Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
File:                     kyZYOBNEfHvd61oBwydNjkHDAaI.mft (raw, json)
Hash identifier:          eTYLFj1m1c6Pft+4+tAbTYFYm8ytnhtd+giL7ULcsLA=
Subject key identifier:   30:53:87:8A:D1:0E:D6:5A:72:99:73:BB:ED:A2:95:B4:55:19:88:37
Authority key identifier: 93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2
Certificate issuer:       /CN=9326583813447c7bddeb5a01c3274d8e41c301a2
Certificate serial:       01962F065809A1E5C3E9AC3FA3EB69E99065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft
Manifest number:          0FB1
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: kyZYOBNEfHvd61oBwydNjkHDAaI.crl (hash: fgVq3fwaE3zJY3oCdRaRvKatg91OQ5BanOPQjGvskDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:09:a1:e5:c3:e9:ac:3f:a3:eb:69:e9:90:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9326583813447c7bddeb5a01c3274d8e41c301a2
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=3053878ad10ed65a729973bbeda295b455198837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:d7:03:c0:00:81:b0:ad:e4:6b:a7:ed:f8:
                    81:3d:8e:56:74:cb:ea:90:90:7f:f0:0b:52:c1:31:
                    ca:f4:3e:08:af:14:cb:76:28:4e:01:4d:22:8d:81:
                    56:16:68:40:a3:18:b7:fc:ce:ce:f2:9c:88:b5:29:
                    0e:71:74:d2:db:e8:e2:89:aa:a4:85:75:14:de:aa:
                    dc:de:cc:85:ee:c8:be:23:12:9d:3a:13:6b:d4:d3:
                    3c:14:70:f5:13:11:f7:40:24:ac:5d:ce:09:ff:9b:
                    32:81:3d:47:68:4f:3e:ee:3a:fa:b4:50:c6:92:62:
                    f1:74:55:62:1e:46:91:73:dc:20:da:4e:6d:54:8d:
                    1f:1b:18:4c:6a:ff:e1:c5:3b:06:2c:1e:39:c7:49:
                    7d:c3:bb:b2:b5:e3:3b:8a:e9:0d:c0:31:83:9a:a9:
                    f4:14:96:a4:07:ca:b6:5b:16:f6:0b:0f:f6:98:ba:
                    24:e9:34:8f:a9:a6:6c:43:88:b9:c7:0c:f4:74:94:
                    6a:0e:e8:2b:38:c2:65:1a:c0:b2:4b:4b:69:6f:e8:
                    08:d7:39:6c:a9:87:28:79:01:d2:f7:2c:b6:15:64:
                    62:52:fa:88:26:4c:fe:06:f1:3b:9e:fc:73:60:bb:
                    d0:50:cb:89:b3:8c:45:73:21:a1:4a:ac:db:51:91:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:87:8A:D1:0E:D6:5A:72:99:73:BB:ED:A2:95:B4:55:19:88:37
            X509v3 Authority Key Identifier:
                keyid:93:26:58:38:13:44:7C:7B:DD:EB:5A:01:C3:27:4D:8E:41:C3:01:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyZYOBNEfHvd61oBwydNjkHDAaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5dec06-8b1b-4c76-a54c-69b4b4fb9d12/1/kyZYOBNEfHvd61oBwydNjkHDAaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:65:48:0f:6c:c0:b3:7c:17:01:df:70:1f:b8:7e:13:a5:28:
         51:05:0f:c6:5d:fe:8d:09:bb:e2:df:85:79:ac:5f:4d:3b:bb:
         95:e6:97:70:d8:86:0a:19:d6:74:ef:e1:e6:2b:0b:1f:06:ec:
         50:7b:13:19:3d:03:4d:c6:31:c6:1d:2d:bb:c8:91:35:0c:55:
         94:0b:40:b5:74:e5:d9:f3:9a:c5:12:b1:06:40:d2:23:f3:00:
         49:ff:00:d7:f6:78:97:97:39:43:3c:38:02:30:15:45:6b:1c:
         30:47:b2:f7:af:84:21:ab:a4:e3:10:36:bc:6f:3e:61:72:32:
         17:93:63:1b:18:36:a7:88:43:40:ab:d9:f0:e2:27:04:b2:35:
         ff:16:0b:4c:05:22:21:e8:b7:ba:bc:98:54:10:ca:55:d0:e2:
         4f:f2:7a:93:fe:71:96:59:79:e4:9c:81:b4:1e:d8:6b:b1:06:
         25:20:7a:1f:0d:35:3b:bd:81:0d:fb:a0:4e:81:33:fe:89:80:
         24:e6:8f:8d:7e:f7:9c:f6:fe:57:2e:24:9d:32:1c:d5:09:61:
         63:ec:d7:36:32:d5:07:d3:05:b4:52:0c:d5:7b:16:21:f0:52:
         c1:b8:9b:75:fc:df:a8:e7:2d:f4:99:14:4d:f0:b0:6a:15:68:
         28:93:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----