Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File:                     gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier:          ekr5xM+brYwfNKRBx9Xni224VkjKeYFjY3p5/L53FTM=
Subject key identifier:   0E:E1:02:17:B5:4F:1D:FC:DC:35:C6:05:DF:5A:0E:B9:9A:D8:F8:42
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer:       /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial:       01962F06764DB215C936B8FA877750D0F7E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number:          0457
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: h9QbxJpNGmfLOD1OCcjM81O1hzwByzxu9o/GVwNc324=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:76:4d:b2:15:c9:36:b8:fa:87:77:50:d0:f7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=0ee10217b54f1dfcdc35c605df5a0eb99ad8f842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:d2:e8:97:14:4e:1f:a9:7e:ca:89:13:a0:
                    cd:fc:c7:4c:9e:32:f9:2b:d5:97:a4:87:52:cd:bf:
                    88:b0:43:ff:fe:ab:fa:a2:d7:89:61:a6:54:11:cf:
                    67:a2:2c:e4:8c:6a:ac:2f:ba:1c:72:4d:8d:59:9a:
                    ef:dd:38:d3:96:89:5e:50:36:f2:41:af:5f:35:7d:
                    97:30:5f:10:3f:5f:fb:ad:28:c6:0f:a1:42:94:ae:
                    44:af:26:e6:4a:0c:09:7a:8b:4e:82:35:1d:a2:7a:
                    ad:5d:fa:c6:d6:46:a2:8a:f0:7d:bb:83:da:ed:fb:
                    16:d4:2c:2b:ce:20:d4:08:e1:46:7a:dc:58:68:6e:
                    4c:5b:19:1b:00:c5:b0:39:49:f0:98:1a:32:27:88:
                    3c:f0:39:ed:2b:6d:bb:3b:c0:63:ab:72:b2:81:a5:
                    aa:8a:cc:be:62:61:7c:d1:ec:86:54:7a:3e:fd:78:
                    68:8c:d5:20:b0:91:9a:f0:02:7b:23:cf:b3:7b:8c:
                    fb:7a:e3:2d:c6:d5:cb:17:46:38:67:2f:47:68:0d:
                    77:87:77:2b:85:64:e0:54:41:31:27:7d:ff:03:78:
                    08:ff:f5:9c:53:2c:9c:ab:16:50:cf:aa:f8:06:93:
                    cd:4b:cc:b4:13:14:d0:5c:70:2b:09:f5:38:81:f2:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:02:17:B5:4F:1D:FC:DC:35:C6:05:DF:5A:0E:B9:9A:D8:F8:42
            X509v3 Authority Key Identifier:
                keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2a:6f:64:ef:5b:1a:46:5e:62:8d:f2:f8:c1:29:a6:73:e2:
         3f:ef:77:bc:df:20:8e:8d:1e:d7:8b:1d:9b:88:3e:b7:8b:94:
         13:0e:ec:69:42:a8:e3:d9:aa:94:e6:bb:85:79:ee:bb:bc:0a:
         4d:89:81:83:8b:3b:dd:69:ed:67:3e:37:66:ef:a4:c1:0a:b4:
         fc:e5:75:08:51:d6:4c:89:7c:37:9e:c0:5e:de:07:83:61:0b:
         0e:9a:49:23:50:81:ed:af:19:48:de:2b:42:35:d1:30:ed:5a:
         5d:43:e6:77:cd:bf:a7:cb:71:9b:73:73:15:57:05:4b:f1:c0:
         52:b2:8c:f0:86:de:bf:0d:41:b0:00:a2:d7:3a:b8:95:26:eb:
         f1:48:69:aa:2f:ba:86:3e:d8:24:a9:f2:90:7a:c1:3e:91:af:
         e7:80:51:86:8b:98:3f:0a:a1:cf:00:62:16:36:ac:b8:cc:33:
         40:f2:c5:d3:86:91:45:14:40:fe:1c:eb:32:d4:f1:05:24:61:
         62:2f:8e:13:30:3a:5c:68:04:52:3f:8e:f8:6b:cc:16:cb:e4:
         2d:c1:8c:cf:7b:32:19:26:86:a4:62:bb:f1:2b:f3:79:4c:72:
         40:07:b3:8e:a9:36:fe:56:0f:1b:b6:37:82:c5:1e:de:5a:b4:
         9a:f7:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----