Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File:                     CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier:          Szz7lhgRC6EYH44JjbiB9jUHflry39zDZA4aXzcPJAg=
Subject key identifier:   9C:CC:AE:8F:DA:F3:8D:4C:7E:A2:23:2E:10:35:B2:ED:49:DB:3C:E8
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer:       /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial:       01962F74B70B31C8EB6C7F698EB505167417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number:          11C6
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: jKuknVia+Tf0etGMQOi6tf7qhZESMihtyT1oosXEVVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:0b:31:c8:eb:6c:7f:69:8e:b5:05:16:74:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=9cccae8fdaf38d4c7ea2232e1035b2ed49db3ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:63:96:0e:f5:89:43:e2:12:21:8e:ce:5b:f0:
                    68:2a:72:05:e4:25:35:ec:ea:b2:7e:67:e5:cb:29:
                    4f:d0:65:99:ca:be:4b:dd:06:8b:0e:41:64:06:36:
                    c8:93:85:44:52:ec:66:5c:82:09:fa:eb:03:98:9c:
                    82:2c:3c:2d:cb:4a:11:4e:14:c3:01:86:e7:1b:b1:
                    62:50:bf:e1:c2:4e:cf:0b:e4:d8:e6:30:67:dc:4c:
                    e6:a0:7b:1e:01:64:25:73:36:f8:8c:1b:d3:22:d4:
                    00:ff:fd:bf:5f:e2:ad:4c:98:5d:a3:f5:9d:06:48:
                    aa:bf:66:e2:bd:e8:4a:3a:6a:d2:e0:ad:83:c5:00:
                    c4:6e:b8:9c:3d:18:f7:e6:7f:4a:34:b9:8a:5f:30:
                    65:db:0a:ac:ed:8e:52:69:5f:cc:8a:bb:7e:51:9d:
                    4e:65:3e:a4:4b:76:ac:58:19:d1:6f:40:40:20:f9:
                    ac:c1:09:77:d7:f9:42:3c:3c:b7:f3:4d:ec:9b:81:
                    20:fb:42:b0:3a:a6:34:e6:67:1c:c9:68:b2:54:ab:
                    4d:11:7b:4d:f2:a8:0f:1d:3f:5d:53:e6:e3:6e:d5:
                    5e:64:b9:7d:6c:fb:91:1d:b1:64:dd:4b:a5:37:c2:
                    65:10:4c:eb:d0:8e:67:6d:ba:8e:ad:bd:25:9c:64:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CC:AE:8F:DA:F3:8D:4C:7E:A2:23:2E:10:35:B2:ED:49:DB:3C:E8
            X509v3 Authority Key Identifier:
                keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:a0:ac:a9:92:9c:e6:43:54:42:1b:a6:b8:9c:23:72:b8:
         ef:1d:22:ae:1e:7c:70:ea:9a:b9:15:d7:15:e3:8f:e9:26:1c:
         65:bb:9d:d9:ab:e5:54:67:b3:b8:c1:2e:08:f4:57:0e:ff:41:
         94:96:3f:0b:db:ff:50:03:96:58:a0:39:be:77:50:c2:48:56:
         23:37:43:65:6b:d6:5b:0d:d0:ef:c7:7a:01:4a:a6:62:85:7d:
         10:db:48:10:1f:ad:41:5d:65:2f:cc:52:05:6a:2c:2d:73:47:
         be:4d:e4:37:cf:ff:77:7d:52:1a:4b:56:44:b9:05:52:43:69:
         f3:7a:c8:7b:f1:5b:81:6d:ee:1e:91:07:51:e9:c2:83:b9:52:
         32:70:cd:8d:6e:44:c6:7c:6b:e8:16:af:36:12:27:cb:e9:c8:
         53:d1:47:59:6b:7f:75:ab:25:6f:0f:92:6c:7b:52:7f:87:4f:
         5e:10:8c:bd:27:e3:c4:a8:69:a8:8f:73:b9:73:f2:0e:50:cb:
         71:2b:96:a4:91:74:9c:40:68:22:60:df:f7:e2:c3:9f:20:e4:
         02:29:05:33:c4:61:87:dd:76:15:3f:f5:b6:83:7e:7c:16:20:
         e2:0c:f1:d3:5d:1a:2d:fb:be:1c:f7:0c:49:ed:77:2f:ec:30:
         c4:ba:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----