Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File:                     0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier:          GyE0Yx+6QEOt/6e7J6nKa1Yt3i5XcvKB/NTn1LrtEeM=
Subject key identifier:   51:1E:CE:06:0B:99:8D:8B:25:69:87:EE:2C:2E:82:D9:5C:3A:D8:FD
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer:       /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial:       01962F74956849753F9AD30D64120848923A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number:          0516
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: 9pA+y7iBDiFJIqWQfIDIO2sMebmpirJeZv/z1uZfqvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:68:49:75:3f:9a:d3:0d:64:12:08:48:92:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=511ece060b998d8b256987ee2c2e82d95c3ad8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:e4:0e:f0:47:b4:6a:9b:7f:e8:a1:4f:f8:
                    3a:f1:cf:d9:98:8c:61:d6:74:6b:a1:08:5d:a3:ec:
                    47:b0:e4:d2:3c:a9:9c:7c:9f:1f:9f:99:a5:56:a5:
                    54:8b:27:91:0e:1d:2e:52:19:59:74:73:f2:2b:8f:
                    e1:1e:ea:d5:ff:e1:88:94:b8:dc:20:a8:48:7b:1f:
                    19:28:fa:8d:99:ee:cb:b0:03:c7:64:b3:9b:cf:ff:
                    aa:0b:c3:74:10:9b:3e:0a:32:ca:94:63:50:47:7e:
                    6d:b6:1a:66:50:6c:5a:bb:fe:0c:70:46:b5:2d:66:
                    e0:04:d9:0f:03:43:72:77:06:46:dc:db:ad:97:e0:
                    79:da:b6:a0:cd:96:f4:96:3b:00:e4:88:97:22:65:
                    3c:fd:b7:dc:54:f1:17:5b:31:08:6d:5f:0a:0c:5d:
                    63:ca:17:46:72:8d:53:14:d9:a7:6a:46:f2:af:46:
                    f2:66:8a:9d:c2:48:e7:5b:3f:db:c2:93:cd:6c:fe:
                    6e:ae:87:bb:e5:2d:67:c1:10:0c:dd:1d:8d:80:a5:
                    7f:97:86:4f:69:7e:32:e4:02:1e:31:3c:a8:7a:62:
                    b8:f7:7c:de:63:75:28:a5:6d:e2:f8:ee:8a:8b:bf:
                    e7:d5:8d:be:39:3d:7d:29:9b:80:21:f2:4c:9b:20:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:CE:06:0B:99:8D:8B:25:69:87:EE:2C:2E:82:D9:5C:3A:D8:FD
            X509v3 Authority Key Identifier:
                keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c5:09:8a:3a:2a:5b:30:52:4c:df:24:b4:3b:23:67:2c:fe:
         74:b6:b6:89:06:a3:4a:fe:1b:c0:37:7c:d4:67:b1:a9:c2:a7:
         71:2a:dc:ac:f5:31:3a:b8:23:a5:90:8c:32:76:48:ca:88:a6:
         72:b5:af:82:0a:39:d5:3f:40:d1:73:24:62:73:b1:d0:3b:fa:
         da:a3:00:c8:6f:51:8d:e5:73:ff:68:f4:84:54:59:a9:38:a5:
         03:fe:79:40:e0:da:60:bf:76:c4:47:50:13:1b:c0:9b:10:1e:
         a5:f2:3d:5e:79:28:b8:cd:7f:77:f4:90:c6:ff:0f:0c:1f:d3:
         61:7d:3e:fa:14:50:89:fc:51:56:1d:14:bc:a6:31:bb:93:68:
         75:dc:73:ef:f1:47:35:c2:27:b3:62:52:db:85:48:06:78:b4:
         50:7b:55:3e:bd:77:5a:31:f9:89:83:63:3f:3e:34:ba:a6:6e:
         ea:3b:b4:cc:62:f0:db:53:9c:11:da:90:de:0c:7b:b7:74:81:
         95:e5:a6:c6:b2:60:ac:b5:9f:85:fe:4d:8d:67:52:26:73:a1:
         1e:d6:5e:dd:dd:1d:ed:72:f8:a4:98:fc:d2:96:b9:6b:d4:c4:
         6e:e4:fe:25:9f:ee:07:61:b0:89:c3:de:c5:38:de:60:c0:aa:
         2f:69:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----