Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9d57b2-66a4-4582-9378-e0a22d9e49df/1/l0U3HhM7kulW1FwUY4Ln1_G9MlI.mft
File:                     l0U3HhM7kulW1FwUY4Ln1_G9MlI.mft (raw, json)
Hash identifier:          +YZ/M2xUNJpabd+LWNT1R3F1uhZ1VxwKjCwXeLN8s2E=
Subject key identifier:   A0:B2:13:53:D3:5E:C1:25:1A:B7:DB:61:37:52:5A:33:02:BB:80:3A
Authority key identifier: 97:45:37:1E:13:3B:92:E9:56:D4:5C:14:63:82:E7:D7:F1:BD:32:52
Certificate issuer:       /CN=9745371e133b92e956d45c146382e7d7f1bd3252
Certificate serial:       019547489404CC70C4F78EB908BE20314E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0U3HhM7kulW1FwUY4Ln1_G9MlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9d57b2-66a4-4582-9378-e0a22d9e49df/1/l0U3HhM7kulW1FwUY4Ln1_G9MlI.mft
Manifest number:          06
Signing time:             Thu 27 Feb 2025 12:01:33 +0000
Manifest this update:     Thu 27 Feb 2025 12:01:33 +0000
Manifest next update:     Fri 28 Feb 2025 12:01:33 +0000
Files and hashes:         1: l0U3HhM7kulW1FwUY4Ln1_G9MlI.crl (hash: hUoqwq5cHUWFfT22B7RQBa8utkDfHaoMXEJkzFA7iAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:48:94:04:cc:70:c4:f7:8e:b9:08:be:20:31:4e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9745371e133b92e956d45c146382e7d7f1bd3252
        Validity
            Not Before: Feb 27 12:01:33 2025 GMT
            Not After : Feb 28 12:01:33 2025 GMT
        Subject: CN=a0b21353d35ec1251ab7db6137525a3302bb803a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:4b:89:bb:b1:eb:94:cc:fc:ad:75:7c:83:
                    0e:ba:a5:40:53:3b:3e:5d:bc:e9:27:d7:35:18:c4:
                    57:34:fb:fb:2e:25:38:40:c6:10:ca:49:ed:85:ab:
                    96:3f:3c:fb:23:5c:1f:6b:29:90:ef:3c:29:b3:84:
                    a2:67:4f:d7:9c:db:d6:a1:04:2c:0c:12:c4:8d:b4:
                    fe:71:6a:89:97:06:85:a1:eb:03:e9:d6:46:d3:41:
                    f1:05:d9:d3:76:d1:a3:21:6a:4c:bd:ee:89:cd:24:
                    38:31:29:61:68:e4:30:3f:61:2f:fb:36:b6:b8:a8:
                    82:50:42:b7:b9:77:f8:9f:67:3c:0b:31:62:c8:ef:
                    cb:98:18:81:b9:ca:12:6e:f4:9e:e5:0f:a0:ee:9a:
                    3e:11:25:6f:97:15:8a:00:e7:69:a4:14:2a:1e:70:
                    3e:d3:a6:cf:27:b9:7a:c8:c0:24:a7:b6:bb:ed:ba:
                    91:1d:7c:a2:fa:dd:98:33:9c:19:3b:a9:f5:06:f4:
                    6c:db:14:be:fb:8d:a1:50:69:d8:50:ff:51:18:de:
                    c7:80:f7:34:de:98:a7:d0:63:fa:3f:bf:0c:6a:6d:
                    d0:a3:bc:3f:dc:bb:c9:52:58:8f:c2:33:ef:13:e7:
                    c2:3c:02:f3:a9:ba:e6:27:96:a2:3a:91:84:d2:01:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B2:13:53:D3:5E:C1:25:1A:B7:DB:61:37:52:5A:33:02:BB:80:3A
            X509v3 Authority Key Identifier:
                keyid:97:45:37:1E:13:3B:92:E9:56:D4:5C:14:63:82:E7:D7:F1:BD:32:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0U3HhM7kulW1FwUY4Ln1_G9MlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9d57b2-66a4-4582-9378-e0a22d9e49df/1/l0U3HhM7kulW1FwUY4Ln1_G9MlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9d57b2-66a4-4582-9378-e0a22d9e49df/1/l0U3HhM7kulW1FwUY4Ln1_G9MlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:de:3c:4f:18:67:42:6e:56:d2:f9:d6:1f:be:1a:47:a5:
         35:cd:e7:f7:68:d1:86:cf:c9:38:a1:76:3c:3b:22:62:63:29:
         94:23:03:fc:2a:d1:5a:c0:92:61:27:65:a0:a1:4c:ea:4c:ee:
         eb:6f:28:f5:10:8d:23:cf:8e:d2:84:eb:1d:0b:d3:9b:bb:41:
         93:b0:2e:cb:e6:17:ea:a9:14:17:b2:4e:98:e7:40:29:fa:58:
         7f:7b:a7:b1:df:9f:63:7c:21:7f:3e:7e:bf:fb:99:dd:2d:ea:
         fe:2a:d7:df:56:de:b8:46:7c:08:5b:42:4b:4d:da:f8:ef:3c:
         35:6f:c7:74:24:1b:94:d1:56:fc:9e:47:01:86:e4:19:ab:f5:
         70:68:23:79:7f:b3:82:3e:b2:31:67:21:77:01:de:7f:d5:e6:
         66:c8:4a:ba:51:9f:28:d9:1a:82:b0:29:7d:95:6c:69:20:50:
         7c:d4:bb:50:bd:26:16:58:32:7d:fe:a7:e0:5e:5d:d9:71:21:
         d7:66:9e:91:cf:08:05:78:6d:63:13:bc:27:91:19:fc:68:02:
         c6:73:27:2e:a6:4f:9a:28:be:2b:f8:41:b4:94:f1:47:2d:f2:
         87:aa:bf:27:b1:bd:c3:9c:3b:4e:ec:f3:65:96:cf:57:71:6f:
         51:04:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----