Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File:                     iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier:          1bBBUHepJnlVAosRJQBXDK/vMnGdrh1XgFXj33sBuso=
Subject key identifier:   7D:BD:52:65:D7:C8:E0:4A:53:5F:E6:6B:63:56:1C:D8:8F:84:AF:86
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer:       /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial:       01962F743C20BBE72EE013FDC78DDF800528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number:          1317
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: md42sHcawmdlnR/lAfETdWkinhYk55fsXO0F8/uCPLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:20:bb:e7:2e:e0:13:fd:c7:8d:df:80:05:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=7dbd5265d7c8e04a535fe66b63561cd88f84af86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:46:46:18:cf:9f:3f:f7:6c:f0:47:33:ba:
                    51:57:f2:d0:02:bc:f2:34:ca:a1:bf:c5:98:00:c5:
                    19:6d:cd:fd:7c:e2:d2:ca:09:f5:c4:ae:be:f6:d9:
                    6f:df:c4:29:b4:37:c4:a8:53:d1:42:12:84:a6:96:
                    f7:29:58:e6:50:67:48:13:0c:79:78:b1:98:22:e7:
                    b2:17:1e:e4:1c:3f:c7:7d:79:11:ef:18:03:fb:b7:
                    cc:ed:c2:67:39:a5:3f:6d:28:61:81:3a:5f:71:d2:
                    01:58:88:54:97:13:5a:2d:22:13:2e:30:5c:5b:07:
                    0b:ae:99:1b:56:a9:35:92:56:6a:f1:2a:5b:a2:71:
                    f8:bc:9c:0b:f9:45:2d:ae:2d:fc:3c:1f:f5:ae:03:
                    25:bb:5f:e3:26:c9:d9:e0:2a:f1:d3:91:2b:ce:25:
                    43:82:10:01:73:4b:bf:77:40:07:58:94:46:8b:7f:
                    a9:65:a0:47:ba:8a:1e:f4:aa:9f:11:49:70:48:fb:
                    2d:7a:c9:95:ba:a3:80:82:51:79:4f:aa:1f:f7:c3:
                    29:12:f9:6e:0c:49:91:09:49:8c:d8:47:ce:a5:99:
                    89:0d:cc:91:1b:8d:35:73:47:0c:0b:01:e1:06:d6:
                    15:16:76:54:47:ce:b8:ee:0e:bb:e4:a0:37:e4:e7:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:52:65:D7:C8:E0:4A:53:5F:E6:6B:63:56:1C:D8:8F:84:AF:86
            X509v3 Authority Key Identifier:
                keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bb:0b:1b:2e:ee:d4:b1:23:78:ac:38:58:a4:3f:80:d3:71:
         f9:51:70:16:0f:36:0b:26:08:cf:c1:a5:8a:44:02:94:60:cb:
         0f:9d:09:d9:ca:ed:f0:34:1d:e4:6e:2a:9c:ec:6c:fd:02:e2:
         43:41:68:29:e5:2a:4e:c2:f2:9a:b3:fc:79:95:93:58:88:38:
         ad:02:00:37:7c:5f:b9:ee:ef:13:6e:cb:9b:80:4f:fb:36:24:
         12:f6:5b:81:90:e0:ab:af:2c:4f:9c:df:09:4b:86:e7:63:8f:
         e6:64:b3:89:95:43:42:2e:81:f6:73:43:4c:6c:95:6d:01:6f:
         5d:0d:14:21:b1:2b:15:3b:40:ef:a7:46:52:00:21:84:ef:d8:
         20:76:e0:46:60:e4:79:22:5c:ba:74:5b:ee:48:9b:38:82:4b:
         d3:21:3d:50:04:64:c6:06:ff:66:09:0f:fc:85:f0:9f:ef:a7:
         e4:65:54:8b:6b:b4:fd:ad:2b:b2:f6:8c:4e:8e:8d:fa:af:e7:
         f6:9c:3e:04:01:70:4e:79:3c:c2:57:19:75:59:6f:c7:2a:4f:
         e2:ce:a1:26:8b:f9:75:5b:38:83:b3:54:ab:41:5e:ad:92:f8:
         fd:3b:59:34:55:60:16:93:89:b4:28:19:96:12:3c:db:53:d9:
         0f:85:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----