Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
File:                     Bv170s3aV23AzQiOvm7mAZceEjQ.mft (raw, json)
Hash identifier:          jWlksQS1o/4EOhxzBLtdd0Gu+N4tJQEn/NuKrktmNPk=
Subject key identifier:   62:B6:2C:50:D7:A5:2E:E3:BD:CC:52:1E:82:9A:E3:E0:19:30:9E:C1
Authority key identifier: 06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34
Certificate issuer:       /CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
Certificate serial:       01962F745B9AABDABF9831441CA53B9C55EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft
Manifest number:          0CC1
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: Bv170s3aV23AzQiOvm7mAZceEjQ.crl (hash: Adlkz9B7THD+KQg/WuhbptnRlXw0QoCZDCtZ9ZKuLSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:9a:ab:da:bf:98:31:44:1c:a5:3b:9c:55:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fd7bd2cdda576dc0cd088ebe6ee601971e1234
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=62b62c50d7a52ee3bdcc521e829ae3e019309ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:0a:d3:ea:ff:e3:82:52:88:8f:87:1e:20:
                    ce:d8:10:8b:d9:8f:28:21:b9:67:9a:97:c2:ce:06:
                    3b:fb:d7:10:5a:73:51:ee:4f:8f:c7:61:9d:5f:b8:
                    cc:3b:93:19:9c:f6:7d:41:2f:b1:f7:6a:34:1d:cf:
                    86:9c:4a:0c:4a:53:dc:ff:8a:ec:f7:29:00:bc:22:
                    ca:82:4e:41:d5:cc:85:85:21:fa:4a:c6:c3:6f:89:
                    50:14:d1:8a:f1:04:d1:dd:c8:17:77:da:3a:06:60:
                    4b:05:ef:93:8c:ad:fb:5d:a4:f7:37:0c:d5:a1:a0:
                    40:bf:6a:ae:5f:66:ba:6a:50:4c:4c:6d:8e:cc:69:
                    19:78:ff:49:e2:4b:dc:70:93:de:5a:f8:59:c5:ea:
                    54:ee:50:b3:96:08:1d:d9:b0:01:ed:f4:66:f8:ba:
                    b0:f6:96:85:3f:4c:88:a3:c1:fd:40:7b:94:2a:20:
                    21:ae:d8:f6:9f:d3:53:54:25:17:5b:f6:45:e5:14:
                    e0:63:91:29:17:59:69:67:e6:10:a3:0c:8a:a1:3c:
                    98:90:16:20:7e:05:83:22:8a:90:b5:a2:5b:d1:bd:
                    b2:a5:de:e7:fa:de:2c:e2:9e:7a:f9:2f:7d:94:f4:
                    ad:e5:1e:30:73:fe:19:fd:12:82:15:34:de:4a:e5:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:2C:50:D7:A5:2E:E3:BD:CC:52:1E:82:9A:E3:E0:19:30:9E:C1
            X509v3 Authority Key Identifier:
                keyid:06:FD:7B:D2:CD:DA:57:6D:C0:CD:08:8E:BE:6E:E6:01:97:1E:12:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bv170s3aV23AzQiOvm7mAZceEjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/620df1-34ca-4e57-b3e1-b8d4bba7021e/1/Bv170s3aV23AzQiOvm7mAZceEjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:78:11:d7:7a:09:28:77:3a:a3:f8:0b:85:b9:f0:18:d6:c1:
         6d:43:66:73:64:8f:e5:dd:7b:51:36:e3:ad:e1:9e:68:90:d0:
         6c:88:4b:ce:72:c5:83:a7:ad:dc:d6:d6:33:06:1d:b9:f3:bd:
         f1:a3:82:74:d0:9a:cf:60:93:ac:a4:fb:12:26:bb:b8:e3:19:
         1c:d3:3b:a2:6c:3d:7e:f1:52:0b:2a:a4:9e:ac:a9:80:bd:ee:
         71:3e:2e:c0:fd:d2:ce:a4:38:18:5e:01:76:b1:8e:71:ba:fa:
         f5:43:96:c0:f8:3c:54:9a:91:22:57:5f:aa:e0:13:78:98:1f:
         d3:9a:a3:b8:93:1a:3d:64:17:97:83:68:18:25:ff:69:2b:21:
         97:eb:28:ed:46:91:c5:12:9d:d5:60:6f:a0:60:f7:e4:82:7f:
         36:f6:86:ac:76:cb:9c:8a:c8:5f:88:a5:11:46:98:50:44:84:
         dc:7a:60:b9:75:ba:3f:71:33:a6:31:73:bd:52:2a:dc:83:af:
         c8:01:8d:d5:82:83:39:f3:d1:e0:79:c0:96:6a:47:65:d6:c9:
         19:f2:b2:b3:c2:f7:c4:e8:ab:06:1d:67:75:13:18:9f:80:18:
         fd:9e:24:a3:1e:e4:a6:8a:46:0d:3d:f4:16:9f:f4:8e:34:e2:
         c0:ac:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----