Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File:                     AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier:          SyUDd8N2isUVixK3DzkLVQaP33c/lT0eC62ibtLneDA=
Subject key identifier:   8A:9C:5E:A2:73:75:60:37:60:DD:A7:65:4A:32:2B:D5:A0:F7:BA:0C
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer:       /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial:       01962F06FB3E722AE1F474BA0751A4D79B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number:          0960
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: wphBdC1Ar4NMLmTuuZHDf7XbSgoo7TptfbGhFmuYezM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:3e:72:2a:e1:f4:74:ba:07:51:a4:d7:9b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=8a9c5ea27375603760dda7654a322bd5a0f7ba0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:ff:55:9e:ec:91:05:ec:da:71:f4:eb:db:
                    a4:07:cb:7c:13:80:d3:c5:32:3e:79:e3:d7:e4:8b:
                    1c:eb:69:6a:8a:df:30:4d:e9:ad:7f:46:76:55:cd:
                    a0:a6:cc:56:1c:17:da:14:80:1b:ae:f2:f2:e3:03:
                    42:36:2c:ea:0d:88:5e:14:1d:11:f8:f9:36:51:37:
                    d4:4d:0c:75:be:2a:13:9a:b1:f6:1c:44:0c:2c:a3:
                    e5:63:db:cb:a1:c0:87:ff:b9:54:5f:64:b2:4c:85:
                    02:ca:06:1a:87:69:39:1a:cd:e5:ec:27:fc:c4:72:
                    b2:64:09:90:19:40:1e:cd:a8:22:eb:7f:95:cc:ed:
                    28:05:34:04:65:53:6d:02:69:b9:e5:cd:68:75:4a:
                    18:5d:56:62:76:17:4f:c6:2b:4e:c3:d5:b6:98:f9:
                    f6:d9:17:e2:ea:ef:d8:56:bf:04:c1:d4:74:4d:04:
                    09:5c:4b:65:7a:f1:c6:c5:29:f9:f1:7b:c4:98:d3:
                    2e:53:9d:89:0d:07:76:dc:23:8c:48:b0:e3:a0:f2:
                    a5:26:36:85:bc:06:41:24:6c:05:f3:e2:98:69:e0:
                    c5:0f:5c:17:75:74:79:54:04:b3:b5:56:78:b4:d6:
                    e1:3a:3d:98:df:5d:e9:96:03:48:04:b6:e3:67:ce:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9C:5E:A2:73:75:60:37:60:DD:A7:65:4A:32:2B:D5:A0:F7:BA:0C
            X509v3 Authority Key Identifier:
                keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:56:3a:3e:29:de:b4:e8:b2:94:b4:3e:7f:9d:9a:fc:44:
         d4:c4:76:a8:89:6a:d0:61:1b:b8:9b:30:5e:58:11:22:05:46:
         ea:12:18:d5:7d:b2:08:d3:28:af:91:bf:11:4b:9f:3e:90:a9:
         3d:ee:22:a1:f5:17:a6:34:f6:d4:99:fa:22:1d:21:24:6d:6e:
         c3:85:1c:5e:15:8f:48:1d:5a:2f:0f:c5:4f:4e:77:cb:77:9c:
         ab:b1:b9:4a:e8:5b:a8:69:8d:35:da:06:fa:74:f7:80:17:b4:
         9c:63:40:3c:3e:a1:a0:6d:dd:eb:6a:b1:30:d4:69:de:b4:d7:
         6d:d4:28:c1:5a:d7:45:94:7a:63:bf:2f:95:59:33:fe:24:ca:
         92:92:51:31:d9:c6:f1:9e:f2:57:8e:5b:80:08:a4:e4:e1:6d:
         83:f0:c9:f2:05:60:94:4b:cb:2a:d1:09:75:76:cf:1b:f8:25:
         c9:95:c3:bc:22:64:71:29:08:3f:c3:40:ac:35:45:de:75:5a:
         cf:ae:3d:b2:de:d8:f3:e9:55:1c:b9:99:59:a4:de:87:fc:da:
         58:00:05:90:0d:78:19:04:d7:0e:ad:b4:a8:e4:1c:2f:83:1f:
         c2:f1:1d:4f:a5:c4:3a:1c:b2:87:3c:01:dc:96:08:07:26:b0:
         82:28:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----