Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File:                     DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier:          eyc9F0YE0ngt3CExT0aG6ev0pwpC+epsgYpIEpxqBVo=
Subject key identifier:   AC:50:4C:71:BC:58:E2:D1:34:E6:0D:A4:2C:3B:B8:0E:5F:B9:BA:30
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer:       /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial:       01962E98A3ECEDADB0F91A0E1D9217D4F7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: ECsF+4f2AfY0Zfg247Cud0oxjRiMwa3EhJEs9A5WImU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:ec:ed:ad:b0:f9:1a:0e:1d:92:17:d4:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=ac504c71bc58e2d134e60da42c3bb80e5fb9ba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:43:d9:b9:fa:91:16:80:8e:17:16:45:b7:a6:
                    0b:28:b8:b7:ae:39:17:f8:5b:de:4d:2c:6e:f1:d8:
                    9b:9e:e8:60:07:62:24:2b:61:93:50:ac:65:c6:0a:
                    a9:a1:bd:d4:a3:59:a8:63:34:22:b3:6b:1d:79:60:
                    ee:27:ad:4d:ab:38:cb:7c:be:4d:5f:19:dd:37:4a:
                    cd:cf:6d:eb:93:2d:57:ad:29:d4:da:0a:48:50:6d:
                    ac:cb:9a:5e:fa:09:7d:26:5d:4f:1c:bf:6d:49:a5:
                    4c:24:a7:fb:6f:26:37:bd:9a:0f:b8:e6:6d:08:f5:
                    0c:6a:46:6a:d2:a4:7a:e3:f1:47:4e:e9:b3:f1:b3:
                    a2:5f:14:d9:7b:69:1a:47:26:22:39:de:46:69:e5:
                    5b:35:49:dc:bc:9f:16:2a:48:ce:69:c5:90:f2:ab:
                    27:8b:29:90:2b:65:36:18:b3:35:d6:c2:ed:84:a5:
                    ce:3f:c8:15:42:22:12:fb:20:bc:a2:e5:7c:18:de:
                    62:17:74:22:20:70:3a:30:9b:49:bf:d4:4f:e2:50:
                    04:4a:1b:a5:20:6d:6b:9f:36:ca:92:a2:44:b4:df:
                    1e:28:06:10:04:19:88:96:cd:ff:03:6c:81:de:a2:
                    6c:a1:b3:64:7b:52:a4:03:38:c7:33:78:32:61:12:
                    d1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:4C:71:BC:58:E2:D1:34:E6:0D:A4:2C:3B:B8:0E:5F:B9:BA:30
            X509v3 Authority Key Identifier:
                keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:ce:d3:16:43:91:1b:41:51:87:fc:72:d2:b0:2e:b3:e1:
         52:95:1d:b6:93:ad:b6:61:9a:d0:b7:97:0a:fd:89:db:2c:86:
         b9:d5:da:78:a9:3b:2d:5d:ef:ee:93:92:81:e2:a0:f4:13:ee:
         e8:ff:08:32:94:bf:22:70:c5:fb:3d:aa:12:79:f8:64:82:1e:
         15:a2:f7:62:89:8b:4c:a2:14:4b:bd:cb:74:b4:2e:8a:e2:ed:
         d3:1d:67:ca:6c:12:5c:1c:ed:c8:81:ee:1b:f4:03:e3:24:25:
         bb:0c:07:89:0b:0e:2a:01:76:a4:34:d3:a9:2f:b7:4b:0a:a2:
         cf:88:d9:69:9a:d9:0b:fe:44:23:52:6d:29:db:ae:5a:dc:0b:
         40:bc:69:62:bd:77:ba:88:e2:08:bd:be:15:25:46:ec:7a:f6:
         c7:c4:01:ec:07:45:a3:92:4f:bb:d9:23:7b:76:e5:10:20:3b:
         e9:e1:21:b7:ea:2d:0c:8f:81:44:ff:d3:bc:3d:b9:fe:1f:5d:
         6b:4b:88:fa:7c:e0:bf:cb:3c:3d:97:00:e3:a8:be:8a:e1:98:
         a1:48:45:e4:da:f4:0c:25:b3:ae:9e:0a:7f:ea:22:e0:4a:ff:
         8d:12:bf:02:5e:fa:59:62:2b:8e:b7:4e:8b:66:1e:18:da:09:
         47:32:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----