Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File:                     MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier:          Wxe/EcD87NZ0EFXHtCVaiPSCtav9Z4PlEVrwBiygVco=
Subject key identifier:   0C:21:A9:4A:45:CF:03:9E:02:51:6F:67:BD:DA:09:B2:5B:C2:EA:82
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer:       /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial:       01962E989B17E5C39B0C1D5E218870304403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number:          08D0
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: T+xn3gcj0s57rbTzL/x2ZovPaP5ojnzLfRfCqn/y1Xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:17:e5:c3:9b:0c:1d:5e:21:88:70:30:44:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=0c21a94a45cf039e02516f67bdda09b25bc2ea82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:a7:9d:df:b5:30:b8:d6:09:c8:17:44:1d:
                    e3:c5:7a:be:43:91:46:60:18:13:4c:eb:f4:fc:30:
                    86:7a:0c:36:25:a8:47:05:85:30:8d:4e:de:b1:d4:
                    ea:31:46:5d:3f:b5:45:dd:3d:ef:ea:43:b1:4d:a1:
                    a9:dc:ed:41:03:f2:b6:bd:9f:23:72:11:73:63:ba:
                    fd:5d:61:61:4b:cc:d7:81:0f:8f:6c:fc:6b:4b:38:
                    ae:e2:7c:9c:73:94:dd:33:96:c9:cc:86:5d:1f:09:
                    4f:5e:2e:3f:10:9b:20:5f:f8:ad:cc:b6:75:8d:c7:
                    db:cd:98:fa:51:61:e7:03:2c:da:25:40:c0:35:4e:
                    a6:1b:73:0c:88:ed:65:78:49:77:d9:a5:c1:17:81:
                    fd:13:47:2c:f8:18:4e:5e:93:88:f2:99:52:7e:74:
                    1d:70:e9:32:82:e6:97:e2:93:31:d4:fe:55:c2:29:
                    de:78:66:c1:87:b9:16:0b:7c:7d:1b:e1:c2:75:40:
                    3a:ce:4d:84:41:cb:e3:2e:58:35:bc:f6:06:93:86:
                    2b:83:87:1b:17:48:d8:54:78:07:a2:a6:16:ea:65:
                    d3:04:0d:99:6e:e3:64:c6:4c:99:52:de:de:91:08:
                    36:30:41:af:8f:66:e1:08:22:13:0b:bd:0d:26:83:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:21:A9:4A:45:CF:03:9E:02:51:6F:67:BD:DA:09:B2:5B:C2:EA:82
            X509v3 Authority Key Identifier:
                keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:da:81:55:9c:6a:c5:9e:06:4d:6c:37:32:bb:a2:87:50:be:
         98:3f:c1:81:3b:e5:88:40:81:ae:14:26:37:3f:6c:4e:83:d5:
         c2:14:4d:b5:df:b2:b6:74:f3:88:65:b2:45:8b:40:bb:e1:46:
         68:6d:ff:d6:1b:cb:6b:34:94:51:dd:41:64:2c:68:37:78:37:
         9c:f0:32:61:d4:f8:fa:e2:d1:76:fa:7e:da:4b:be:bf:df:58:
         e2:47:94:af:1e:9b:4a:76:64:b8:df:d0:b7:d2:2e:53:f9:97:
         4a:b0:9f:63:20:b2:5c:2a:e2:3a:fb:ab:0d:81:b4:b5:10:3b:
         be:d0:ad:d6:df:1a:cf:0d:7e:7f:06:63:1c:c8:a8:d8:20:39:
         ca:24:b4:9b:5c:1e:1c:d9:9d:c0:c5:5e:df:71:00:20:2e:27:
         f7:53:d8:18:80:78:6a:55:84:a7:cb:d8:7a:04:28:8a:6e:83:
         de:a0:4d:29:ad:5d:b9:b7:1d:4f:14:0a:00:d6:ca:8b:51:30:
         a9:a0:a5:1d:6d:ed:e2:9a:f9:ae:95:5a:ae:7f:d6:d0:5b:ba:
         bb:06:16:bb:c9:43:fe:b8:0d:d8:83:18:4d:6e:7a:0d:2e:bf:
         64:5f:bc:a9:3b:11:f2:58:f4:27:e4:8f:d1:0c:55:60:db:85:
         1a:d6:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----