Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
File:                     hFNK68PtnHkETCI8iyXgEdq_L98.mft (raw, json)
Hash identifier:          lvYcGg1qyA0OxQOs26pE6+CLnoSpGY8LoyLlPAW9rcU=
Subject key identifier:   8B:46:63:26:A4:F7:84:96:D9:A3:62:B3:78:96:AB:4D:36:55:99:2C
Authority key identifier: 84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF
Certificate issuer:       /CN=84534aebc3ed9c79044c223c8b25e011dabf2fdf
Certificate serial:       01962F3DA5F2CF9BDC7E90D72D9F66C61016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: hFNK68PtnHkETCI8iyXgEdq_L98.crl (hash: Q7dhCNsyE7QIOi8/X/xCI4t3rOfXgNkZSiFpFELGyMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a5:f2:cf:9b:dc:7e:90:d7:2d:9f:66:c6:10:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84534aebc3ed9c79044c223c8b25e011dabf2fdf
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=8b466326a4f78496d9a362b37896ab4d3655992c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:89:77:3e:fe:ea:4e:e7:2f:78:31:77:f3:
                    2a:8b:60:53:b7:e5:08:7a:23:06:01:65:ad:7b:04:
                    7d:94:e4:e9:c9:9b:8d:1c:b7:1c:cc:9f:88:7c:64:
                    88:da:ef:04:2f:a4:ab:14:4d:3c:a0:41:61:48:d3:
                    cd:c3:e3:59:e1:d7:eb:88:e1:81:f4:fd:ba:78:f2:
                    aa:53:7b:1e:ec:cf:3c:3d:73:40:43:84:76:a0:7c:
                    e1:ed:78:38:ba:de:07:b9:d3:29:4f:85:91:52:b9:
                    95:b4:6a:57:76:56:2d:bc:91:d1:23:fd:c5:ed:06:
                    bb:31:59:55:5f:d0:a7:a1:de:df:55:a1:24:84:81:
                    38:4c:db:2c:4b:12:e1:09:bf:20:6f:b0:cd:55:a3:
                    98:3e:91:ff:cb:66:83:13:09:df:a5:a2:7f:01:12:
                    8f:29:a6:1f:60:8e:23:45:99:8f:d4:4a:2b:ca:40:
                    68:44:df:cd:ef:c0:af:8f:a1:08:80:ce:34:84:82:
                    bc:bb:0c:69:51:b8:84:66:fd:05:bf:c7:03:bb:17:
                    61:33:21:e3:b6:d7:b1:b5:5f:24:a7:ab:71:84:bd:
                    a3:07:dd:40:b5:73:fa:c4:4c:e9:26:cc:8d:38:86:
                    66:ab:ee:ca:3b:64:e5:0f:82:b2:40:ee:71:f5:7f:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:46:63:26:A4:F7:84:96:D9:A3:62:B3:78:96:AB:4D:36:55:99:2C
            X509v3 Authority Key Identifier:
                keyid:84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b5:4d:d5:86:2e:6a:7a:b3:f7:e9:ab:60:50:a3:cd:94:03:
         29:cf:c4:b0:18:82:68:30:64:53:91:ee:6c:c4:b4:5d:35:c8:
         60:c6:c4:f6:9c:63:65:c4:35:95:af:4c:4f:83:e9:69:27:f8:
         a1:41:a3:59:11:70:ce:d8:d1:94:f7:dd:77:62:e8:01:df:6c:
         c3:28:1c:7e:42:3f:ef:18:a7:eb:15:e0:ff:21:31:5f:59:47:
         f2:2c:4a:14:bd:17:36:b1:ea:79:dd:63:45:63:40:52:a0:ef:
         d1:9f:92:24:b9:1b:a6:3c:57:47:d9:a1:cd:2b:ed:73:03:66:
         89:0c:2b:74:f7:87:21:86:9d:82:13:e4:67:e4:39:47:88:9d:
         5d:29:cd:41:97:8a:59:09:9f:0d:36:60:0b:b5:aa:12:35:90:
         c8:b0:96:d8:c9:d0:05:b6:ce:01:3f:97:f0:54:13:6b:fb:da:
         61:65:82:c7:c0:78:1d:ef:39:52:5f:f3:03:09:55:b4:70:ac:
         4f:8f:97:e1:fa:ab:86:b8:e0:19:6a:ee:0b:c2:44:96:1d:6a:
         5f:88:d5:30:a6:ca:97:ae:6a:c9:d1:ab:1f:17:80:69:8e:57:
         b8:1e:45:6a:27:7e:ef:50:7c:25:5b:5f:c0:ef:c3:7f:4e:92:
         50:4f:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----