Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File:                     nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier:          Rzt3oFbRhlrlMQn6KAU6YrOQoNu5/CPU9P+Jn1azICE=
Subject key identifier:   DC:91:FA:BA:15:4C:86:B0:51:34:31:EC:1D:A9:3B:4B:8B:F4:17:4D
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer:       /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial:       01962F066BF933E276EF4C7FA458E30CA546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number:          03AF
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=)
                          2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: K5h1AdkdOkBn31RjBrOVFMujpJKEaVrjkKziM2KT0jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6b:f9:33:e2:76:ef:4c:7f:a4:58:e3:0c:a5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=dc91faba154c86b0513431ec1da93b4b8bf4174d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:15:9a:88:20:4b:37:a2:01:98:8f:25:7f:
                    50:2a:c7:3d:19:cd:6d:51:2f:ef:e6:5a:3e:78:19:
                    d6:03:04:a4:6b:97:db:dd:84:0e:3b:89:7a:4a:b0:
                    cb:a2:b9:5b:45:6d:ea:9d:d7:64:ef:6f:1f:0b:43:
                    3d:6c:6c:b3:45:32:c9:f2:ea:b6:a4:85:8c:c7:85:
                    cd:65:5a:85:12:8f:bd:cd:da:34:0d:47:c0:f3:d0:
                    e4:11:2c:29:b7:4a:67:61:c1:04:74:f4:07:1c:ed:
                    c5:01:03:0a:bf:dc:92:f8:90:eb:92:46:9e:90:40:
                    c2:7e:2c:3b:04:6a:ab:76:55:5d:a0:ec:00:4b:8d:
                    13:c7:7b:c7:d1:5a:30:4f:dd:9c:df:c1:a7:98:09:
                    81:d6:f5:f1:eb:85:e3:41:61:4b:a4:49:aa:58:22:
                    db:12:85:28:17:dd:80:fa:de:f5:91:32:1d:28:11:
                    65:49:42:d7:11:92:3a:91:00:e6:a2:99:dd:35:1c:
                    20:39:bd:a2:8a:ee:ef:ef:6d:c4:df:2d:a3:27:b7:
                    f9:8b:49:33:27:0e:0a:1a:a8:3f:ff:94:2c:7f:21:
                    76:b4:e6:ad:14:a8:64:29:05:37:e4:0b:06:ef:cc:
                    33:60:b5:b0:9a:08:9f:9c:fa:b9:ae:be:a0:ca:ad:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:FA:BA:15:4C:86:B0:51:34:31:EC:1D:A9:3B:4B:8B:F4:17:4D
            X509v3 Authority Key Identifier:
                keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4c:c5:6b:f5:1f:33:86:97:ee:f1:25:6a:fd:70:0a:71:10:
         d0:15:2c:50:7a:3b:6d:75:c5:00:85:fc:4f:ad:ac:95:18:8d:
         78:9a:57:e0:1e:d4:f4:89:98:7b:93:85:8b:1d:fd:84:2c:f5:
         3d:4b:ff:65:c1:f1:c2:4b:33:97:65:b7:af:f9:95:e7:a2:5f:
         e4:4b:23:9f:ef:a6:4a:3d:01:90:11:9d:f1:8c:ae:e7:64:52:
         db:7d:f2:b5:61:f7:61:b4:2a:f3:c6:0f:b5:f0:db:ac:2c:c0:
         96:8b:cc:a9:25:f5:f4:77:ef:46:a5:19:67:44:2f:68:c0:04:
         99:16:de:e9:27:f4:f7:8b:1b:5d:5b:a7:63:f4:0f:74:e1:8c:
         0e:31:41:29:6d:b7:9b:32:78:15:2b:3f:16:c9:d1:49:9a:40:
         0a:d3:3d:16:f7:bd:fb:3b:d7:fe:0c:a6:4c:66:eb:ac:d0:17:
         85:01:4c:4d:f0:d6:38:25:d4:7c:ba:7d:8c:44:d7:9b:59:27:
         5b:13:9d:72:14:e0:80:37:d9:b3:24:77:02:1c:5e:b3:eb:86:
         5e:70:3c:9c:06:e9:09:2f:4b:af:c8:ab:47:c2:a9:c8:cd:71:
         4a:1c:ee:5d:95:9a:bc:43:b3:60:17:eb:bf:84:8f:67:f8:b6:
         c7:85:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----