Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
File:                     itMkK15lo9DZHGsZ60CRlZskMUg.mft (raw, json)
Hash identifier:          fjg6EDdVQNUczYfYFsJ0fvFNz65m3LFtliTBz56Mu08=
Subject key identifier:   DA:C6:BC:41:3A:79:88:25:A8:E8:F0:65:BF:A0:B5:5D:0D:AD:55:6C
Authority key identifier: 8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
Certificate issuer:       /CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Certificate serial:       01962E9924702700428A7F4571815863AFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
Manifest number:          01F6
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: itMkK15lo9DZHGsZ60CRlZskMUg.crl (hash: 8mRIbblZidOdvrAdNO1NCTjlhHUTfEEg3w3BLh6SrXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:24:70:27:00:42:8a:7f:45:71:81:58:63:af:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=dac6bc413a798825a8e8f065bfa0b55d0dad556c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:07:72:65:53:cb:7e:18:01:c8:8a:bf:66:
                    22:9b:37:ba:b6:e9:d1:ed:cb:e9:f1:35:aa:cd:86:
                    23:0f:09:ed:f4:f0:0c:2d:2b:ab:b3:2e:33:dd:4b:
                    b0:59:c7:65:04:4f:47:03:5c:ea:d3:21:39:f8:28:
                    00:0c:c6:ec:9f:17:79:ff:c8:f0:ab:7c:17:5e:5b:
                    a5:1a:53:10:8e:70:41:31:db:02:80:54:e5:5e:71:
                    88:2c:7d:cb:83:00:dd:8e:83:4c:cc:1e:61:35:8d:
                    29:28:03:db:b0:7c:b0:e7:8e:4d:2a:11:92:7f:cb:
                    0b:fc:7b:05:fc:59:58:dc:0a:9a:df:c6:d5:55:82:
                    fd:cf:75:a2:30:1f:41:8f:59:61:e5:be:29:69:16:
                    26:4e:02:5f:25:a3:44:20:09:52:b3:2a:4b:24:60:
                    33:65:ff:b9:5b:72:b2:d0:7e:69:2c:24:97:5b:8a:
                    c2:56:16:85:24:5d:00:d6:f3:ea:40:6d:b3:b7:fa:
                    40:3a:c3:4d:e2:be:51:81:05:79:dc:66:ba:9d:76:
                    e9:7d:28:b4:9e:ed:f4:14:6f:9b:ad:f0:bb:db:d9:
                    20:62:ea:b0:7a:c7:a1:f0:83:c0:d4:14:3d:91:87:
                    a4:19:fe:8b:f3:15:c9:fe:55:4d:bd:b1:9b:9b:6a:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:BC:41:3A:79:88:25:A8:E8:F0:65:BF:A0:B5:5D:0D:AD:55:6C
            X509v3 Authority Key Identifier:
                keyid:8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:70:7a:a7:f9:27:01:42:d9:26:35:de:b1:67:b1:39:45:bb:
         08:7b:a5:e2:3f:0b:58:d9:83:88:b8:2d:b1:e7:4f:6b:b5:1d:
         7c:76:51:95:ba:ca:eb:87:8f:8f:87:2f:0a:77:43:f7:96:88:
         cf:26:42:7c:22:07:09:9e:aa:e8:d7:82:26:22:0b:db:44:dd:
         ca:df:b7:8b:3a:8f:f7:22:38:db:d3:a2:17:31:92:12:ba:27:
         5e:dc:c9:1a:be:f3:11:da:c5:44:15:ad:d5:28:28:00:4c:2b:
         ad:f7:78:d2:3d:73:9e:22:89:77:5a:7d:06:0d:a0:b1:63:4d:
         13:77:79:9d:a9:c3:cb:af:0f:25:b2:64:41:49:bd:73:f2:19:
         36:17:ae:41:88:e0:07:3d:dd:7b:31:99:70:5e:d7:19:c8:72:
         17:a7:48:85:a9:d9:fb:9a:a3:47:84:cb:2d:9a:7b:6e:69:09:
         e7:c8:09:5a:e1:4b:ff:e5:99:21:17:67:3e:3a:31:91:16:ea:
         75:f5:02:a9:1d:15:eb:8a:40:78:bb:72:b1:c0:11:77:46:2c:
         91:40:19:ac:35:01:18:4d:81:a3:61:dd:12:92:e2:a9:38:5b:
         73:84:c8:17:87:72:06:f8:b2:8a:2a:04:60:85:1f:4b:7b:64:
         ec:4d:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----