Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
File:                     2xqlqI_mUM51-73mL66AzGIz3Ms.mft (raw, json)
Hash identifier:          5KHNz57qejyH46L9wFFMw4HQ2cK5q2te2EoKtDot1q4=
Subject key identifier:   06:0F:B2:D6:23:D5:2C:E0:69:AC:6E:4C:05:8E:34:9E:49:2D:E2:6D
Authority key identifier: DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
Certificate issuer:       /CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Certificate serial:       01962E98B7948C42A081EF2F8FF486FF4C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
Manifest number:          0DEF
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: 2xqlqI_mUM51-73mL66AzGIz3Ms.crl (hash: w9lz9sdkcWTBdm36l8gBq75YiXFzprfRF6fy4U5YqjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b7:94:8c:42:a0:81:ef:2f:8f:f4:86:ff:4c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=060fb2d623d52ce069ac6e4c058e349e492de26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:ec:9d:7d:6f:50:a1:e6:71:87:ec:6a:07:
                    5b:14:f0:0f:01:f2:9f:fc:66:43:8a:fe:43:73:7a:
                    88:97:a7:85:98:05:3a:49:22:76:b0:a8:dc:30:a5:
                    f0:3b:ff:0e:d4:7b:8b:16:c8:84:29:d9:3f:c9:bd:
                    c0:00:0c:9e:6c:c7:14:94:d4:c7:db:23:5b:b2:82:
                    dd:38:c2:97:05:dd:41:7a:45:51:b2:c7:91:e0:7e:
                    15:f5:f7:d5:a5:7d:ac:0e:1a:56:24:8e:69:8a:66:
                    42:b1:c2:d8:ce:21:b9:05:59:13:3a:5d:01:a1:8f:
                    57:4e:f6:ea:ee:b4:92:5e:54:8d:29:8f:ae:b8:7a:
                    06:a0:23:42:d5:39:17:e8:86:af:ab:13:02:07:28:
                    e8:dd:2b:b6:82:2d:f2:c3:2d:cb:73:58:46:cd:d9:
                    cc:9d:a8:91:1c:2b:68:5b:08:18:68:ed:23:cd:fe:
                    fc:13:b8:4d:7e:0a:13:87:b1:6b:fc:e7:8e:26:ff:
                    bc:0d:d1:15:05:7f:ec:78:0e:0b:5a:25:f7:d1:0a:
                    30:e7:ee:53:af:ab:20:83:26:1e:72:ee:d5:c0:bc:
                    f5:09:a1:d8:b8:6a:65:a2:d9:84:ce:d3:62:b0:6a:
                    f5:01:3d:84:de:aa:63:94:52:fb:50:c8:d5:70:2e:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:B2:D6:23:D5:2C:E0:69:AC:6E:4C:05:8E:34:9E:49:2D:E2:6D
            X509v3 Authority Key Identifier:
                keyid:DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:27:85:b8:81:34:af:25:7c:8d:21:d8:ae:3d:42:d1:e1:
         bd:57:5f:f8:90:6b:4e:bb:2e:69:a9:bf:08:55:96:d6:8e:93:
         7c:df:7a:ab:98:17:eb:61:9c:29:23:2d:f9:ac:59:65:83:60:
         2d:33:84:c5:c7:01:cd:be:ce:87:69:85:77:b9:41:d4:48:98:
         f4:78:f9:67:4e:ed:df:af:68:f6:53:0a:f0:32:6e:f5:83:1f:
         ae:bf:3a:14:c5:b5:65:36:b0:1a:00:ed:ba:64:6b:c3:bb:20:
         ee:fa:94:3f:f8:d3:17:23:29:da:5d:be:12:58:bb:18:57:26:
         a9:dc:fe:ce:14:de:01:ac:2d:cc:73:73:b2:63:30:a4:e9:56:
         62:ac:1a:40:f6:e3:df:6a:34:6e:90:a7:a6:45:17:f7:59:b5:
         77:73:50:d2:d6:a4:3c:bb:59:c0:13:79:11:91:75:78:55:7b:
         94:5d:49:16:e7:f0:2c:83:e4:6c:bb:ea:52:90:2d:10:7e:57:
         99:de:15:b6:67:71:82:cf:1c:c5:9a:55:a0:2d:88:eb:d6:98:
         e8:94:e4:1c:2a:b0:05:3e:2b:5a:fc:97:a1:6f:4f:0c:b6:94:
         b4:07:18:83:ae:15:33:37:25:31:99:a8:eb:d5:a2:1a:e9:67:
         3d:fd:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----