Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File:                     kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier:          2/ROozd73Yp+Fz5Q+3fUC3CIUOS94FkD1VaLXg7B4qo=
Subject key identifier:   A8:53:3A:96:FE:02:F4:5C:EA:7B:29:BA:22:75:B3:C7:A3:17:EE:B9
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer:       /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial:       01962E61815E77C495CD4A60B4F85124BE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number:          0807
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: Yoky/o0YQ9Nm1/cMdumDD3/bdfZ6fAdjvsB5JjGR9Pw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:81:5e:77:c4:95:cd:4a:60:b4:f8:51:24:be:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=a8533a96fe02f45cea7b29ba2275b3c7a317eeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:8f:2d:56:34:63:08:56:a4:6c:a1:6a:06:
                    0c:f5:1f:f5:67:2c:b1:7e:8f:72:4b:d5:e7:31:5f:
                    37:71:5b:e4:34:fe:38:d7:d4:11:20:81:71:b2:40:
                    c4:42:d1:ec:a5:45:5b:cf:80:ce:87:bf:54:1c:fc:
                    b7:bb:d3:33:a2:89:35:28:86:2e:74:6c:05:26:64:
                    33:33:10:02:83:b3:9c:a1:9a:f1:25:4d:6c:cd:4d:
                    2f:cc:3f:97:53:b7:d8:75:70:db:e7:e4:6e:a4:7e:
                    93:20:e2:10:04:ea:96:78:c7:ca:b6:47:02:c7:df:
                    f9:32:85:52:b2:4d:9d:84:39:f4:9a:52:b5:ef:04:
                    c7:0f:d8:eb:1b:03:49:40:41:d0:77:5e:50:d6:90:
                    73:98:bc:7a:cf:71:d3:6d:8f:0c:f9:90:a4:94:45:
                    af:85:07:39:26:5d:3a:45:01:27:06:25:00:74:f7:
                    27:8e:a4:28:fe:72:89:f2:f0:b7:bb:89:83:60:81:
                    ab:2a:a8:11:78:15:ac:6c:c0:f8:18:7a:28:56:42:
                    0c:86:7e:ef:f2:fa:83:de:45:b1:0e:35:00:d8:90:
                    a1:96:aa:fb:6f:43:35:55:d9:15:67:2c:81:bc:e3:
                    79:42:84:0c:94:6f:02:66:10:84:59:cb:0e:90:86:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:53:3A:96:FE:02:F4:5C:EA:7B:29:BA:22:75:B3:C7:A3:17:EE:B9
            X509v3 Authority Key Identifier:
                keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:24:10:15:c9:26:12:49:1e:70:ed:a8:1b:6f:0f:b6:3d:
         c3:4f:f3:8d:7f:3f:97:2a:a7:58:8a:38:bb:73:07:95:cc:40:
         d9:df:d3:a6:20:31:77:6c:e5:f1:7c:82:3e:18:d0:a2:1a:1f:
         86:1e:11:5a:ba:bc:ca:42:d8:d5:0a:26:5f:42:df:fa:2b:13:
         8e:65:f3:21:14:52:6b:86:a6:86:04:0a:89:9f:f8:08:c4:bd:
         0a:7c:64:0d:63:23:63:e8:e7:ea:97:45:1f:ab:11:95:e2:cb:
         0e:4c:df:c0:38:e3:72:ca:e3:d6:e7:d3:b2:85:21:cb:a4:ff:
         49:ca:5f:cb:0a:17:45:9d:d2:bf:ad:1e:03:ac:1d:dc:1b:f7:
         8a:8d:eb:6e:2e:5d:3a:f4:ea:8c:6f:d8:e5:40:a7:e0:db:bc:
         e9:1e:44:3f:be:45:5b:19:89:9d:a2:e9:70:53:7a:41:c2:d6:
         ba:6c:5a:ef:2a:12:dc:9b:b1:f9:96:d6:78:a4:c4:4f:71:45:
         24:2a:81:37:70:0f:2a:95:19:00:14:1d:c8:92:1e:0a:f6:d0:
         3b:66:3a:ce:2a:cb:3c:cf:64:b5:77:2d:9b:9d:84:ce:dc:11:
         f0:e4:c1:ab:8e:f0:65:86:7b:99:52:03:33:2b:20:7d:be:ef:
         de:fb:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----