Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File:                     nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier:          dO7Xy2J9B3szCZrW7ZMc7DjOXw0WVX89orD++VpaC/A=
Subject key identifier:   D2:E9:62:FF:2A:9A:B0:11:B3:BE:F1:97:00:B1:69:BB:7D:40:3A:08
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer:       /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial:       01962DF45CBA48351A2492BFAE75A4D90C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:51 +0000
Files and hashes:         1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: 8kCQgeUQ/v8ybkIpEwRm7DngWauOboyw7mTn++f0WUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5c:ba:48:35:1a:24:92:bf:ae:75:a4:d9:0c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
        Validity
            Not Before: Apr 13 07:01:51 2025 GMT
            Not After : Apr 14 07:01:51 2025 GMT
        Subject: CN=d2e962ff2a9ab011b3bef19700b169bb7d403a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:0f:d4:17:77:44:b2:bb:7f:b2:95:fa:31:
                    f1:a3:89:14:2d:df:3b:2d:07:9b:e3:18:a2:09:eb:
                    62:0f:50:2b:96:53:e1:6f:7a:bc:20:ba:e2:71:16:
                    1f:f7:7c:8e:4d:10:e6:ce:bb:f0:55:c5:43:e9:8d:
                    f7:8c:c2:2b:ef:15:67:39:ff:04:48:be:e0:ee:ba:
                    79:9a:ba:d4:89:50:42:cc:ea:52:72:a3:b5:2c:bf:
                    f7:52:76:23:e8:86:f4:fe:42:cd:e0:0f:46:6e:c2:
                    ef:32:6c:20:a9:20:be:68:47:54:6e:f7:5a:7b:e2:
                    ef:8a:06:7c:34:cb:5f:bf:dd:8b:db:5e:a6:8d:ae:
                    a7:60:1b:18:a7:d4:db:61:53:ec:98:5b:b3:6b:fc:
                    3a:43:31:b4:63:72:ff:14:77:0b:ff:4a:94:92:f7:
                    28:35:f2:85:f9:29:9e:ff:64:2b:24:e6:d5:db:00:
                    f0:ed:86:24:41:03:c0:c3:a5:95:e0:e7:c5:45:7b:
                    be:8b:aa:79:ba:5b:22:10:ef:f8:80:a9:74:cf:b8:
                    17:e3:fa:58:ab:82:61:d4:4b:46:e6:cb:7b:15:5a:
                    9a:8a:5e:be:01:94:cb:cf:96:e3:46:cd:f2:36:9d:
                    ec:92:f2:4a:e7:f3:a5:30:04:a4:82:e9:d0:81:00:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E9:62:FF:2A:9A:B0:11:B3:BE:F1:97:00:B1:69:BB:7D:40:3A:08
            X509v3 Authority Key Identifier:
                keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f3:1d:61:5e:87:b8:68:60:dc:4b:32:15:17:22:9c:1c:5c:
         1c:b1:ba:a7:62:3f:55:ea:ca:b7:16:6f:e7:64:40:96:d7:1f:
         0e:af:e5:36:12:8f:e5:58:43:65:1b:60:c5:7d:0a:ca:5e:de:
         b5:21:08:28:02:aa:f1:68:cd:f5:85:2e:73:70:5a:53:2e:1e:
         68:31:8a:64:44:00:32:a8:d1:49:40:6a:04:22:b4:ad:9d:5b:
         62:4b:85:d7:fa:1f:af:f1:4b:5e:13:84:77:92:79:b1:54:00:
         3c:ce:33:a8:02:cd:d3:30:3b:63:1b:3e:c5:6c:4c:9d:84:6c:
         b4:c9:c4:26:ac:ec:12:8f:59:8e:fe:28:ae:88:4f:70:39:ce:
         a4:33:4f:01:a7:ec:a2:50:34:4f:9b:70:46:b0:fd:09:e1:3e:
         25:78:bc:37:20:74:23:56:0f:58:92:b4:50:98:c6:bb:7e:de:
         cd:67:e7:51:6f:58:a6:1e:c3:3d:56:cb:db:35:97:4e:a2:27:
         75:72:78:07:92:00:3e:44:57:03:07:ed:4d:35:d0:24:6a:a4:
         84:e6:8c:95:07:a6:64:cc:f3:32:e7:3e:57:7d:b6:19:dd:27:
         55:17:ff:ad:84:6e:de:46:7d:82:17:8d:bc:b2:6f:e1:36:87:
         15:a3:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----