Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File:                     prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier:          AaY0S6PZGpqGOiENe8O9TvGXAuXgkWo1iGSAAr6zy1w=
Subject key identifier:   39:EE:05:C8:60:37:66:1C:3E:E8:64:27:2F:04:3A:3F:08:9D:E7:A9
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer:       /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial:       01962E98F0A7952E625A127ACABDDEE06F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number:          0846
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: QCLEsdDW4+NLIz0+uWh0ztRXU20FLjOzY9UGnqDUCec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f0:a7:95:2e:62:5a:12:7a:ca:bd:de:e0:6f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=39ee05c86037661c3ee864272f043a3f089de7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:1f:e0:44:38:94:97:2a:cd:e4:3e:03:0d:
                    ae:aa:1a:2c:87:2c:53:db:e3:2f:ec:a7:90:bb:29:
                    e5:8e:4f:5d:92:ac:90:72:10:64:d6:98:06:40:8e:
                    0d:c5:4b:2a:89:77:b6:19:6b:58:b1:d7:71:73:05:
                    04:df:29:48:89:0b:6a:a8:bd:57:6f:4c:d5:db:60:
                    c4:8d:a7:df:73:3f:09:3f:20:df:55:7c:22:ad:9c:
                    d3:c4:ba:f9:a1:dc:ce:4e:32:93:f6:64:ad:c3:33:
                    71:4c:12:85:1a:af:31:f3:64:33:21:9b:de:64:a3:
                    66:69:f3:ae:c6:26:8f:68:ac:0c:67:e6:7e:6a:27:
                    a2:13:40:f4:27:34:1e:29:ac:d7:8f:b7:6f:1b:bd:
                    c8:3a:63:b9:b6:b9:75:f4:37:87:a1:5e:93:1f:b9:
                    a3:cf:9e:db:57:93:ec:46:b4:c2:a1:08:5b:1d:76:
                    39:ab:ab:3c:89:48:63:27:f1:ee:f4:5f:c5:9f:f9:
                    e9:81:73:56:9d:65:9d:a3:6e:88:fc:81:11:df:4b:
                    3d:18:b9:82:a7:cd:cd:63:5e:f4:be:17:69:62:50:
                    71:6b:4c:54:c0:21:fa:8d:b7:0e:e8:25:47:5d:9c:
                    91:ab:f2:15:3d:07:63:5a:5c:31:3d:08:a9:68:03:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EE:05:C8:60:37:66:1C:3E:E8:64:27:2F:04:3A:3F:08:9D:E7:A9
            X509v3 Authority Key Identifier:
                keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:a0:37:16:f0:30:aa:4c:45:51:47:ef:38:85:a4:d5:13:
         f7:a0:b2:19:19:ba:5f:9b:32:8e:7d:47:c9:09:9a:6e:e3:2d:
         3e:50:24:f8:dd:59:de:25:07:cb:cf:d3:84:d5:5f:b0:ac:90:
         9c:d7:d6:e1:55:65:6f:30:ae:44:ac:2c:73:c5:06:9b:64:fb:
         08:60:31:c8:e3:20:4a:cd:10:95:e8:bd:f9:b0:ce:4b:84:a8:
         ee:94:86:c0:34:9e:f7:51:9f:c0:d2:9f:ea:91:1d:27:9a:96:
         e7:74:d6:a7:f8:ec:45:1c:09:59:97:69:4b:bf:9d:28:6e:79:
         67:db:ff:bf:26:cc:ed:81:58:73:1a:96:26:6e:49:2a:22:38:
         2e:2a:ed:a7:97:b1:a8:d3:33:17:39:8b:94:83:f9:2b:44:a8:
         ce:30:6e:c8:45:95:78:02:34:1a:99:d4:a9:5b:49:e4:5c:49:
         82:70:86:30:e6:d0:cd:69:ef:ef:87:d4:ed:23:ac:ff:5c:58:
         08:ef:a8:10:f8:e0:9c:5a:b1:ab:40:f7:59:ed:52:d1:5e:b9:
         23:e5:93:b2:b1:a6:6f:02:af:70:eb:3f:aa:15:34:b1:6d:cc:
         5d:a1:74:22:c8:83:c9:12:b3:91:34:81:21:e8:f8:2d:d2:ee:
         14:5c:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----