Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File:                     _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier:          pkOmwVKlFe+R3uvBqRPBlH/dxQHnj8cM2DGfQ/4mkyE=
Subject key identifier:   5F:A0:E5:09:AF:55:C3:47:3D:D1:53:B9:CC:E1:5B:DB:04:8C:04:50
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer:       /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial:       01962F743CC46DD2490FCDE0AA8781B7DFD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number:          106A
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: LtC2MEMAwfCezyg9/zoW1Gb9HdSGrnHQ/lfKnkqpbT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:c4:6d:d2:49:0f:cd:e0:aa:87:81:b7:df:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=5fa0e509af55c3473dd153b9cce15bdb048c0450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:09:d0:be:85:45:71:5b:24:5b:ae:ce:a9:
                    05:2d:4c:80:d4:38:30:76:fc:d2:f5:e7:76:b9:42:
                    85:80:c0:3e:dd:0c:ac:1e:8d:30:90:b2:cf:b6:55:
                    49:d8:0c:5b:3c:74:bc:80:77:7d:89:50:58:7e:d7:
                    a0:62:c5:fb:65:98:35:a8:f4:7a:66:84:b4:31:52:
                    36:a3:b2:4c:ab:9e:2a:de:ca:a5:09:af:b0:01:52:
                    53:86:d3:6b:ca:e1:98:d3:ce:ce:0d:2a:6d:9f:a4:
                    9d:9d:82:dd:05:f4:03:ed:b1:99:6a:37:37:b8:5a:
                    85:9b:eb:0a:d4:50:92:9c:b6:ae:8f:0c:18:26:d9:
                    8b:f1:d9:83:fa:6d:13:35:40:ec:a5:d5:f5:4b:96:
                    9a:39:58:81:87:8e:a0:bb:d1:82:e2:6b:60:61:e8:
                    01:c1:c4:57:52:41:69:b3:7c:27:cc:34:d3:07:f6:
                    e7:ff:56:89:31:5b:04:3b:1a:1b:2a:2c:0d:6a:76:
                    03:6f:4a:bb:ea:46:7c:d5:cb:0d:25:33:54:cd:98:
                    0c:31:5a:5b:a7:47:b0:2a:21:5d:1d:b2:01:1f:c1:
                    f1:7f:8a:b0:7d:4f:15:16:0a:d8:b0:0b:86:9b:37:
                    73:0e:45:4a:de:04:2e:67:f5:12:e4:e6:51:7c:36:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A0:E5:09:AF:55:C3:47:3D:D1:53:B9:CC:E1:5B:DB:04:8C:04:50
            X509v3 Authority Key Identifier:
                keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:d5:e2:f1:bc:60:33:98:8f:05:f8:67:e8:95:30:83:1f:
         0e:04:43:0e:a9:25:6a:2b:39:ff:37:7d:5d:5c:c9:8c:cc:71:
         60:a8:92:08:b5:c8:68:3f:b0:c4:dd:73:e9:69:b7:5f:5d:e5:
         2f:78:ad:b7:f0:bf:02:96:48:69:fc:67:32:21:8b:82:47:cc:
         a3:86:90:f6:d5:ae:1a:5e:fe:21:b7:42:f0:33:ce:75:f6:e8:
         28:8c:5f:e9:7e:b1:55:88:ad:9f:18:52:93:ee:88:0f:80:1d:
         d8:ae:3d:f3:b5:3d:c0:f2:e6:9c:82:9d:88:78:54:78:67:f4:
         72:28:c5:2a:9b:3f:db:47:03:17:5a:b4:1b:31:46:d5:2e:08:
         89:e2:91:21:a0:95:41:e2:44:93:2a:fb:52:10:b6:a8:0b:96:
         cf:f8:85:b2:aa:b9:90:bc:09:9a:ac:f3:f1:a1:53:3f:e5:ab:
         96:40:d2:5c:b4:e3:51:20:8f:2c:83:93:f3:8f:bc:b5:45:e9:
         46:ed:a0:40:b7:91:9c:7c:61:21:c0:42:0e:f1:51:04:5f:22:
         2f:54:12:e8:9b:b4:61:6d:31:63:c5:02:14:30:e9:33:8d:e5:
         e5:03:c9:4b:47:9b:0e:24:a0:d8:87:c1:d0:d7:ab:aa:5f:df:
         83:f5:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----