Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File:                     DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier:          Lr7b4i7hrtVS6pEDP26qdK/n4jazs9h7UlZ3dDeLAUY=
Subject key identifier:   CB:9B:77:93:A7:1E:A6:2B:11:B5:44:EF:78:BF:17:0B:4E:33:CD:11
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer:       /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial:       01962F06C90215B33ADD7E3BEA007CA3E53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number:          91
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: NeBlJEtMW8mvcKCFh4IaoueEzF63jZuWxcFoiTn2gKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c9:02:15:b3:3a:dd:7e:3b:ea:00:7c:a3:e5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=cb9b7793a71ea62b11b544ef78bf170b4e33cd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:70:0f:02:24:4c:36:02:96:0f:6d:f6:cc:
                    6e:e2:4c:71:59:ba:e9:9e:12:4f:7d:92:bb:54:af:
                    f3:ab:19:1f:66:a6:6d:4c:83:7e:14:ab:2b:f1:a3:
                    b2:6d:a4:c7:0c:f6:01:f5:23:57:27:a1:34:eb:83:
                    67:5a:53:7a:c9:35:ad:e3:26:36:2e:20:6c:56:2b:
                    8d:a0:41:65:4e:7a:c4:d8:1c:bc:bc:a5:38:5a:0d:
                    d9:5f:0d:49:df:0a:f8:51:f6:ea:ae:53:32:50:be:
                    52:58:8a:4c:06:98:62:0e:01:a7:21:38:db:2f:b2:
                    a0:a7:46:b8:df:d2:28:6a:6c:53:30:0d:64:d4:be:
                    72:71:5b:cc:63:dc:08:2a:da:14:d8:02:da:67:25:
                    da:11:47:7c:e3:27:5b:ec:fd:6c:ca:38:7d:67:2e:
                    89:ea:a7:c6:8c:90:42:af:e9:13:52:45:14:d2:33:
                    5f:0d:24:ad:93:37:da:a7:72:28:c8:27:c9:d4:c5:
                    9f:8a:bc:6c:ad:54:3f:45:60:e6:c1:9a:32:85:96:
                    79:70:20:56:61:8c:e8:0e:58:69:4f:ff:19:26:5c:
                    0a:ae:9e:aa:25:7e:e4:5d:29:cb:eb:98:1f:b6:22:
                    cd:ea:ef:74:fd:ed:fa:d0:50:6d:ef:fb:c5:09:d8:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:77:93:A7:1E:A6:2B:11:B5:44:EF:78:BF:17:0B:4E:33:CD:11
            X509v3 Authority Key Identifier:
                keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f3:38:53:e7:47:ca:03:95:76:da:d0:56:f8:d9:83:46:c7:
         c6:99:c5:6b:a1:44:e4:3f:81:04:5d:86:42:c8:3a:2f:96:22:
         89:0f:b4:de:c3:72:5c:7c:f5:f3:84:79:c1:f6:be:90:cf:89:
         60:08:a5:59:d6:e3:db:b1:b4:a3:f6:0d:07:31:e8:b9:05:21:
         52:ee:11:37:f7:e0:9b:cd:d5:24:4d:0f:53:ce:64:c1:2d:81:
         5f:aa:4d:4b:43:cc:2f:84:f5:aa:1a:20:30:fc:d6:b2:67:e2:
         33:b3:fc:1e:bb:9e:01:d2:f5:cc:99:ad:81:e8:95:0e:fe:f7:
         7e:56:13:b8:6f:f2:0c:0d:25:27:8f:d0:83:5e:e7:3c:1f:bc:
         08:94:88:b5:cc:0e:35:4f:fd:db:cc:69:fc:40:ea:8c:19:f6:
         d5:f8:2f:2c:35:a8:0d:11:f5:fe:f2:96:f3:5d:3e:c7:57:a1:
         2a:93:d0:a8:5c:9e:33:b4:08:75:d7:a4:63:d6:a7:a8:f9:07:
         c3:f8:6c:54:a4:a2:4e:c8:b0:03:09:4c:05:47:26:8e:3c:91:
         b8:64:89:ba:fb:ac:88:71:42:06:cc:69:fb:e8:2e:7e:19:65:
         b4:42:a6:eb:c1:5d:0f:94:59:cd:a4:c3:da:d1:e0:09:4d:bc:
         e3:3e:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----