Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File:                     tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier:          wnxhoVRGawCZjkd20BvID3JfybQvc3Z5GpQCLjSQ6z8=
Subject key identifier:   5F:DA:B8:5C:D1:52:03:B8:15:17:B7:55:85:2F:1C:C0:AE:53:D6:73
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer:       /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial:       01962E99073BBDFF1B6C6959DD6477C46FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number:          0C10
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: 2NfP1AkTrUJfbSfJ6fEUsnDJ31yZo8JlU+8ZYbBZnEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:07:3b:bd:ff:1b:6c:69:59:dd:64:77:c4:6f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=5fdab85cd15203b81517b755852f1cc0ae53d673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:c2:a6:b1:86:5d:52:3a:1e:0f:7b:6f:42:
                    6a:2a:24:45:da:5f:c4:0b:44:5f:9a:e6:8e:10:57:
                    34:68:8d:a5:63:45:51:75:22:5b:0b:2b:6d:32:00:
                    e1:86:4e:c8:85:de:d3:0f:a5:aa:91:1c:c8:af:6f:
                    40:9b:d5:c8:8c:5a:69:9b:19:47:80:0c:4d:19:91:
                    8e:6a:b4:83:66:be:40:ab:bc:cb:ca:ac:4b:52:87:
                    12:73:7d:6e:b2:0b:f6:f0:da:71:20:b0:b3:d1:04:
                    50:f4:e0:e3:4a:26:0d:1c:2e:c9:73:fb:a4:93:b8:
                    0b:f6:79:08:99:e2:10:ed:d2:a8:44:09:51:f5:91:
                    c0:d4:a6:27:24:e6:fd:55:d4:39:5d:1b:84:89:c8:
                    9c:82:f6:e8:f4:a5:5f:24:48:3d:29:b1:93:75:cf:
                    13:51:ad:21:46:df:b0:0d:8b:46:28:90:59:cf:2f:
                    bc:3c:b5:b4:95:ba:5f:95:4f:d2:e2:74:12:37:1f:
                    9f:6d:ac:a8:f9:ae:6e:f7:ba:52:0a:4b:db:d1:98:
                    c5:ca:47:7a:16:fd:99:3d:6a:3b:c5:a7:22:18:75:
                    32:3c:e9:86:d4:a0:04:07:85:15:5b:61:eb:09:b7:
                    e5:e2:7b:b5:41:4e:8c:36:a4:0b:eb:5f:9b:c3:d3:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DA:B8:5C:D1:52:03:B8:15:17:B7:55:85:2F:1C:C0:AE:53:D6:73
            X509v3 Authority Key Identifier:
                keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:89:73:5a:6f:eb:ad:e9:7f:2c:a7:91:3c:6a:7a:25:77:
         db:33:1d:04:28:a9:be:8b:8c:3b:61:9c:80:bd:ec:b1:95:a4:
         30:21:69:48:80:f6:be:9c:13:39:74:64:3a:af:ca:99:3a:9d:
         d6:0f:7d:ec:31:0d:20:f4:7a:bf:32:f8:3e:1c:d0:bc:b3:eb:
         cd:19:23:7c:80:ab:31:b3:61:d3:28:ca:5a:19:78:58:79:89:
         b2:c0:1d:ea:89:28:8a:36:ca:50:35:55:55:c0:1c:5e:2d:d3:
         b5:23:94:f4:f3:d2:8a:2c:e7:d7:7b:a3:9e:29:fe:bb:48:e4:
         1f:e4:16:72:73:49:53:b6:03:9b:dd:7f:da:1e:39:16:79:1c:
         38:5d:b0:2e:95:3b:07:8d:9f:37:ad:54:3b:fb:00:29:da:98:
         bf:3b:db:6b:b4:5d:9f:da:64:7d:05:19:9d:0b:19:97:d2:04:
         61:5e:58:9d:45:c7:30:41:ce:13:b5:79:b3:0b:43:0c:ab:18:
         4d:e4:4d:aa:30:40:79:2d:80:3a:e7:ce:7c:74:af:b2:5e:b5:
         01:b2:15:02:c7:cb:82:5a:c8:10:7c:8f:6a:b9:83:1a:f0:00:
         c8:9d:e5:bc:41:a5:b0:e9:8a:41:21:ce:60:b1:60:bf:d2:46:
         13:8b:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----