Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File:                     msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier:          w3JKBwP/bWQlVbXERg8DMxZclkUhfu9eME2shpgJXI4=
Subject key identifier:   56:71:99:FE:33:42:8B:A6:6F:20:BC:BE:BB:E9:FC:21:33:0C:CE:77
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer:       /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial:       01962E99B3AD4047106B0E6AFBD0006F9A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: AKNcgreImOc/R4zKEOiAw7AZUf3g9b/EhcL7B6WrJwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:ad:40:47:10:6b:0e:6a:fb:d0:00:6f:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=567199fe33428ba66f20bcbebbe9fc21330cce77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:f9:10:3a:67:4d:cc:e4:b6:02:4c:05:b8:
                    5b:53:30:4b:f5:57:d2:af:8f:0c:02:dd:96:f3:ae:
                    7f:e8:bb:67:58:9b:8a:65:b3:ab:f2:6b:7a:51:90:
                    ca:8f:85:00:85:f8:da:da:67:84:e0:92:2e:5a:cf:
                    81:d8:3f:16:91:46:43:3f:99:51:56:e1:41:cb:c4:
                    2a:48:51:a5:96:a7:81:37:c4:70:c6:3d:08:78:17:
                    ac:6a:fe:95:96:63:75:dc:da:3f:bb:28:e8:c9:0d:
                    64:44:a9:cc:40:0e:41:77:b1:d3:f8:2a:81:95:4b:
                    a1:86:78:51:3b:2d:eb:1b:20:b5:e7:a1:e4:66:72:
                    c0:08:6c:da:90:5c:6d:29:fa:a5:91:37:df:f8:90:
                    d8:72:f4:93:0f:7b:6d:e1:06:ff:51:be:47:4b:fb:
                    1d:e8:4c:3d:9e:8d:19:0c:28:3c:68:5e:6f:0f:7d:
                    00:44:28:b7:f7:30:87:be:af:0a:8b:09:8a:c5:fc:
                    d1:c5:5c:5d:b0:9a:fc:8a:0d:04:81:bb:f0:2b:8e:
                    91:1a:41:a2:06:92:34:5f:33:e5:af:34:22:0b:5b:
                    ec:db:e9:f7:89:e0:2e:13:f5:1e:e1:5b:cd:60:27:
                    b1:6a:c5:83:40:d0:b1:f0:be:c9:72:06:bc:e7:ad:
                    c0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:99:FE:33:42:8B:A6:6F:20:BC:BE:BB:E9:FC:21:33:0C:CE:77
            X509v3 Authority Key Identifier:
                keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:55:3c:87:35:47:87:88:bc:98:f5:cb:be:1e:c1:f4:df:cf:
         06:dd:8d:96:9f:0b:a6:b5:da:3b:e1:09:d0:c0:1c:6f:24:d7:
         34:73:88:59:24:79:67:5a:6a:39:e1:04:24:05:56:6e:bb:a7:
         30:e2:70:41:67:c5:37:94:38:77:47:41:f4:31:83:ca:8f:e4:
         9d:2e:e7:6d:73:25:de:20:ad:61:13:a4:8d:f4:9d:0f:f6:d0:
         80:be:c7:b2:ec:df:cc:9f:6a:e9:2a:14:6c:36:81:e7:a0:1f:
         b5:4e:61:76:ed:65:99:70:47:09:7e:26:ca:59:fe:a4:b3:a3:
         89:74:eb:47:94:1b:7e:40:68:ec:75:73:cb:53:90:0f:3c:94:
         39:de:a4:54:f1:48:0e:d9:8b:0d:93:34:3c:04:22:e2:97:91:
         3d:1f:91:a8:98:f3:01:2c:33:53:74:68:ec:d8:6d:bd:e5:eb:
         fd:e8:79:c2:19:1a:a6:c3:35:51:9b:ba:e9:35:ae:4d:2c:20:
         d2:3f:37:b0:6c:47:61:0d:b4:ed:66:1e:6b:79:ca:67:a8:4a:
         b3:8c:58:dc:54:6b:b3:22:3b:eb:fc:9b:eb:f0:3d:62:b5:7f:
         5d:10:7c:34:e5:86:56:be:ad:8f:61:83:82:3f:f2:3b:60:26:
         bb:a0:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----