Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
File:                     H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft (raw, json)
Hash identifier:          M6v7TomCS0LTCN2oIp/YvFRSQwf/HtCYaC4nMe1Xhq4=
Subject key identifier:   06:40:1C:EB:74:F8:D0:1E:02:1E:D2:44:F3:9B:7A:5E:FD:43:22:7B
Authority key identifier: 1F:B4:B2:3A:44:DF:C5:AE:56:9E:74:CF:BB:0F:03:E9:27:B5:61:E2
Certificate issuer:       /CN=1fb4b23a44dfc5ae569e74cfbb0f03e927b561e2
Certificate serial:       01962E98808E2880DC9209E726F3D875BBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7SyOkTfxa5WnnTPuw8D6Se1YeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
Manifest number:          0C5F
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: H7SyOkTfxa5WnnTPuw8D6Se1YeI.crl (hash: Bnr+0A4lysDAAmfz71K9AZXWQ8CQY0hN2ZbnlBFpOxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:8e:28:80:dc:92:09:e7:26:f3:d8:75:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb4b23a44dfc5ae569e74cfbb0f03e927b561e2
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=06401ceb74f8d01e021ed244f39b7a5efd43227b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:a2:c2:06:a1:ac:f4:37:55:3e:78:c1:1f:
                    ac:fe:20:a9:9d:26:fe:18:af:d7:17:dd:42:78:f5:
                    ac:df:d9:98:f6:a1:b9:92:15:75:ba:1e:2a:08:eb:
                    63:2b:56:e4:c2:16:77:94:a6:a7:d0:56:b4:38:9b:
                    ff:99:ec:e5:14:4f:d0:5c:22:f4:b6:94:1d:8e:7b:
                    11:f7:7f:2e:ce:5b:a3:d9:59:5a:9e:55:10:ad:f2:
                    2f:75:61:36:6d:ef:72:ea:16:e2:6a:f7:d7:8e:81:
                    03:5c:21:96:26:35:9b:7b:12:a5:9e:15:7f:53:25:
                    95:87:d3:86:16:c1:a6:66:f1:9d:ee:2b:53:42:1e:
                    1c:84:9f:e7:f8:c8:4e:1e:0d:6f:3c:81:2a:52:ae:
                    10:1a:a2:39:e6:84:bb:9c:11:2e:db:74:6c:1b:60:
                    1d:a0:00:6e:27:22:d6:21:f5:ce:62:d2:cb:27:b6:
                    96:99:74:f7:da:6e:59:3b:9e:37:4c:3e:88:80:a5:
                    ff:f2:3f:29:7d:26:e3:2d:00:51:ad:7a:fb:f2:03:
                    eb:0d:e9:38:52:b4:8c:90:e6:39:e0:4a:ac:c8:58:
                    86:0b:41:74:44:c8:fe:7e:53:28:eb:d7:f6:2f:73:
                    59:d8:aa:55:3b:2d:d7:30:1e:06:0f:32:32:c5:4d:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:1C:EB:74:F8:D0:1E:02:1E:D2:44:F3:9B:7A:5E:FD:43:22:7B
            X509v3 Authority Key Identifier:
                keyid:1F:B4:B2:3A:44:DF:C5:AE:56:9E:74:CF:BB:0F:03:E9:27:B5:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7SyOkTfxa5WnnTPuw8D6Se1YeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:9c:7b:3d:2a:ed:0d:f0:2c:40:b9:79:96:34:3d:55:5f:
         ab:32:89:74:70:07:08:1d:fd:95:c5:76:e3:eb:65:1d:62:d4:
         31:56:45:6a:6f:42:48:95:b2:bf:35:99:57:65:8c:f6:23:73:
         02:43:08:6e:9b:5a:80:c6:a1:b3:a6:3e:44:a1:34:27:9d:a2:
         6c:bf:80:73:ed:86:60:32:9d:a9:17:83:77:85:b5:c4:11:70:
         92:f3:cd:91:8d:1c:82:c1:40:bd:73:3b:e6:15:71:8a:f3:ae:
         6e:e6:50:66:76:0b:63:be:7e:3f:00:fe:5a:b2:11:7a:fa:7a:
         02:51:3c:18:e7:61:e5:a6:8e:fd:5c:ee:5d:b6:2a:46:e0:04:
         71:1b:48:a0:65:20:16:b3:d8:31:c9:db:e6:63:15:a6:da:2a:
         15:28:a7:00:10:91:5b:b9:b9:67:84:0c:d2:1f:7d:ef:d8:a7:
         33:f0:99:cd:69:33:e9:ac:e6:42:d0:55:90:c7:b5:8f:97:52:
         8c:f4:9a:1e:f9:f2:82:b0:28:8f:0e:3e:01:6e:01:7d:0c:85:
         ed:6c:84:74:d1:a8:ac:9f:8a:f6:1e:1c:41:d3:65:cd:e2:56:
         0e:e2:8f:23:3b:cd:b5:83:a4:87:6a:59:13:77:42:0e:75:be:
         18:da:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----