Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File:                     b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier:          yvMD8VSM0O9Y9paoiOketdxX+awFsmjRulhy9ih0Lnk=
Subject key identifier:   4A:24:6A:1D:7E:B8:2F:6D:BF:55:86:B0:58:7D:69:9E:91:B2:DE:BC
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer:       /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial:       01962F748D21754AEE8A5E552D10F214B6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: mwGagLLkpTCMLpGe/Qhs4AvySt98v51IEzyPBWNFKwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8d:21:75:4a:ee:8a:5e:55:2d:10:f2:14:b6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=4a246a1d7eb82f6dbf5586b0587d699e91b2debc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:2f:ea:9a:ff:94:48:18:0a:e5:ed:9e:5e:
                    f8:46:cc:84:41:cc:3a:b8:49:3f:5d:0b:d3:e4:c6:
                    31:b9:4e:07:5a:01:9d:9f:1c:23:e1:3b:1d:27:43:
                    88:3e:d8:c5:d8:23:09:07:13:16:b1:65:29:24:fa:
                    fa:28:4f:d9:a5:93:72:b0:85:d1:86:ce:e9:44:85:
                    07:8c:86:a1:2d:60:6f:36:bd:17:86:76:49:f2:b5:
                    e7:4c:67:31:ae:a6:85:3e:6e:cb:f8:a6:6c:87:7a:
                    d0:f8:dc:4b:fb:d0:a1:a4:ab:6e:2d:b4:b1:bc:90:
                    67:33:14:8a:d7:3f:c1:ac:4f:7a:d3:33:34:a0:d7:
                    5c:03:f5:f8:43:e8:68:0f:74:4b:14:b5:e4:c8:25:
                    c2:83:de:b1:d4:5a:1d:0a:ac:7f:22:e9:54:6b:25:
                    79:aa:02:e7:65:e1:87:10:02:bd:82:98:5c:ad:ae:
                    6c:ec:57:c8:ad:56:70:51:29:96:29:05:9b:72:88:
                    5d:c8:23:85:69:9d:dd:79:7e:c0:d6:74:de:e4:44:
                    bd:bb:b2:35:e8:05:60:e8:7f:b1:c2:42:62:0f:ee:
                    d3:d6:67:90:9a:75:10:aa:56:be:1b:91:25:b1:bc:
                    f6:0f:94:f7:e6:6c:ed:86:7d:66:e1:3d:dc:ad:34:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:24:6A:1D:7E:B8:2F:6D:BF:55:86:B0:58:7D:69:9E:91:B2:DE:BC
            X509v3 Authority Key Identifier:
                keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:3f:bb:d7:01:96:e7:56:f0:07:bd:16:71:6f:08:17:b8:
         6c:c0:c3:2e:c7:32:b1:92:75:cd:47:34:ee:1a:bb:06:da:f6:
         9f:bc:85:34:59:91:71:15:b2:06:59:79:57:95:4e:35:a9:6e:
         4b:cd:24:c6:dc:26:c8:60:d5:f4:04:5d:0b:ed:72:9d:cd:f8:
         7a:51:9e:92:32:0b:38:c2:06:c8:78:34:bd:e8:f7:ef:b4:9c:
         3b:ea:74:69:96:fc:69:6e:08:d9:bb:b9:04:3e:43:c8:54:63:
         89:7c:22:44:90:48:3f:3f:c2:07:8e:11:5c:0c:9e:29:26:8c:
         ac:74:54:ba:0b:8c:00:0d:4f:44:10:3c:39:b9:21:b9:18:78:
         d4:1c:23:51:47:0d:66:43:40:1d:5d:27:e4:ea:54:22:06:75:
         41:d6:04:c7:ef:d6:3d:7e:f6:59:c0:1e:68:e5:f8:21:09:9b:
         ae:21:f9:0d:26:eb:5b:64:30:0b:2b:cd:fd:97:f0:69:77:51:
         0b:cf:28:14:5c:6c:58:60:77:27:27:9b:ee:88:e0:44:91:b7:
         af:2c:64:f5:7c:ba:97:22:d9:df:d0:db:f0:42:8d:f3:e5:3a:
         dd:0a:5a:f7:88:67:bb:e5:87:5a:26:3e:3f:3a:42:61:b0:72:
         86:e9:2a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----