Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File:                     CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier:          395CKSK6i9SSymnaIYmwBcxJcXiRsbyhTcp9aozewNg=
Subject key identifier:   AF:DE:10:CC:E0:99:8A:1E:EA:7C:AD:6F:C4:90:57:15:7A:CD:B2:18
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer:       /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial:       01962E9905AE99F910407EA0B61E52FFB2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: mCa5H6TGZMl0AaBtQ6QhHYN9yBq4SIp09O6LNEBVeQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:05:ae:99:f9:10:40:7e:a0:b6:1e:52:ff:b2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=afde10cce0998a1eea7cad6fc49057157acdb218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:cf:a6:a5:66:e8:a3:c2:4d:2c:a7:97:b9:
                    39:8d:f7:10:f1:c3:da:5c:3b:98:3e:30:90:09:e3:
                    08:e8:d4:a7:c9:45:22:9d:74:dc:67:74:a0:07:31:
                    e0:84:aa:d0:c7:07:19:a3:16:c2:68:2c:84:fa:e2:
                    ec:49:a5:85:3f:7f:e7:79:56:9d:0b:06:5f:35:f0:
                    06:22:1b:63:c7:95:42:cf:e4:51:55:e4:1c:bf:09:
                    45:c3:59:7c:5e:b8:99:41:04:6a:83:7c:0f:bc:02:
                    3b:a0:5d:1e:3c:d6:07:53:46:dd:f5:8d:d7:96:9d:
                    b7:09:ef:cc:71:d5:a4:fe:9f:44:7f:12:91:88:9d:
                    20:f8:dc:0f:77:2f:e8:5c:a2:08:96:e5:17:99:d7:
                    94:91:f8:31:c0:11:32:5b:8b:d9:06:f3:87:25:1b:
                    eb:0b:7d:82:3e:ac:bc:5c:b1:8a:ce:a2:92:3b:07:
                    34:22:bf:19:67:ca:f6:9e:84:ac:3c:c2:9b:4e:37:
                    46:44:bf:d2:ef:33:cd:ca:96:b9:f0:8b:ec:55:25:
                    ac:03:13:d5:f3:72:1e:e9:6c:5e:94:6e:3f:f0:1f:
                    b1:15:b9:96:d5:fb:d9:06:26:17:ae:c4:65:da:62:
                    97:de:fa:de:61:6a:10:cd:a6:98:d5:b8:26:5d:79:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DE:10:CC:E0:99:8A:1E:EA:7C:AD:6F:C4:90:57:15:7A:CD:B2:18
            X509v3 Authority Key Identifier:
                keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:87:9d:ab:d2:49:1f:a6:50:4e:1e:96:7c:cc:35:02:ca:
         13:a8:59:05:cc:5e:4b:95:83:77:ea:47:1e:b1:4b:f0:4a:38:
         bb:6c:2c:e2:f7:15:54:42:8c:32:8d:ee:1f:1a:0b:71:1c:c0:
         ab:7d:8c:48:8a:5a:16:66:07:44:11:4c:9c:5c:61:36:25:98:
         10:64:6f:64:bf:6b:c1:6e:c9:6f:c9:9b:22:56:b1:a5:5c:b1:
         b7:0a:c2:b7:ed:56:e1:c4:8a:d9:0a:a3:bd:45:30:5a:8b:40:
         a5:be:6a:1f:8d:ce:a1:e6:55:aa:86:e2:bc:2b:39:1c:16:56:
         9e:fe:6e:cf:83:2f:92:8d:bb:ad:93:89:13:4a:02:ba:66:ce:
         32:5d:10:6d:11:e1:62:87:5a:d5:10:54:6a:ee:ff:b0:9b:5c:
         37:66:28:69:c2:16:8d:93:7b:d8:0e:a8:13:41:98:b3:42:18:
         19:2a:0d:2f:ba:35:9a:24:16:68:a1:da:d1:a1:a1:97:f2:77:
         84:36:b5:ee:cb:e8:2d:c4:e4:9a:fb:01:29:b2:ad:8e:d0:88:
         6c:fe:65:01:69:a1:c9:f8:3d:a4:a2:2b:54:1a:2b:e5:35:af:
         43:e5:85:fd:35:ce:b4:03:f0:1e:0e:ac:83:a3:b8:c7:3b:11:
         58:e2:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----