Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File:                     2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier:          beaPZ0ScKVgLSdekYiT2R7RjWevg1zWdh5CSTZQzbNs=
Subject key identifier:   22:16:9F:1B:4A:F1:1E:1B:B4:B5:05:33:22:CF:92:68:60:11:9B:AF
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer:       /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial:       01962F74389699E9A08E3B02F9230C92BD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number:          0CB4
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: omB1LoQmmqYVmMPbzJga/cmbbrKXdcYWfPI68WoDI8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:96:99:e9:a0:8e:3b:02:f9:23:0c:92:bd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=22169f1b4af11e1bb4b5053322cf926860119baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:87:37:52:44:47:43:60:2e:ab:7b:c3:31:
                    dc:4a:c1:3d:34:09:1d:77:c8:1a:58:d6:a1:3d:1b:
                    75:9a:b9:49:9e:f5:ec:0e:88:65:0b:6a:10:e6:57:
                    17:0f:e3:d0:10:7b:ca:b4:da:e8:46:b8:9a:4b:3c:
                    ee:40:2f:d3:0f:aa:11:37:3b:f6:a2:60:ac:1a:3b:
                    70:c2:ef:3e:84:4f:1d:fe:02:8f:24:9f:75:e7:51:
                    55:8f:1c:1f:de:5b:5c:df:79:47:55:cd:80:eb:90:
                    5f:63:43:d8:fa:10:d1:b0:9b:cc:1e:1d:9d:38:40:
                    ee:39:b6:44:2b:13:20:99:3a:1d:f6:d2:bd:4b:b3:
                    b7:98:bb:91:1e:6a:c9:70:36:cb:a1:7f:25:b8:e4:
                    b5:f9:e1:55:65:12:bd:ba:ac:79:fc:0f:34:c9:3e:
                    0b:a3:9f:04:f9:4b:b7:c9:e2:2b:14:82:f2:7e:62:
                    45:4f:d7:fe:99:e6:8f:8e:31:39:6a:25:ac:4b:a4:
                    82:02:18:38:12:c4:3c:78:ae:aa:0a:ac:fd:63:94:
                    9d:b8:a2:99:50:17:07:07:b7:e4:30:b9:f0:d0:16:
                    af:f0:e0:b9:eb:f4:98:05:74:29:45:b8:c6:47:e8:
                    f8:15:32:a1:bc:48:68:23:33:cd:d5:d8:39:fc:38:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:9F:1B:4A:F1:1E:1B:B4:B5:05:33:22:CF:92:68:60:11:9B:AF
            X509v3 Authority Key Identifier:
                keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:1a:12:a0:23:42:65:fb:9c:0b:a1:43:18:c7:89:4e:7a:
         f0:63:85:43:4c:a5:7e:1f:f6:27:59:71:66:67:d2:d8:a7:bf:
         7b:21:d0:45:99:62:5c:ae:e8:28:32:11:b4:bf:f9:59:ea:da:
         32:a2:fb:3a:de:e6:35:b8:88:4c:32:31:31:5c:4b:35:33:6a:
         97:2c:ea:e1:e5:c6:f2:3f:de:87:9f:17:b6:76:00:5b:dc:99:
         29:80:85:16:46:2c:5a:f8:f1:6e:b9:66:f4:c5:cd:77:05:c5:
         94:05:06:e6:eb:5e:20:9f:06:1a:d1:02:66:8d:10:23:e4:92:
         8f:e9:63:13:d2:a3:04:ad:44:97:3e:35:23:4e:7e:0c:b2:5f:
         8b:7c:18:55:69:c3:57:f1:3b:da:57:2a:12:97:f7:69:7f:24:
         3a:7c:b7:a9:83:e6:e3:cc:00:75:b2:52:c1:26:d4:76:da:04:
         ef:45:5a:a2:ff:a7:06:88:f3:1e:6c:f4:58:19:56:e5:ea:13:
         48:3b:85:12:f0:e6:63:fa:bf:e5:aa:6c:c6:e8:96:51:98:d1:
         11:a4:13:6f:46:95:00:7c:8a:36:ba:86:91:27:a0:3c:31:33:
         72:7c:1b:2c:d0:9a:35:54:7e:b7:0e:0d:67:41:c7:43:d0:4d:
         98:42:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----