Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File:                     c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier:          +Y3UMwMUHB5SZGougNG1zEEmYGuVvhI0rfVz4upPn7o=
Subject key identifier:   07:20:A9:0F:99:25:D6:5D:E0:F7:5F:34:22:55:E2:A1:A6:5E:CB:23
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer:       /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial:       01962E986BC682FDE6B381F7C0E719849479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: 1ajM3bx/JcOlRKo/aaakjPJDdU7owC4srSqIIF2Qj6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6b:c6:82:fd:e6:b3:81:f7:c0:e7:19:84:94:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=0720a90f9925d65de0f75f342255e2a1a65ecb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:e1:8e:a6:42:de:71:44:9c:5b:89:04:60:
                    d3:7c:20:d1:c7:de:86:de:f9:32:23:89:54:a7:35:
                    3b:a8:af:f5:c2:01:a6:83:87:a8:a1:7f:47:de:19:
                    2d:51:43:c1:b4:87:f5:3b:d8:5a:5d:22:b3:da:0d:
                    73:a5:ed:70:0b:4b:33:1e:46:6d:8f:0e:50:4e:a6:
                    14:6a:f1:6d:32:8b:3d:83:9a:17:b8:5d:08:99:22:
                    46:25:e6:fa:f8:57:cf:89:7a:7f:ff:b9:f6:df:f8:
                    f5:3b:10:e4:5c:6a:1c:6e:f2:65:fd:41:51:2f:14:
                    b3:b5:ff:c2:81:f1:ba:26:0f:20:9b:13:f3:83:91:
                    1c:b2:9d:46:29:74:02:f4:09:ef:10:b7:6c:d7:40:
                    ea:ca:1d:4d:12:dc:90:4c:8f:1d:5a:b5:b8:51:b3:
                    b8:21:82:49:6b:cc:0d:16:26:2f:6a:61:8f:be:33:
                    3f:3e:17:7f:f8:3a:fd:e6:4e:44:48:ad:6a:ee:30:
                    2a:7e:80:7a:ca:ac:01:de:90:ea:96:03:e7:5b:7f:
                    b6:d1:45:1f:29:bc:7d:24:eb:d6:55:5a:c0:28:4e:
                    17:ba:0e:15:05:e8:a4:5f:fd:1c:be:91:e6:86:91:
                    84:e7:93:74:fa:d6:7b:c4:ae:32:2f:8b:56:4e:06:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:20:A9:0F:99:25:D6:5D:E0:F7:5F:34:22:55:E2:A1:A6:5E:CB:23
            X509v3 Authority Key Identifier:
                keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:e2:8d:2b:64:37:ef:30:94:df:1d:c2:8a:a2:09:c8:4a:
         94:63:f8:1e:d5:80:9a:0e:5c:e4:ec:91:f2:8b:13:7d:fc:74:
         22:c9:50:e5:26:aa:ce:e9:93:9b:55:59:60:53:44:8f:d3:9e:
         9b:76:4b:6c:d6:14:35:d8:6f:8d:13:39:bb:9f:c2:23:3c:0d:
         23:de:0e:3d:1e:cf:c3:24:cc:e3:04:70:f9:43:43:0b:92:ae:
         8d:61:0e:a6:da:55:ca:86:b0:56:0d:85:0e:ab:f2:b8:bf:86:
         ae:44:16:62:14:2f:b2:37:46:55:84:05:e2:d0:12:87:c0:7d:
         18:36:97:c1:5b:aa:97:6c:62:37:7d:8c:f8:48:5f:87:50:82:
         fa:10:39:f0:92:20:9b:8c:5c:8d:65:55:0d:10:38:e0:ce:78:
         52:1c:d3:38:a1:75:4a:0b:01:c8:bb:63:91:71:06:3a:39:f3:
         2d:98:7c:7d:db:23:f2:bc:3c:1b:ca:41:49:81:4c:71:9d:54:
         82:33:a5:e2:77:2c:a4:1a:cf:9b:48:65:5d:73:93:08:2f:91:
         4f:57:48:cb:6f:73:57:ad:22:85:19:f0:96:77:2a:3a:ff:bf:
         b4:99:ce:c5:eb:4e:b8:13:9f:6d:51:3c:a6:ba:19:6b:a8:6d:
         1e:db:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----