Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File:                     31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier:          s3w0XlSexMbsWUXraJquhcxNvd69SMQn3wFNKJg8nro=
Subject key identifier:   2F:0F:44:F2:20:74:EC:0A:84:04:F5:B5:AB:97:5E:A6:6D:ED:C0:8E
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer:       /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial:       01962F3DD6CA065C4AA39F434F4CF9AD603B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number:          0C52
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: JZWa4GV9pNas7QB7UOymjSvLU4ARlB6bzVhln419r2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d6:ca:06:5c:4a:a3:9f:43:4f:4c:f9:ad:60:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=2f0f44f22074ec0a8404f5b5ab975ea66dedc08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:0f:b3:da:ab:f0:a6:00:be:43:0e:58:83:
                    47:63:ec:ba:db:0f:50:e8:ee:fe:83:c9:fc:ec:3e:
                    36:7f:b1:e2:f1:3b:dc:63:a6:f4:bd:32:39:c1:b1:
                    98:5d:c6:55:f5:f2:4e:18:ea:3a:ce:fb:93:65:cd:
                    83:e8:09:ab:8e:0d:27:09:69:f3:8d:3f:f7:38:50:
                    15:81:b7:a0:07:37:3b:e6:63:43:59:2e:19:c5:3c:
                    f0:fd:85:70:bd:39:3c:00:5c:15:ca:af:6b:31:59:
                    bc:52:d9:ae:78:95:5b:31:a4:64:d4:81:c0:54:07:
                    e0:c4:9f:a3:6b:28:ed:8d:42:73:4b:40:28:1b:c5:
                    90:2d:fe:47:72:c5:da:35:58:a1:ca:1e:34:4b:83:
                    c6:3b:95:76:ec:48:6e:eb:a7:4e:46:2d:bb:7c:e8:
                    aa:68:53:d6:c6:6b:bb:0e:f9:c4:37:35:79:bd:17:
                    52:e0:9d:16:58:4e:24:a7:0e:35:dc:af:01:92:72:
                    85:45:ca:0c:68:09:44:1e:df:e0:00:b6:f5:13:bb:
                    09:c1:ca:94:94:27:28:72:99:d5:d1:3d:86:6a:22:
                    17:21:61:f7:9e:e2:48:a7:08:a4:ff:b1:ed:ca:0a:
                    b2:39:49:16:60:69:ce:ff:14:a0:e9:1e:e6:00:1f:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:44:F2:20:74:EC:0A:84:04:F5:B5:AB:97:5E:A6:6D:ED:C0:8E
            X509v3 Authority Key Identifier:
                keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7d:85:4e:39:11:ea:c2:d6:34:78:55:6b:af:aa:3b:7e:5d:
         77:72:50:68:ac:78:d5:25:40:0f:39:61:78:f4:d2:c7:0a:1c:
         d8:48:93:03:f4:dd:18:f4:3d:03:22:bf:22:81:13:25:58:c4:
         98:00:fa:35:b8:58:e6:f6:8c:a5:83:7a:f6:a7:3b:4c:42:ba:
         07:9d:c0:93:3e:f2:c3:61:f1:b7:63:48:a3:4e:83:97:45:03:
         08:5a:fb:ec:d6:b8:f5:61:c9:6d:ad:ca:c8:ec:af:ea:58:5d:
         ca:8e:db:87:b7:01:63:00:98:06:f6:fd:1d:ac:e5:65:04:9f:
         15:39:20:53:9b:86:db:c2:d5:fc:d9:7d:eb:2f:30:fa:83:29:
         ad:88:8d:80:23:23:03:48:cb:f0:e8:51:2c:c4:aa:89:33:aa:
         a2:61:d0:0d:69:51:8e:17:be:7c:00:e3:8a:4d:a1:b6:00:53:
         dd:0e:79:31:7d:96:c6:bb:30:19:ff:39:c6:43:19:54:c4:6c:
         e3:43:30:e6:13:bb:58:c7:8b:af:c0:a8:b4:35:6a:b4:96:cd:
         ce:29:ee:40:07:ce:4a:f4:3a:7f:8a:0d:81:7e:31:a8:9c:ae:
         6a:8f:5b:d2:e0:59:43:c4:1f:32:5c:f7:e2:78:1f:9c:44:6a:
         0c:3b:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----