Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File:                     MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier:          KNN3npw204oWP/ut1NVI/l9TC0LdpV2SleDfCywJBSw=
Subject key identifier:   39:6A:B5:C3:25:05:49:C8:1D:13:9E:96:51:21:C3:01:A5:C1:07:FC
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer:       /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial:       01962E98C5F46DB1F35A96EA46FDA532EE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number:          0859
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: OmxQ2nvKooAMDUnw6ernw6pEqVr2b4QongRLRaJ4ICI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:f4:6d:b1:f3:5a:96:ea:46:fd:a5:32:ee:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=396ab5c3250549c81d139e965121c301a5c107fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:1d:df:f8:b2:49:aa:2d:6a:4c:1b:5f:02:
                    bb:a8:87:25:2b:c9:f3:15:41:73:37:93:90:f2:34:
                    6d:06:2d:a3:36:1f:b4:81:56:23:cf:ca:58:e8:6e:
                    c5:50:71:27:e8:9c:42:9f:ec:ae:8b:1f:28:86:7f:
                    5c:9f:b0:de:ce:5b:c2:19:88:a4:c3:42:c0:1a:9e:
                    58:36:7e:8d:ff:c5:62:0b:63:e9:01:f8:08:bd:af:
                    55:4c:50:2a:a3:10:02:d9:bf:e7:b7:ee:c6:a5:fa:
                    f8:2f:7a:6e:a7:ee:3e:f6:92:e1:ec:91:74:a3:48:
                    d8:09:8e:5c:5f:78:f0:80:4a:fd:8d:d6:4c:c2:be:
                    af:00:93:e4:dc:16:4b:a9:d0:a3:02:c9:6c:65:c3:
                    42:cd:94:8d:a6:c6:5e:26:04:82:03:61:86:b0:c6:
                    b5:49:99:13:9b:ef:ce:e7:11:db:a9:ac:bb:85:c8:
                    21:06:04:ac:ec:18:40:0b:40:52:90:4b:77:bc:7f:
                    c2:cb:d3:a9:97:1c:fd:4a:c9:f5:2c:42:10:59:38:
                    a8:18:be:16:32:c7:24:3d:d0:19:9e:c8:21:9b:b6:
                    46:73:b1:58:8b:5c:a6:da:7a:15:d9:3d:c7:2f:f6:
                    d7:6e:e1:0f:bb:8f:18:b0:34:49:89:ec:3d:7d:ca:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:B5:C3:25:05:49:C8:1D:13:9E:96:51:21:C3:01:A5:C1:07:FC
            X509v3 Authority Key Identifier:
                keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:f1:3d:17:51:40:9b:36:40:05:f9:b8:2a:ba:35:3c:81:
         4d:2b:35:c1:e9:c1:50:f7:b5:b9:49:ce:1d:02:f8:3f:53:45:
         16:ce:0d:34:77:a9:c4:b3:84:6c:a2:c0:92:8b:28:eb:57:60:
         d4:52:67:d2:7d:04:0b:59:f3:2a:ee:34:a2:16:50:dd:15:d7:
         14:07:10:b8:55:29:58:9b:6e:40:cf:4b:dd:51:99:8a:67:f7:
         29:bd:be:b8:18:78:00:c1:58:0b:9a:dd:1b:d3:0d:67:20:58:
         8a:d2:bc:cf:db:e7:ea:6c:00:72:4a:1b:95:3c:34:2a:59:31:
         42:6d:2b:d9:ec:64:21:11:47:a2:28:61:01:12:de:36:3e:7c:
         47:df:2b:03:56:78:1e:06:05:6b:6f:a4:1b:88:76:9d:1a:ba:
         ca:2d:f4:ad:a3:c3:bf:ce:2f:0a:9c:c2:65:99:2c:2d:78:e9:
         ef:36:f4:88:09:f6:44:b5:bf:61:9f:e5:42:8e:78:e8:2d:42:
         3c:33:1a:be:2a:7a:86:24:65:45:00:89:4d:17:50:7b:a1:eb:
         a1:79:02:b1:e3:e1:cd:b4:f3:57:11:a9:35:0f:41:2a:82:32:
         1a:9c:49:b0:62:e5:ea:ce:5f:1a:b2:90:cf:a4:23:4b:62:11:
         be:e6:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----