Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File:                     rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier:          XyntmS1N0kckBeiEis4mQNFk4XfP35zTW/USb6Ip5X0=
Subject key identifier:   AB:B6:DB:89:97:36:10:9B:13:23:8E:42:CD:85:D4:C9:1E:FB:02:D1
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer:       /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial:       01962F74358280436EED191A75AF10B41CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number:          04AA
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: eO+vGobuo2BSUG6++npadTEcZaWsNhRqObsEOoJAGHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:35:82:80:43:6e:ed:19:1a:75:af:10:b4:1c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=abb6db899736109b13238e42cd85d4c91efb02d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:2e:77:b4:2b:1f:42:93:0b:f4:50:8a:b4:
                    9a:e0:ab:a7:3e:e4:87:9d:89:c0:a7:13:bc:41:b2:
                    f8:93:86:f6:e0:7d:4c:91:ed:55:23:b7:b2:71:89:
                    88:b0:31:8e:e2:1d:f0:13:80:bd:d0:9c:38:cb:f2:
                    c4:be:3f:02:0d:20:a4:e7:f9:a9:a8:e0:fd:1a:86:
                    d1:5b:8d:ee:2f:2c:0a:60:f6:75:f7:73:04:e9:bb:
                    ce:e3:44:ae:0f:66:35:78:4d:fc:97:13:91:66:94:
                    ec:a3:43:c3:09:30:a4:f4:14:00:da:80:d6:a2:ca:
                    85:e3:93:cc:db:3e:a9:03:bb:16:26:6a:ec:43:7f:
                    75:23:ae:dc:b2:79:44:e3:5a:19:76:e0:42:ed:5d:
                    14:0c:53:4b:3e:82:b0:28:d1:02:68:ac:44:5a:ea:
                    d0:f5:7e:c5:7a:70:d4:d8:38:76:c7:18:9e:21:d9:
                    85:6e:a0:3e:06:71:43:5f:44:53:33:e1:1e:58:fc:
                    42:c1:fc:50:e9:50:dc:cd:84:89:92:3d:3c:c4:bf:
                    8c:16:f6:dc:81:1f:e4:dd:c7:f7:23:a5:8a:d8:af:
                    78:63:f8:f6:e1:41:35:f2:d2:be:59:86:a7:0e:66:
                    8d:64:26:30:52:ec:b0:5f:02:d8:73:b1:a1:d6:bd:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B6:DB:89:97:36:10:9B:13:23:8E:42:CD:85:D4:C9:1E:FB:02:D1
            X509v3 Authority Key Identifier:
                keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:6f:ef:ac:16:89:82:e8:44:67:78:38:a6:be:2c:1e:24:
         b2:f5:6b:9c:6b:ad:ad:d7:bb:4a:60:42:be:39:04:0f:9d:eb:
         d4:79:c1:53:a1:cf:9c:fb:93:98:38:57:ad:bd:5e:33:1e:d9:
         99:46:3d:79:28:25:23:34:5b:be:ad:84:02:57:7a:08:df:22:
         1c:9f:61:2a:69:de:d7:63:7a:83:7f:62:79:86:78:e4:b1:ff:
         1e:05:2d:0c:18:69:47:10:9a:62:58:6f:db:ba:a9:1d:2f:f5:
         e6:54:c7:9d:85:c7:74:ab:c2:f4:14:89:ab:2f:df:eb:13:e1:
         86:24:44:ad:ae:9e:96:b0:6d:31:77:30:62:05:28:40:4b:13:
         5d:5e:ad:34:cc:39:76:6e:39:85:83:28:9b:18:16:54:fa:23:
         83:74:35:b8:7b:58:f1:92:e0:70:24:32:6c:be:ff:c3:a1:98:
         9e:b6:2d:a2:e6:25:b9:72:9c:cc:ad:aa:b9:34:83:8d:d4:88:
         8c:ce:58:69:c4:39:0d:b3:20:b3:1f:36:67:a3:ef:57:88:53:
         ea:c0:7b:8b:3c:b6:39:f5:1a:a3:8e:e5:ec:cd:8a:70:68:4d:
         40:a7:c5:1c:bd:21:d2:e1:d4:0c:72:80:e4:80:52:e9:e6:a2:
         93:88:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----