rBQ=
Subject key identifier:   2F:8E:9A:D0:BE:06:12:A8:3E:9E:C1:29:98:F2:C0:A6:40:93:54:E9
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer:       /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial:       01962F7426FBBED940FE9DB8A10D38565896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number:          1337
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: c5KbtkVIOKAvzAO96kVHotquVGWnFjGoaifVc1f+8Iw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:fb:be:d9:40:fe:9d:b8:a1:0d:38:56:58:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=2f8e9ad0be0612a83e9ec12998f2c0a6409354e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:90:95:ae:62:fe:fb:b0:5c:89:d1:7a:71:
                    a5:2e:58:e4:90:bd:f9:05:eb:67:dc:3a:4a:f6:92:
                    68:d2:0e:01:0d:d2:c1:45:94:48:58:c6:3f:44:80:
                    e8:47:a5:b3:7f:94:5b:84:42:5a:c9:46:af:3a:07:
                    44:b4:b8:b1:f3:6d:d1:f1:ce:93:57:eb:a8:27:2c:
                    8d:e0:b2:17:08:fc:7a:59:3b:9c:1d:f9:22:ed:27:
                    1e:e5:f3:3a:54:5c:37:bc:28:a5:46:2f:8b:96:48:
                    df:94:93:ce:3f:e4:a3:67:d7:86:7d:48:0f:73:78:
                    75:72:14:25:84:74:b3:a0:db:ab:85:47:2d:af:af:
                    9c:04:d4:c7:4f:67:65:e9:2f:a7:54:b3:b0:35:19:
                    62:56:ac:d9:7b:72:58:6a:bd:25:71:15:bd:a0:07:
                    f8:56:dc:c5:56:eb:05:3a:7a:e3:09:5d:0d:ef:5d:
                    72:b2:03:5a:a0:1c:3a:56:7e:cf:be:98:52:fd:62:
                    e9:9a:21:19:e1:29:8b:de:8c:44:91:c8:53:cc:68:
                    8d:c5:ac:ae:cd:7e:75:7b:11:58:db:f5:ef:01:bd:
                    56:11:08:4b:81:ff:ae:a2:37:ad:30:7d:8b:ae:d3:
                    d8:70:eb:39:2d:fc:7d:b7:39:6c:7f:43:39:19:18:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8E:9A:D0:BE:06:12:A8:3E:9E:C1:29:98:F2:C0:A6:40:93:54:E9
            X509v3 Authority Key Identifier:
                keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:71:fa:2c:b3:15:c4:6a:ce:24:74:e7:f7:a2:9e:15:0c:
         64:95:24:36:74:88:9c:82:e1:5b:bd:5c:a1:09:c2:4e:a3:22:
         89:2d:fe:7d:7f:5d:6c:f5:23:1c:e3:a3:7f:40:f3:65:fc:d8:
         8b:8d:26:e8:2e:3c:11:ee:26:84:19:37:e6:d9:f7:63:2b:f7:
         d0:8f:f4:ee:36:df:fe:ab:39:04:b2:94:f9:6e:70:29:cc:f5:
         71:71:60:3d:c8:ea:89:2a:c0:cb:84:69:92:77:20:b0:04:f5:
         90:d3:77:ec:45:9d:23:f5:b8:8f:88:52:84:14:34:ea:43:0b:
         d4:0c:63:8c:49:70:6e:18:4a:7b:c2:f4:37:ed:c1:42:b1:ce:
         69:37:4e:00:6b:f0:54:e1:cc:c4:cf:3d:5d:d9:c9:a6:49:e4:
         4e:6f:03:9f:bc:56:a3:8d:c5:9c:26:09:ab:99:8b:c7:2e:07:
         0c:08:21:f9:47:1d:ee:59:78:48:42:5a:f7:c3:d9:16:88:f1:
         59:49:7a:c3:aa:08:96:d0:e9:3d:d5:32:96:61:a6:0c:71:c1:
         2f:d8:49:87:4c:79:a9:58:d6:fd:a4:65:4a:3b:75:60:e0:06:
         05:e3:71:44:da:3a:72:70:54:8b:85:5d:c5:48:6f:bd:4e:66:
         f6:d0:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----