Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File:                     INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier:          XtjEnyHw+fmloi5NpXWDj9M2CE19NSyuzv3XsQmjpkQ=
Subject key identifier:   47:57:88:F2:75:18:E9:96:36:EF:04:70:B4:BA:ED:4C:89:64:C0:71
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer:       /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial:       01962FAB7D19DB4D19380BF9EB10AA6DD6D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number:          02DE
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: EdVA50HqTS+cSwyYVArC8G4+cQID2bVoxmab6sGipWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7d:19:db:4d:19:38:0b:f9:eb:10:aa:6d:d6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=475788f27518e99636ef0470b4baed4c8964c071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:76:0a:6a:70:03:27:2e:cb:96:47:e9:64:
                    25:c0:0b:8a:7d:59:0b:9b:8f:63:c8:8d:35:6c:1d:
                    e4:84:21:70:b0:52:3c:9f:a5:1b:76:25:eb:e9:45:
                    73:89:bd:ef:6c:dd:3c:f0:9b:bb:12:87:47:fd:3d:
                    b3:5c:c4:ac:f9:a5:70:c6:a8:0a:cf:e7:db:d6:1b:
                    65:7e:8a:ed:aa:7f:85:ac:e9:da:84:fe:fe:a3:e7:
                    17:81:94:ee:9d:bc:6f:09:72:eb:3d:b7:d9:10:3b:
                    e3:07:b3:28:76:03:e1:66:11:f8:f9:c3:81:16:36:
                    5c:f5:f8:42:bc:0e:9e:43:32:11:ab:02:52:94:4e:
                    82:09:d0:d4:e9:c3:b0:a5:e3:da:12:c3:5a:d5:3d:
                    7d:56:2a:1e:49:84:f2:15:bc:8b:6f:58:3e:2d:d5:
                    5b:d5:95:dc:9e:c8:f0:ef:06:1b:76:83:a9:1a:e9:
                    c0:fd:4a:f8:8d:dc:3b:04:3c:64:dd:d5:f3:1e:cc:
                    3f:54:f0:c5:ad:e9:60:6c:f4:a9:67:dd:23:07:c1:
                    0c:9f:7f:c5:ed:00:6b:e0:28:20:1d:e1:d7:3a:04:
                    3f:08:bd:29:92:44:51:8f:78:90:e6:95:02:84:e4:
                    7e:21:39:62:91:a4:6b:35:db:d0:2c:0b:d0:3c:92:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:57:88:F2:75:18:E9:96:36:EF:04:70:B4:BA:ED:4C:89:64:C0:71
            X509v3 Authority Key Identifier:
                keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:8f:00:89:e5:2b:17:33:aa:6b:e9:a9:1c:c3:fa:c2:2f:
         5c:1d:1b:11:8f:50:af:93:06:78:07:67:44:9b:2e:3e:76:a8:
         45:c4:ad:fa:52:4c:69:c6:db:bb:fa:6c:a3:48:e9:b3:ae:8e:
         d2:18:4c:dd:9d:23:4c:b8:90:6b:18:df:49:51:5a:f3:ad:54:
         04:0c:f3:9a:5e:eb:40:ab:7c:38:96:b6:be:56:9b:5d:c5:fd:
         28:28:b0:78:41:81:98:89:93:60:09:59:45:5b:cf:1a:a6:ff:
         70:43:bd:d8:d2:2a:b5:53:e4:0b:65:6c:b4:91:4c:7d:7e:35:
         3b:76:9f:c1:ce:d9:5f:bf:0a:57:51:e7:61:00:0c:71:95:ed:
         72:25:83:84:3d:a6:68:58:a9:09:20:9b:5d:42:dd:ac:6e:4b:
         89:f6:26:41:37:e7:d7:e2:b4:3a:36:74:01:7e:83:4a:03:85:
         b1:70:ba:b4:90:67:63:c2:22:99:07:6e:a2:a3:0c:b6:35:36:
         83:56:21:6c:de:90:16:28:19:fd:c3:c6:5d:66:98:2d:77:0c:
         1d:ac:7c:28:cc:d2:ab:52:08:41:e6:a1:31:e6:8d:08:cd:1c:
         dd:99:26:1e:9a:b8:19:96:f6:7c:98:7f:23:6c:c1:d0:15:cf:
         c5:c3:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----