Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
File:                     at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json)
Hash identifier:          t99E53noZKHJtZ236fa45BOhHrNvuChF2hVkxW0AHbw=
Subject key identifier:   1A:83:4B:FA:4D:77:AB:04:BB:53:D6:CD:28:1B:06:67:58:59:A3:50
Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Certificate issuer:       /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Certificate serial:       01962DF3FE8457822234F06DB717479113A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
Manifest number:          0238
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: 0G7LHdduEhi7CDwp2ZPHhYhc+t93t6oSTeQfrvz2nkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fe:84:57:82:22:34:f0:6d:b7:17:47:91:13:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=1a834bfa4d77ab04bb53d6cd281b06675859a350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:a9:ad:49:53:c8:20:e3:43:42:44:d2:9c:
                    19:7f:c5:4d:aa:ec:32:61:73:ad:dd:c2:cd:58:d4:
                    30:ea:75:71:74:2e:63:ee:b4:24:52:8a:65:c1:d7:
                    51:b3:d8:27:9c:f8:8d:e0:c3:48:52:92:c2:21:3b:
                    eb:dd:54:5c:cf:5b:eb:1b:fe:fc:71:3d:ee:0e:7e:
                    7b:2d:d8:dc:11:61:6d:bd:5e:b3:dc:dc:42:8a:60:
                    f4:37:32:28:23:42:8c:bb:02:44:9f:6d:b7:ee:3b:
                    5b:a4:2f:f5:1b:85:92:1e:88:c3:24:c9:e1:9d:4c:
                    ed:7b:71:bc:43:df:7f:1f:5f:17:d4:32:6b:89:4b:
                    ac:45:3f:32:b4:a5:6b:02:74:89:dd:67:c2:28:87:
                    ad:d2:63:d6:a8:46:a9:73:31:c5:57:65:b7:41:a5:
                    a7:07:a9:1e:dd:e9:5b:c1:92:b1:dd:4a:c8:1e:70:
                    fb:b3:e1:8d:06:c8:ef:4b:e1:5d:2c:6b:31:f2:9c:
                    5f:0a:9a:64:7c:c3:7a:fe:c9:92:9e:aa:e6:86:2e:
                    b5:29:e1:67:74:f0:04:fb:1a:a9:bc:57:fd:83:58:
                    07:ca:25:94:c5:29:13:ca:ba:ed:93:40:5e:27:bd:
                    fd:d3:ac:ff:7b:03:0a:5d:69:a8:b6:29:bc:21:1a:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:83:4B:FA:4D:77:AB:04:BB:53:D6:CD:28:1B:06:67:58:59:A3:50
            X509v3 Authority Key Identifier:
                keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ac:bb:77:fb:e8:8d:44:22:d7:d5:90:90:11:7c:16:c6:bc:
         e8:5b:d1:6b:57:4c:c1:ae:04:37:fb:2b:9d:a9:1f:c0:0d:54:
         3a:73:70:15:e1:60:79:02:5a:bf:5b:ab:07:f0:2a:ce:0e:cc:
         46:dd:ee:ac:70:b7:0b:37:77:13:91:6c:0b:31:52:16:29:be:
         8a:9f:61:35:7b:78:d8:e1:9d:fa:c3:78:cd:75:34:62:6a:98:
         ab:99:e5:40:d0:18:87:11:b0:0e:a8:e8:de:e2:fb:db:8c:3f:
         0d:d0:16:f3:67:4a:b7:40:a9:4d:82:24:9f:99:4f:4f:7a:36:
         7c:7e:7a:31:9b:89:76:b1:9f:3e:8b:af:c0:92:be:c4:3f:e5:
         b4:88:5b:6e:12:89:f8:a0:ce:69:07:bd:06:35:31:a6:e7:28:
         fe:6f:c6:7b:2b:7c:45:5d:b8:75:7b:aa:40:6a:8c:a7:c8:8e:
         1e:a7:f1:d3:08:0f:d9:2f:c0:d1:4c:42:b3:ad:e8:08:e3:f7:
         7f:1b:11:7b:d5:de:92:bc:19:14:0f:84:6d:91:a5:e0:37:e0:
         40:8f:2d:30:ba:f5:f8:50:2a:8d:a2:60:09:9a:17:77:d4:49:
         cf:fc:7d:f7:22:cb:18:f7:e9:c2:b7:35:f1:51:54:b0:62:ef:
         43:87:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----