Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File:                     a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier:          BKjB5oYJkEJxWY6QEbY9Q/4gnOvp5BqC5TJwm+4sATE=
Subject key identifier:   9C:7A:C6:93:B4:33:14:8D:DE:55:D8:90:72:97:4C:E3:20:BA:9E:71
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer:       /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial:       01962F06E10AD52AF5765EEFA4122C13DE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number:          04C8
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: L3KIEsLMdQ/BpGgEYw74RKRXABkJKoCLF3HZuLiwnus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e1:0a:d5:2a:f5:76:5e:ef:a4:12:2c:13:de:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=9c7ac693b433148dde55d89072974ce320ba9e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:46:80:b0:bc:7a:1c:40:98:14:14:38:c0:
                    b6:9c:c1:82:f7:2d:97:a5:ab:3f:47:b3:0a:b6:72:
                    d6:cf:1a:7e:f1:ee:d3:7b:1f:9f:c1:db:f1:84:ca:
                    7d:07:3f:8a:bf:b4:3b:9e:44:be:7c:7b:11:8b:eb:
                    51:fd:b7:e5:e0:1e:5b:1d:90:ba:77:a8:ad:a4:d9:
                    d9:dd:af:ca:e0:99:15:02:1f:29:73:ef:77:2b:ae:
                    c3:57:41:87:de:bd:53:8c:60:a4:9e:69:6b:0b:d1:
                    1f:8b:ab:56:30:c1:5c:0d:62:9d:7b:46:08:fb:7a:
                    72:36:a0:6f:bd:ce:ae:a2:cc:32:34:73:c4:f6:05:
                    32:d8:9d:c3:59:2c:e0:dd:51:d7:57:79:9b:e7:6b:
                    2b:1d:2c:12:90:8a:f5:c0:59:e5:90:f4:7a:78:2c:
                    b5:90:bc:a9:55:bf:7c:07:29:97:15:d9:55:09:37:
                    fd:26:86:fa:5d:d0:af:b5:a9:00:9b:a1:8f:e1:df:
                    7d:fd:46:70:b6:b8:bd:b0:ef:ee:9f:51:6b:be:50:
                    62:0d:5d:33:74:44:9d:72:11:95:b2:8b:0b:7a:5a:
                    47:de:d1:97:dc:ee:1d:7e:34:f3:cd:fc:4f:ec:10:
                    9e:ff:e0:14:1c:20:6f:9e:6e:e9:fd:27:19:0d:f6:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7A:C6:93:B4:33:14:8D:DE:55:D8:90:72:97:4C:E3:20:BA:9E:71
            X509v3 Authority Key Identifier:
                keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0a:1e:2e:de:41:0e:bd:e1:6f:8c:6b:a8:6b:22:61:cb:e6:
         9a:0b:20:5b:24:30:99:df:fc:da:00:ca:9c:72:52:21:08:19:
         e7:82:85:1b:0c:cf:4d:28:a5:8f:90:b2:f9:81:c1:1b:ac:c1:
         d0:5d:e1:9d:0b:a1:80:74:ec:f5:a6:2f:fa:78:82:4a:93:92:
         e4:13:d4:4e:ce:e8:bb:7b:25:15:cd:7e:4b:60:9b:e6:d2:ef:
         4d:c6:e1:52:79:25:9e:01:6f:1b:0f:04:40:6e:18:04:11:94:
         f9:8a:e6:ff:33:9a:63:28:26:ba:8a:72:9a:21:b1:20:4c:55:
         9a:ac:2c:20:89:f8:da:90:59:5a:64:4e:a5:ce:d6:0b:a0:a6:
         b0:02:40:2d:27:5a:d6:8f:28:37:46:a2:20:9d:90:09:3d:2e:
         5c:eb:2d:c6:cc:35:bf:fd:8a:18:7d:9f:e6:42:7d:76:5b:a3:
         0c:38:7a:14:c6:e6:ad:4d:51:7a:de:30:18:1e:6a:fa:eb:01:
         e5:f8:c1:50:04:24:f3:1b:91:d2:f6:35:6d:f9:a7:a3:fd:5f:
         3c:ba:b0:00:36:b0:d6:ae:84:8c:43:29:81:e9:33:2c:d6:9c:
         6d:21:f8:d2:a6:f6:db:c8:e6:ed:5b:b4:aa:48:30:16:47:88:
         9f:0a:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----