Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          yLMcyi6L9e7CeDoOklI2jWGucMyH4iasftP7qOoZ7h4=
Subject key identifier:   6E:8E:9D:64:2E:7E:AD:EC:06:D9:B5:B1:A8:70:4A:66:3B:9B:76:31
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       01962E99380A92CD00D3525FCEE5BC08B07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: AoLGg4GEijcRmWZWbt/NCQl6ofgDP6/vsRymmJUQ5VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:38:0a:92:cd:00:d3:52:5f:ce:e5:bc:08:b0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=6e8e9d642e7eadec06d9b5b1a8704a663b9b7631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:6e:bb:6c:94:f6:30:7b:df:57:2f:cd:7f:
                    35:48:b1:57:bd:f1:93:40:ed:04:fe:ef:39:f4:0d:
                    1b:79:6b:f4:8b:83:29:39:9c:25:11:5c:22:38:90:
                    2b:57:cb:39:04:3a:0f:ad:e8:e3:dc:f6:67:46:6e:
                    4d:32:6a:ce:16:09:65:fb:e3:86:ac:b3:b8:8c:5c:
                    46:b9:d9:e6:d9:20:90:c2:06:d8:9a:64:d8:71:3e:
                    81:e7:49:63:9a:98:59:69:e7:e7:4a:33:c6:33:ec:
                    21:13:fd:a6:0f:6b:b4:72:97:12:f5:a7:57:2f:3e:
                    e0:89:ec:d1:62:0e:f7:f1:c2:d7:d5:2f:37:00:1f:
                    2c:99:7f:d5:e8:7d:7e:8c:03:4e:c4:d5:5b:12:18:
                    10:d8:d3:0d:62:84:6a:4b:70:09:18:9f:ab:d9:d9:
                    de:a6:93:23:42:06:dd:86:e0:81:29:07:ed:2f:c9:
                    39:a9:61:a6:18:09:1e:b5:39:13:1b:a3:cc:b4:4e:
                    e1:aa:fc:2a:4d:80:3c:bd:cf:cf:26:3b:7f:06:3b:
                    60:96:b4:19:0c:17:b1:af:89:b6:14:fb:6b:39:8c:
                    a0:c5:ef:fe:72:b1:0c:d8:bf:e6:e6:65:7d:50:df:
                    1b:76:83:6f:41:5e:62:46:7b:9f:c0:ef:e7:30:2f:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:9D:64:2E:7E:AD:EC:06:D9:B5:B1:A8:70:4A:66:3B:9B:76:31
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:99:86:53:1d:aa:99:0b:c6:70:6b:3d:a5:09:3b:0c:1f:
         88:43:15:78:f2:7d:58:3f:9e:6e:2b:da:d2:24:d3:31:75:49:
         b0:b3:3d:ff:2d:a6:a2:64:66:42:a3:fe:ec:42:3f:db:ba:01:
         69:d2:5d:42:e7:92:c0:60:68:ca:84:4c:3e:67:bc:b6:95:5d:
         2a:52:48:47:b7:32:f8:1d:8c:6b:10:76:fe:35:2e:03:4c:11:
         e6:64:4a:78:25:87:74:14:86:1a:bb:79:f6:11:4a:e4:ad:0b:
         0e:f8:51:5f:a6:40:7a:4c:0b:6b:57:ea:a7:93:88:3b:e9:ef:
         68:58:f4:6a:ac:e0:c2:a2:36:ab:78:5c:f4:15:9d:be:1a:95:
         40:29:e6:c1:a3:e1:7f:7b:cd:1c:2e:5e:28:5e:08:db:13:9f:
         60:d5:af:3f:97:05:fb:98:4d:1b:c7:d0:c5:2b:b5:ed:71:d7:
         2a:a0:f1:43:7c:a3:21:f3:17:cf:9c:05:82:07:58:b9:34:d4:
         aa:b7:da:1c:2a:11:c7:9e:9e:dc:8e:72:71:97:07:89:e0:a7:
         4c:1d:b9:65:1f:f5:ae:3c:90:91:4f:c5:05:cb:88:26:9f:9b:
         3b:e4:b6:c7:ab:17:2d:64:0b:31:a2:cf:d9:31:c8:58:cc:0c:
         31:19:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----