Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File:                     r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier:          EXt9evTXI0kFT7yF/IqprPW0VNO+QdvJIPp3dKKgRJk=
Subject key identifier:   F1:10:46:C5:69:22:96:6D:BB:F2:B2:43:74:59:CB:B4:30:D2:52:3B
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer:       /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial:       01962F06C7AC050AE93752EC845098460EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number:          02FC
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: zWycKF8tHa6oOxu2AIsw6IuKd19bHIedPVgIQd9VWNY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c7:ac:05:0a:e9:37:52:ec:84:50:98:46:0e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=f11046c56922966dbbf2b2437459cbb430d2523b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:76:d6:30:b3:a7:95:cd:bb:38:00:a3:65:
                    38:22:4b:b4:49:71:ee:a5:9f:6d:81:39:f8:ab:b3:
                    2a:a5:c6:0d:92:5c:06:d7:6b:3a:b2:d0:b6:ef:90:
                    41:cb:fd:6a:03:39:14:99:8d:ae:bf:e8:b9:9b:72:
                    b5:c1:b6:81:7e:26:a7:3e:40:a7:fc:f2:53:6a:b7:
                    c2:16:24:bb:89:2c:c4:86:27:6f:ed:f1:eb:84:be:
                    1c:2b:47:f4:35:2a:55:68:ad:59:ee:4b:9b:d9:74:
                    a8:53:da:24:9a:bc:4c:53:63:0e:6b:b5:04:0c:4d:
                    26:89:d8:81:16:de:96:b4:dd:cb:25:73:31:fa:06:
                    98:33:92:68:0d:01:b9:5e:0a:07:cf:d2:23:86:ac:
                    b0:a5:d7:de:72:6d:77:16:93:92:65:cf:68:e8:2b:
                    f9:80:84:94:7a:a7:88:af:98:69:93:7a:fc:dc:f3:
                    01:a8:55:29:ec:d9:96:a2:cc:b1:16:43:4f:13:cf:
                    9e:e8:fd:76:69:54:ff:6e:f7:4e:da:ad:43:b0:f4:
                    cb:55:fb:85:f7:9f:33:44:d8:e4:5d:91:39:93:b7:
                    b1:19:3f:55:8a:cc:1c:ec:93:2f:17:34:e9:e4:8b:
                    e8:3c:ea:8c:b7:4d:b7:9d:7b:2c:fc:73:23:e8:08:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:10:46:C5:69:22:96:6D:BB:F2:B2:43:74:59:CB:B4:30:D2:52:3B
            X509v3 Authority Key Identifier:
                keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:02:b3:5b:74:ce:cf:ce:cb:d6:3c:28:7f:b2:05:4a:a8:5c:
         52:de:9b:7e:f0:53:bc:5f:e6:ab:00:bd:d6:84:f8:de:a5:49:
         54:06:41:25:b1:a5:95:c8:0d:fa:17:9b:a1:8f:2a:2c:36:71:
         d1:bc:af:11:ec:2c:98:4f:07:78:77:80:7a:67:6d:41:e0:37:
         9b:a3:88:d4:1b:17:16:54:75:6e:89:5a:f7:9c:33:bc:46:29:
         0b:32:25:c6:12:73:3b:e9:4f:ed:87:36:a6:53:63:37:aa:18:
         8c:01:1e:d0:25:2c:04:f3:55:e1:6b:7d:b3:c3:12:d9:23:0a:
         b8:ab:7a:99:1e:ac:79:67:73:4e:51:9e:1f:08:1b:4f:40:74:
         07:d5:ca:b0:a2:43:c6:2a:87:1e:39:b1:c7:f1:97:1c:f7:f5:
         f6:39:36:c0:c6:05:94:2b:68:43:8a:99:d5:1c:04:2d:41:f1:
         39:28:ee:a0:c1:18:66:33:24:c3:bd:32:d4:7e:61:a7:b3:07:
         a9:3c:3e:8c:04:e0:8f:ec:20:67:43:71:15:9d:e9:97:ed:e6:
         5e:aa:28:95:35:ff:1a:f4:29:f0:c8:82:36:47:a0:ab:cf:09:
         a5:5c:2a:7b:f3:a6:6a:ed:fe:11:a6:dc:67:75:e5:ca:6a:28:
         3f:8a:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----