Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File:                     xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier:          MXSoAUjSb6RbhF1iubGgfBCaWHCadNJ40MBIu5Ev6do=
Subject key identifier:   D4:47:CF:24:55:F9:A4:A8:E4:7C:3F:8C:09:19:B4:B7:11:F5:CA:69
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer:       /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial:       01962FAB64771BE52386E98CC286B4B8D7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: CQ3bm/gOelfuBtxMblkrqHA1l0zEK7B4uWhkET2iH5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:77:1b:e5:23:86:e9:8c:c2:86:b4:b8:d7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=d447cf2455f9a4a8e47c3f8c0919b4b711f5ca69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:5d:69:f3:c9:da:f8:4e:7a:c6:4e:54:23:
                    5e:2c:7a:98:40:d2:3f:50:36:c2:bc:5f:6e:cc:7c:
                    14:fd:be:f2:85:58:7b:cd:a0:7d:89:7e:97:8c:59:
                    eb:df:8d:87:7d:b1:49:1b:32:70:53:e3:24:ff:53:
                    53:8b:02:dc:fb:93:7f:7a:3e:e2:12:55:73:61:23:
                    15:39:5d:87:90:fb:ff:09:20:96:9b:11:8d:22:ff:
                    61:25:63:3d:34:60:e1:ae:a0:f5:9c:42:87:ce:67:
                    e3:1a:32:66:8c:c0:83:e2:0e:6c:63:11:a4:29:89:
                    2b:18:24:15:40:7c:eb:01:95:21:8d:87:d2:27:91:
                    8e:bd:be:70:53:43:c2:ab:ac:6f:2c:a1:12:02:39:
                    88:1d:7c:82:10:23:41:92:38:b0:0b:f5:56:f2:a1:
                    fb:4f:3b:47:bd:63:62:f9:ed:e2:ad:4b:96:2f:71:
                    2a:46:b4:3e:dd:26:c6:4e:9e:dd:73:44:b8:04:1f:
                    e2:e2:a9:64:63:6d:94:56:c2:3b:20:ec:9a:8a:ee:
                    92:a7:6e:8b:e3:50:b8:f1:c4:79:ae:53:8f:cc:55:
                    80:c1:86:33:fc:37:0d:2a:c0:81:1b:b9:7e:3a:e7:
                    c7:c2:12:bc:81:43:fa:56:b8:3d:3c:1d:40:99:73:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:CF:24:55:F9:A4:A8:E4:7C:3F:8C:09:19:B4:B7:11:F5:CA:69
            X509v3 Authority Key Identifier:
                keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:87:9f:97:3c:cc:78:44:94:6f:0c:2e:d8:10:0d:3d:6d:
         f3:e1:f7:9d:53:6e:be:dd:2f:f8:81:f6:af:79:e9:7c:01:bd:
         c2:08:72:5b:ca:65:a8:a8:5f:ae:45:6a:82:00:0c:f8:48:57:
         04:0d:9c:6a:7e:fa:bb:eb:39:eb:ce:b1:aa:e8:ec:b2:ad:60:
         a0:ed:5c:de:14:35:09:17:df:95:75:15:a1:6f:9b:0f:99:a7:
         50:c4:4c:82:14:8c:a0:0e:68:d8:87:93:11:61:b6:53:23:23:
         cd:e5:8f:86:39:6c:88:8a:21:59:89:40:43:c6:01:8d:8a:10:
         fa:28:b0:96:bc:cb:4f:1d:39:69:67:da:66:17:69:50:af:d4:
         91:54:e2:4b:7b:2d:71:fb:72:90:77:43:5c:d8:90:52:f6:56:
         0b:1b:0d:3e:45:7a:25:2d:f0:96:b9:34:01:66:42:65:b1:3d:
         52:d1:90:07:39:e5:c6:0d:d2:4d:c5:c7:d9:8d:0f:fc:c4:49:
         28:fd:d8:83:d5:96:01:84:8d:fa:0b:84:46:5c:12:38:19:eb:
         d2:2f:6f:02:d6:99:dd:ef:e7:4b:12:04:db:05:43:16:0d:d2:
         47:0a:58:9f:d5:79:50:ec:3c:4c:1c:c0:8e:10:aa:83:33:c5:
         d7:e8:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----