Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File:                     DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier:          b3FJ77TCWUrWK3FIjHgt4Vgv/p6OVH6OT0Lqv0ujLxE=
Subject key identifier:   88:A8:C0:36:6F:E0:FA:1C:35:F8:71:36:44:FE:6F:56:A1:64:D9:9C
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer:       /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial:       01962E995EAABA8671A226CE1AFC995259D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: sls5cyd3AOedov9HhFHPHY36EqK4pT4VQFODuaOPSqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5e:aa:ba:86:71:a2:26:ce:1a:fc:99:52:59:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=88a8c0366fe0fa1c35f8713644fe6f56a164d99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:c1:89:1f:23:88:cb:a8:98:57:d8:0c:45:
                    2c:f5:62:3b:08:5f:76:fd:51:bf:52:8d:2a:f1:79:
                    19:b4:d1:11:14:1f:9d:a1:22:4a:78:bf:fd:05:93:
                    48:30:dd:87:8e:20:5c:15:c2:ff:b3:18:73:12:10:
                    ba:17:df:ff:1c:ae:26:b7:1e:46:07:b1:eb:4e:ca:
                    f3:3e:6b:6e:50:a0:ea:bc:f8:40:c9:b2:57:a7:66:
                    6f:84:58:de:1e:6b:d5:6c:1a:a9:71:cf:fa:35:12:
                    ea:f7:57:c3:f7:01:ab:61:9b:56:9e:d0:e9:22:4f:
                    18:74:5d:40:30:29:89:8d:c7:10:26:5d:e7:31:0f:
                    5f:28:32:36:c2:be:a7:10:f8:ed:a4:93:82:b6:a2:
                    66:17:19:b2:84:79:30:89:11:d9:67:1f:80:d6:aa:
                    9c:65:15:78:18:db:97:19:dc:16:da:93:05:bc:a8:
                    97:33:b5:1a:fe:ae:3e:57:d3:11:08:6c:45:d4:ba:
                    45:ac:6f:4c:07:87:0d:74:4f:16:fc:b1:ea:8f:e9:
                    3a:f0:b9:a9:e0:82:de:85:6f:58:96:7a:b6:d4:df:
                    70:15:8f:5e:21:e5:74:70:40:ee:8d:0a:cc:ed:8c:
                    cc:a8:41:cc:5b:1d:67:9d:e0:7d:22:36:f5:5e:43:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:C0:36:6F:E0:FA:1C:35:F8:71:36:44:FE:6F:56:A1:64:D9:9C
            X509v3 Authority Key Identifier:
                keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:59:6d:b1:6c:2e:58:0a:21:b1:b7:95:4a:0d:e8:29:39:3c:
         e6:35:a7:d3:99:58:d0:3d:b1:23:54:89:b9:b8:88:ee:16:65:
         5f:be:16:d9:46:38:e2:24:e2:aa:53:4a:69:ee:81:52:f1:92:
         04:f3:7d:53:ea:30:8c:7b:90:f7:78:ec:9d:6d:eb:13:55:f2:
         d7:f4:c3:94:39:fc:dd:bb:61:3d:b3:96:eb:c4:97:c0:6b:d1:
         1a:96:9b:2d:2b:4a:8d:4e:13:e7:29:7a:64:d5:0a:ce:51:73:
         41:5a:8f:b1:46:b3:45:ba:13:17:e2:fa:4e:6c:42:46:81:11:
         7c:41:dd:1d:c1:6d:51:82:9b:09:a1:72:72:4f:fd:a6:a4:c7:
         1f:14:55:22:9b:9d:f3:f0:b4:b7:13:a6:ea:3b:d4:93:c8:d4:
         51:3b:d1:f8:3e:73:12:75:be:ec:37:11:09:92:13:aa:ae:d1:
         d4:fc:68:9c:31:09:3e:87:53:3a:cb:27:32:38:e2:eb:5a:d7:
         c4:37:f9:6e:16:2f:cd:1b:84:d6:de:85:42:6a:4a:5d:87:67:
         75:ea:ff:a5:19:cc:9f:b4:c3:e1:83:65:68:0e:e1:22:96:89:
         19:a5:f7:00:35:86:61:50:4f:37:a2:f4:a2:a9:9e:12:2e:13:
         7b:6e:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----