Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File:                     Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier:          +2x2dINECtjT//KXvB/g3L7D0b36jqSn+rjkSR3CNOk=
Subject key identifier:   A3:4E:AD:21:13:CE:F8:2B:D5:46:88:28:33:C6:D1:CA:5E:CD:C8:92
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer:       /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial:       01962F06D4DFC715C907E10002DC3BFCB559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number:          0486
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: XvbD0xHgiO6i+KVFOoKKv8F22FIEQPS6XtHsg+uaGvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:df:c7:15:c9:07:e1:00:02:dc:3b:fc:b5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=a34ead2113cef82bd546882833c6d1ca5ecdc892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:08:ce:73:93:5c:7a:e0:df:57:0c:63:d0:
                    a0:7b:b8:7b:5c:7c:a7:db:8c:19:a7:2b:5f:56:d8:
                    70:ed:e9:ae:b4:2f:c3:7e:26:d9:00:67:24:c7:fe:
                    98:4d:31:05:dd:ba:10:1a:8b:27:ed:8a:63:9a:69:
                    f9:9e:6a:c2:0a:02:38:a2:01:14:a4:5d:19:e1:16:
                    d2:1a:64:a5:ff:31:75:6a:88:1d:b9:3a:77:81:41:
                    b9:29:59:e5:72:8a:1a:37:9c:fb:c6:63:c1:55:b9:
                    a1:a1:d8:d6:3a:58:47:d4:5c:3e:ec:20:22:66:b0:
                    d8:89:f2:f4:9b:5f:96:07:c9:3e:10:45:59:cc:30:
                    31:f5:30:18:e1:06:27:c1:3f:b8:10:c2:f9:75:93:
                    52:07:0d:8a:e9:41:97:83:79:da:76:24:81:bf:90:
                    cb:e2:a2:bd:4e:12:98:33:b4:dd:b5:ac:d4:f3:07:
                    4b:5b:51:76:22:9c:34:23:59:b8:8e:11:69:45:42:
                    15:95:c7:ef:08:00:95:5c:a7:46:e0:a4:18:5f:fe:
                    fe:26:09:cc:9c:0c:2f:d9:c7:d7:98:59:a0:29:fb:
                    1a:b7:77:3a:bc:ae:6e:93:d0:31:f7:32:91:61:75:
                    cc:28:5d:87:5d:72:38:36:de:55:79:19:48:62:2e:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4E:AD:21:13:CE:F8:2B:D5:46:88:28:33:C6:D1:CA:5E:CD:C8:92
            X509v3 Authority Key Identifier:
                keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:d6:9f:ca:f7:05:32:e8:31:c1:02:43:aa:65:01:66:48:
         06:33:82:56:46:f9:5f:a9:60:ca:bc:31:80:bc:0c:91:42:a3:
         e8:8f:d4:b2:7d:0d:6f:38:66:7c:8d:ff:e7:ef:89:77:07:f1:
         91:6c:96:82:ef:59:26:4a:30:f7:ed:9a:48:c9:b1:4d:4d:6b:
         52:99:92:08:ed:1e:15:b5:6c:a3:b4:bc:62:f9:4c:a4:ed:d0:
         7c:aa:86:6b:a2:f2:54:5b:e4:ad:1c:1a:ff:de:26:3e:e8:dd:
         c5:03:4c:71:5e:88:42:27:58:ff:1e:4f:25:ef:e9:64:54:e2:
         30:6d:3c:e4:19:4d:3e:71:23:b5:cf:07:07:51:36:81:7e:de:
         33:a4:19:34:59:c4:9f:97:a6:16:a9:c9:df:c4:e7:c6:9e:ae:
         e6:95:cb:44:52:87:45:cb:51:6c:61:6d:d4:e8:34:2d:7b:02:
         db:e0:53:2a:0a:09:1f:26:6f:38:f0:1b:b2:32:6c:a1:53:37:
         89:d6:fe:86:7a:6f:cb:d4:1c:8a:be:c6:e6:59:f8:47:eb:49:
         4b:5f:db:f1:1a:58:30:69:02:a1:12:e0:20:2b:64:c1:78:56:
         a7:36:f6:99:d6:86:3f:87:ce:f5:e5:01:30:17:3a:af:8d:53:
         2d:81:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----