Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File:                     8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier:          oL10G0CUo/A0VewxfX4FLYLOn9E0vGa6YPvF7NEcdDs=
Subject key identifier:   CD:A4:AF:12:67:02:9C:25:2A:F5:5C:98:06:FD:B9:B1:FE:28:9B:1E
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer:       /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial:       01962E99282B513CDEE71498940BC5C0F8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number:          057E
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: DZFEkW8Rhjb6TtKXvjZ6pjLJ2+/VFq/hS5wo+Hhs8NM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:28:2b:51:3c:de:e7:14:98:94:0b:c5:c0:f8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=cda4af1267029c252af55c9806fdb9b1fe289b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:bd:19:c5:5f:57:b3:63:ed:2a:48:ff:01:
                    27:bb:b6:87:cc:e8:b0:5f:d2:c2:32:80:54:67:ba:
                    fd:31:a4:85:1a:7e:e0:bf:6f:76:95:a0:bf:54:d2:
                    b8:04:d1:54:99:a3:46:d6:30:88:34:f8:b0:5f:06:
                    c6:0b:09:78:96:bd:c7:cc:52:9e:e8:96:30:95:af:
                    d9:c4:a4:8e:fc:71:86:af:fb:00:0b:8b:9f:a5:9c:
                    e2:1a:48:7d:0d:39:88:5f:9b:bc:43:ab:2b:b4:17:
                    c8:8d:bd:34:7d:6b:6c:ee:ca:42:2b:1f:be:1a:94:
                    ac:23:19:7e:f3:48:9f:23:17:13:11:76:6d:b6:e9:
                    1b:92:b1:22:70:e3:c4:5d:2c:7d:0c:5e:9d:f1:9e:
                    1a:32:ea:40:89:85:8f:44:dc:a0:79:5c:27:de:66:
                    44:df:52:c5:78:1b:b3:28:a8:33:d4:0b:44:2b:27:
                    8e:a7:0f:ac:f3:8e:5b:bd:8d:c4:17:86:f8:49:37:
                    65:b1:5e:b6:ea:c9:52:49:2e:5b:ca:bd:1e:ea:43:
                    f2:ca:d1:35:6b:75:94:db:20:42:76:1f:42:1f:2c:
                    07:e9:cd:44:db:45:c2:2a:7f:48:b8:a1:14:03:81:
                    dc:10:0f:d1:98:31:4b:ce:c9:8f:88:86:40:1c:52:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A4:AF:12:67:02:9C:25:2A:F5:5C:98:06:FD:B9:B1:FE:28:9B:1E
            X509v3 Authority Key Identifier:
                keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:b2:a4:fb:de:c5:47:6c:49:7e:03:e1:68:b0:a3:2f:32:
         92:67:b1:f4:c3:ed:9b:35:dc:e7:49:b1:f3:b7:d1:af:e5:07:
         02:25:0e:60:89:9a:f1:a3:a4:86:24:95:06:2c:86:e1:de:5f:
         98:80:9c:da:52:ca:23:f6:97:47:cb:fb:40:df:4c:f1:3b:38:
         ef:24:59:b3:27:d9:28:b6:25:6b:87:95:99:5e:2c:90:2c:87:
         92:6e:1d:5a:64:cd:c5:0e:04:04:ca:f1:6e:f5:4d:05:cb:3c:
         f4:29:72:b5:22:fa:e9:93:9e:b6:4d:aa:d9:ad:2d:1c:6a:be:
         96:17:3d:d4:b3:34:ac:6f:bd:e2:21:18:22:8e:c4:98:85:a5:
         d9:dd:28:45:d6:a1:f3:ad:1f:a8:ec:b8:9d:74:74:d8:c0:26:
         03:5a:b4:07:ee:38:22:c4:3e:1d:eb:c4:d4:b4:8e:90:41:70:
         b8:18:f0:46:39:7e:c9:bf:21:38:74:d5:5f:4c:52:74:f3:08:
         12:11:52:1c:0c:98:87:1b:f0:e0:dc:dc:a4:13:18:2b:3f:99:
         d2:13:d0:85:cf:12:48:6f:4f:77:06:53:85:a1:ba:2a:46:07:
         93:c6:72:2f:a5:ec:ab:83:d3:52:9c:bf:29:c4:84:a1:1b:1e:
         48:bc:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----