Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File:                     IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier:          XQl6i7uX5CHNHMU4rNSwGnSRnEyjWkyDV0PBTvyiRvk=
Subject key identifier:   DF:E6:6B:4E:9D:2E:39:0E:C5:76:B7:08:C4:78:BD:C6:84:AF:24:0B
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer:       /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial:       01962DF3FAA9B21D21B47DF07608AAC7685F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number:          0FEB
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: GmRvnsJc4rCYT2dSYS8HMgjS2Ldj9aWtHzsujKK8W+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fa:a9:b2:1d:21:b4:7d:f0:76:08:aa:c7:68:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=dfe66b4e9d2e390ec576b708c478bdc684af240b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:a5:d4:00:9a:cd:10:e7:16:e6:db:95:d8:
                    55:e5:1e:57:61:1d:85:dc:51:09:96:ce:d3:10:d6:
                    fa:99:32:16:7e:34:29:f7:eb:f3:95:03:a4:5f:8a:
                    8b:3c:40:45:b2:98:aa:63:21:6f:07:71:62:b1:45:
                    0f:d6:17:1e:67:94:a0:f7:39:95:23:83:36:f1:a7:
                    62:fe:88:3e:78:29:b4:c4:82:4d:aa:2c:16:bb:97:
                    cc:fc:b0:41:13:92:3a:35:a7:19:b9:26:80:e7:7f:
                    71:b4:99:dc:16:46:74:4f:71:d6:2b:16:30:62:60:
                    93:28:23:b0:82:1e:9e:f7:73:31:7e:f0:ce:2e:28:
                    5f:67:f0:02:97:92:41:c5:94:dc:9f:08:3d:b2:fd:
                    eb:e9:79:95:0a:38:28:8b:f7:ea:56:3a:95:2d:6d:
                    0a:26:a1:b8:07:24:e2:20:8d:62:6b:49:69:24:70:
                    e4:aa:ef:bf:b3:a3:e4:2f:f4:d4:58:04:14:bd:61:
                    89:b0:0a:61:2b:ec:73:b1:59:d4:2d:71:c2:b6:25:
                    76:6e:5e:d5:fc:90:42:09:fc:83:ed:5c:ff:f4:af:
                    61:be:78:6c:2a:bb:51:9d:fe:50:89:59:b1:8b:84:
                    fe:26:1b:95:95:8f:39:8c:cf:e8:44:58:e2:5f:5a:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E6:6B:4E:9D:2E:39:0E:C5:76:B7:08:C4:78:BD:C6:84:AF:24:0B
            X509v3 Authority Key Identifier:
                keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:1b:cc:5b:6c:70:7f:33:c7:88:3f:07:67:3e:78:6a:ee:5a:
         44:bc:69:a7:08:88:76:2b:1e:83:d9:d8:5b:7d:b1:31:3d:a5:
         79:30:1e:43:92:b9:f6:83:18:39:a7:55:4e:53:11:21:95:6d:
         67:d7:72:d4:60:ce:b3:fe:fa:09:de:17:0c:fa:c5:b2:73:8d:
         cc:70:3a:93:8a:58:cb:fb:20:78:1a:71:33:a2:79:f0:96:3c:
         09:6e:4f:ca:49:54:6c:66:08:a0:d1:93:c8:6f:37:9c:f4:c9:
         45:78:50:42:d7:0d:63:93:e9:3d:b0:d1:9a:8a:18:29:81:1f:
         31:55:27:d4:03:e6:cd:52:75:e4:9e:4d:1d:a9:44:4c:4f:21:
         c9:0c:62:55:d9:c8:22:16:cf:4f:91:aa:41:65:89:49:b0:32:
         dc:f6:33:04:6e:4b:9d:38:e2:9e:98:eb:db:a7:d4:9f:df:c2:
         5d:e9:fd:af:35:60:00:12:4b:5c:3a:41:f4:aa:89:8d:0f:d2:
         0d:35:72:e4:46:20:16:b2:87:bb:42:ce:9a:22:4a:90:eb:1d:
         07:ae:ef:85:de:2a:e8:86:b9:32:93:38:90:f4:8e:7c:82:b4:
         86:f4:a8:33:9c:cc:82:4d:51:3c:94:fe:bc:e4:67:87:05:cc:
         c1:e6:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----