Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File:                     c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier:          kTEsa/Z9W222seyqxd2HfAklTPIwo3D4k8hGiviTeB4=
Subject key identifier:   27:AE:F3:E7:2E:78:B3:E9:B3:C9:93:AC:5E:E6:96:DE:FC:7E:0E:A6
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer:       /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial:       01962FAB4326C3A8E69674BA014F90B6D346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number:          0171
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: 4Zjgmwz+9fjrvPqOm7nT6Zmoj/2edtgP02OowW+oJU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:26:c3:a8:e6:96:74:ba:01:4f:90:b6:d3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=27aef3e72e78b3e9b3c993ac5ee696defc7e0ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:0d:a4:2d:d9:28:0f:91:76:61:4c:78:ce:
                    20:07:d3:54:d0:cb:f6:fa:1a:b7:0f:45:f1:7d:56:
                    89:3c:cc:a2:02:00:ce:2d:12:a9:37:6d:2f:13:53:
                    33:71:7c:89:a5:96:b6:e5:54:c2:66:5a:be:c8:73:
                    72:9d:62:e8:b4:da:b7:6d:e3:53:65:42:a8:4e:71:
                    44:d3:2e:86:9a:f9:1e:0c:a0:85:80:92:43:c1:0a:
                    c4:a8:03:72:d6:6d:75:b0:d4:b0:47:04:91:d2:a2:
                    40:a3:3f:51:fc:99:1a:8d:ee:19:5a:1f:95:27:a0:
                    59:05:99:b3:fb:41:86:e5:c7:c4:dc:ac:f4:1e:04:
                    4d:98:6d:aa:ba:e3:59:91:ed:59:ef:96:fa:b0:7f:
                    f3:11:01:cb:80:1a:fe:a6:6d:1b:4d:2c:12:44:fa:
                    ce:23:ee:d2:0e:52:2d:b1:08:80:72:ab:2a:1a:6a:
                    fb:8f:18:7b:c9:d7:8a:8a:fc:d7:c4:b5:f3:73:36:
                    f1:18:19:11:80:98:ac:05:43:c6:a5:b7:fe:77:24:
                    74:74:03:00:0c:ca:15:eb:16:10:0e:5d:55:81:20:
                    7b:35:ff:f3:f6:a1:1c:00:d8:79:79:6e:83:13:37:
                    6b:98:08:1f:41:88:92:69:c9:4f:5d:05:77:a9:88:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:F3:E7:2E:78:B3:E9:B3:C9:93:AC:5E:E6:96:DE:FC:7E:0E:A6
            X509v3 Authority Key Identifier:
                keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:4d:38:cb:bc:55:ec:e5:c6:fb:20:45:67:6f:95:89:2d:
         f1:a8:83:5e:a9:fe:7c:4c:64:ed:32:45:e7:1d:e6:22:48:d5:
         8b:17:e7:31:d6:2d:16:b6:c3:70:18:1a:b0:79:e4:67:b9:52:
         27:61:fe:c3:16:94:f7:64:11:13:02:f6:e6:e6:8f:47:43:a0:
         7a:64:60:88:fc:87:96:ae:7e:13:0d:8f:9f:85:b6:fc:d6:c6:
         c5:e5:20:92:80:88:1f:b3:41:c3:ad:7f:03:dc:1d:5c:36:55:
         0b:55:d5:b7:c9:58:6d:c9:6d:ea:3b:a2:0d:a4:ee:b5:94:a3:
         29:18:f0:65:70:a8:54:56:7b:d7:30:0a:3d:8f:9e:29:13:88:
         9b:a9:d9:74:9b:7e:45:83:8d:f6:ad:ee:08:7d:bd:c2:83:33:
         40:fe:1b:22:b1:ce:bb:95:09:27:02:16:b2:96:5e:46:8f:74:
         4e:03:80:49:21:ae:e7:19:69:f4:1f:bb:2e:0b:b6:93:ee:2b:
         94:86:af:7a:7a:b1:c0:6c:41:74:5a:f2:f7:ac:56:29:43:b4:
         0a:2d:95:3d:20:08:6a:46:57:ae:9f:c8:ab:1a:e8:36:6c:7a:
         1b:a8:9e:4a:dd:99:42:ad:24:9d:d6:72:49:1a:77:a0:96:e6:
         cd:61:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----