Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File:                     dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier:          hDgHCVdGkaBQXjJXK3XKsVPA68JlgjS6KUFjb+XxKi8=
Subject key identifier:   7A:DF:4C:41:45:5D:A5:31:26:8B:FD:F5:7A:41:30:AF:4B:6C:60:30
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer:       /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial:       01962E9887E9DC60B391643CC7AA3849D2A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: y6GEFe94wQwetmGsd9/vhAF1COtdoGRFlcp5xfNqGuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:87:e9:dc:60:b3:91:64:3c:c7:aa:38:49:d2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=7adf4c41455da531268bfdf57a4130af4b6c6030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:89:83:3f:67:4e:d6:83:12:91:41:2d:6f:
                    04:24:12:00:b7:98:44:41:45:06:4f:dd:d8:7f:9b:
                    c2:1e:35:9b:b5:e1:a5:42:aa:1c:1c:a3:f5:d7:1d:
                    6e:9e:c1:4e:d7:05:ce:5b:ea:c3:0c:8c:21:90:de:
                    d9:86:5e:f9:f0:fd:41:8d:f1:22:ab:25:25:6a:1e:
                    5f:be:6b:83:0a:e4:4f:39:c9:42:66:59:64:dd:c5:
                    7b:ea:eb:0b:24:20:e4:b1:52:b4:86:c5:b8:b1:db:
                    43:90:9b:1f:24:d4:76:a9:c0:e1:32:c9:a8:0c:6b:
                    d9:4d:c2:55:7b:48:8c:30:90:6a:5a:e0:16:01:0e:
                    e7:90:ab:08:96:5b:83:be:db:27:51:3d:76:45:60:
                    ff:6c:99:6d:5e:93:3d:4b:26:2f:c2:50:f1:8a:15:
                    05:8e:18:2a:e3:91:da:2d:d9:05:90:24:79:a3:e1:
                    69:3f:cb:1b:6b:12:eb:11:eb:00:4c:69:9b:b6:fb:
                    cb:72:9b:95:b9:ca:3b:6f:2a:3d:70:1d:af:49:f0:
                    dd:1b:72:da:a4:c1:05:32:ec:be:95:af:2c:e9:24:
                    74:1d:9d:2e:cc:3c:56:6a:e0:5d:a3:1a:cf:ae:9a:
                    ab:cf:11:f3:01:a3:f9:89:66:b1:d2:e4:c6:e7:82:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:4C:41:45:5D:A5:31:26:8B:FD:F5:7A:41:30:AF:4B:6C:60:30
            X509v3 Authority Key Identifier:
                keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b1:91:7e:8a:8d:89:69:ba:d0:ba:ce:72:b8:0a:e0:1a:d0:
         f0:04:41:9c:0e:80:0a:87:fc:c4:e1:da:f6:26:e0:4c:4e:28:
         73:c3:16:c3:4c:bd:4f:7a:94:09:1f:ec:a5:07:ad:15:05:bb:
         e8:25:e9:17:2b:50:32:7f:8c:b9:27:a1:96:d5:cb:88:a3:95:
         1c:eb:56:44:b7:0e:1f:ca:17:5c:aa:7a:7b:10:4c:1e:a4:b4:
         dc:63:ff:b5:f6:39:75:7a:b4:36:ef:fa:57:6f:23:02:39:e4:
         5a:dd:4e:41:c4:0e:79:24:2b:0e:96:d5:e6:e7:0f:18:c3:11:
         52:b7:2d:d4:c5:cc:67:32:be:a2:42:36:a1:61:08:bd:0d:0e:
         7e:00:43:08:72:cb:5d:d1:54:bf:68:14:05:e6:b9:38:46:87:
         30:d3:cf:92:bd:24:e7:33:dd:77:32:52:e1:92:cd:a0:2f:c1:
         fb:0d:00:48:02:16:16:4f:be:3c:c5:65:f9:81:4a:23:58:32:
         33:9a:94:eb:5a:28:06:ad:0c:91:e5:62:3a:a0:17:86:2c:36:
         fe:3e:17:55:ae:0f:fa:a2:49:72:ee:e7:96:b5:e1:bd:61:95:
         28:07:ee:51:3b:16:25:af:c7:7e:45:d7:98:b6:9a:8c:16:3f:
         30:5a:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----