Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          mtE7bANLJNJDsEUv2b74ahDE0Olxn0NXQNMajUF/7/E=
Subject key identifier:   8C:7E:F5:BD:B4:C8:6A:32:DB:3C:82:A8:B0:7E:AA:66:84:86:77:30
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       01962E990659D83C26448F4A7A5D065BE1D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          0C83
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: rsbCpQ5ynkyUCquWDChLSHajWfAN1sk5BbRzNNT2OHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:06:59:d8:3c:26:44:8f:4a:7a:5d:06:5b:e1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=8c7ef5bdb4c86a32db3c82a8b07eaa6684867730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:87:e9:20:ee:dc:f1:aa:a6:83:d1:8a:47:
                    36:9e:cf:c5:e4:86:78:8d:59:39:b8:bf:79:4f:19:
                    6f:27:d3:62:8b:fc:4e:b0:a9:d8:69:ca:ae:0f:32:
                    ae:56:39:c5:f7:b3:dc:b4:d2:8d:a0:e0:de:12:47:
                    e2:ba:24:3a:ef:73:e9:0b:e4:09:67:f6:92:45:b4:
                    d7:f7:c9:99:74:82:1f:8b:3a:af:7d:f3:d3:c4:83:
                    88:ec:8d:61:3a:67:7b:fd:97:70:84:f8:bc:37:41:
                    b5:fb:40:7d:c9:2a:63:9e:96:20:2f:9c:0b:0d:d0:
                    28:87:68:be:3f:c2:f9:c0:c4:d4:22:e9:d9:f1:6e:
                    0b:16:34:9e:fb:5f:32:0f:be:c2:8d:88:89:48:df:
                    05:af:a7:2b:27:38:f9:83:fe:1a:fc:60:24:85:c6:
                    46:c9:3a:97:02:9c:01:88:4d:ef:5f:1c:08:dc:75:
                    2d:99:2d:2f:e1:b1:59:f6:83:da:50:7b:07:f3:0f:
                    6f:ae:96:94:c8:c0:a5:9c:1f:40:c8:0f:5c:f4:03:
                    3d:51:3d:5c:0c:0a:98:a5:0b:f0:56:f1:c2:1d:e7:
                    a8:34:10:f1:be:9d:cc:f2:33:51:47:75:0c:d3:4e:
                    9d:d1:a6:ea:91:6e:bd:89:a8:11:05:31:6c:c6:2f:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:F5:BD:B4:C8:6A:32:DB:3C:82:A8:B0:7E:AA:66:84:86:77:30
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:4b:2c:35:5f:a8:d0:be:67:6a:02:64:8d:08:9d:07:1f:
         f2:5d:21:d7:97:79:f8:5d:46:d1:5e:a9:79:e3:e5:a5:6f:7d:
         cc:68:63:89:3d:9d:29:25:f1:c4:34:41:d5:82:72:d5:d8:27:
         8c:53:9c:15:b6:4f:d7:46:7d:a1:02:8c:ef:dc:26:62:8e:0e:
         af:0b:89:f2:27:12:d4:ca:19:62:8b:e1:97:75:6a:06:e4:e5:
         5d:23:9a:99:ae:fb:a0:05:1c:ce:ad:07:64:08:be:79:9e:39:
         f6:91:34:7a:ea:df:d2:01:f4:69:4e:7a:9f:13:f0:e8:d1:ea:
         88:6a:24:48:39:f9:53:53:79:78:51:28:4f:ee:ae:37:e1:dd:
         ce:d7:9c:cb:aa:e5:1d:ca:32:b5:f1:46:57:35:40:9b:8b:1c:
         9e:cc:af:23:4c:8c:90:3d:b6:6c:75:4e:ab:0f:b4:37:a1:52:
         8c:91:ab:ea:61:c7:0c:42:ff:4e:f4:77:93:27:be:da:ea:27:
         27:26:b4:a2:ed:87:31:16:b4:12:50:53:45:a1:33:17:23:45:
         92:68:c9:b1:ad:dc:50:9a:b8:8d:c7:23:c6:26:29:b7:fc:3b:
         f9:7c:c0:bd:f4:6e:75:a5:ad:26:22:19:75:4d:05:f4:25:5c:
         a3:e0:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----