Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File:                     b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier:          fc9uywD7xHdbgYNSPwZrVPPUq+Z6mBnaBjL5HvhTJyY=
Subject key identifier:   6A:7A:5C:DE:D5:9C:CF:4B:21:12:51:D0:57:37:2A:11:5D:8D:3B:62
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer:       /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial:       01962E98FAC7EE8FA1B372F712ED568F050B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number:          09C4
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: FX8Zni672bFbkpma53oWCvWuF/WtaIcL1lKBEW5mAxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:c7:ee:8f:a1:b3:72:f7:12:ed:56:8f:05:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=6a7a5cded59ccf4b211251d057372a115d8d3b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:11:bf:3c:91:f0:5f:39:9a:30:62:6e:7b:
                    78:37:31:97:8c:9c:c2:b4:d1:dc:53:10:45:1a:43:
                    ff:c6:f4:9f:aa:4d:3e:dc:67:49:d7:4a:67:a1:12:
                    b2:5d:3b:79:e9:2e:21:37:4a:ee:27:65:be:9b:23:
                    8d:12:d5:f4:51:6a:4c:d7:ca:56:12:53:be:d1:6f:
                    0e:a6:6d:c2:fb:14:30:c0:dd:5b:54:4f:ff:88:11:
                    fe:20:2b:41:ea:24:51:cd:db:32:4c:cc:67:92:7c:
                    cd:dd:c4:72:30:4c:91:4d:10:79:32:1d:bc:3f:45:
                    91:08:97:cd:2a:14:fc:2e:74:2a:eb:3c:63:47:8a:
                    63:39:1a:11:3f:62:f6:3d:e8:c3:f5:ec:14:10:99:
                    dc:96:ef:5c:f6:f4:a6:1d:a0:51:81:3a:69:7c:c7:
                    87:77:dd:17:1d:ba:c8:8d:c3:67:59:a9:a2:0e:00:
                    a6:8b:12:c8:c1:86:2c:bd:1c:53:43:be:24:49:7c:
                    3d:01:c8:99:4e:89:11:11:10:d5:42:40:d5:bd:60:
                    a7:7f:d6:26:89:fb:a2:03:c7:e0:5d:6c:b1:99:26:
                    45:d9:50:86:81:be:61:4a:94:23:93:40:ea:43:e7:
                    83:fd:fc:c6:46:8c:d6:46:c5:d3:d6:8a:83:da:8c:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7A:5C:DE:D5:9C:CF:4B:21:12:51:D0:57:37:2A:11:5D:8D:3B:62
            X509v3 Authority Key Identifier:
                keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:77:2e:0d:7b:50:64:86:cd:7d:25:86:92:26:b1:de:29:59:
         3f:f2:46:0b:4a:a6:39:e1:76:af:ec:a8:b3:aa:8d:24:27:44:
         97:c1:04:1f:cf:a4:c4:13:56:80:4f:ff:6e:20:b7:45:51:ab:
         e2:ea:b6:48:4a:cb:02:15:80:6e:19:1f:63:91:11:f8:40:a4:
         32:b2:4b:cf:f8:e8:8d:f2:0e:70:09:cb:95:f6:59:f3:4b:18:
         cb:59:56:f2:a5:2b:5b:cb:b0:e7:06:2b:b1:25:59:cf:a2:18:
         9e:7a:ae:f5:61:29:fe:3f:78:56:9f:1c:0c:7b:7e:41:6e:8e:
         aa:63:87:f2:92:61:70:9d:04:f4:20:04:34:f0:a9:dc:5b:a5:
         66:06:7d:47:78:6c:4a:7e:1c:55:f8:89:63:01:7f:37:fb:46:
         7a:20:60:bb:1d:12:c4:8a:88:19:50:8c:6d:c2:d2:80:d5:79:
         fa:1c:95:a2:8f:25:0d:15:4d:18:79:ca:45:c4:66:89:de:47:
         4f:30:1b:ae:89:ac:c8:19:9e:cf:19:52:10:9a:07:4f:37:75:
         e8:fb:05:18:6f:28:60:55:0a:c9:f5:67:79:03:84:36:09:9a:
         8b:f8:f5:74:d3:73:66:ca:96:a3:40:4a:10:07:76:04:70:c0:
         e8:b7:74:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----