Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File:                     Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier:          LlVZ+1NEnrbUIEBbJ3x+Q8k/Zjhsp/HWSPK3hYHBRYA=
Subject key identifier:   AF:F3:30:DE:62:C8:EA:1F:ED:A8:71:E0:4E:36:E2:87:10:1C:BC:89
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer:       /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial:       01962ECFC5C0F20E9E7D37DB3AAC4722098B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number:          036C
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: qOyljIbSFMXhOaPkxwNjJ/bj1isFVgQD/bWmfrYB7FU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c5:c0:f2:0e:9e:7d:37:db:3a:ac:47:22:09:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=aff330de62c8ea1feda871e04e36e287101cbc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:d8:1c:a1:32:0e:b2:8d:4d:1f:2f:86:fa:
                    4c:3d:db:39:e3:29:23:10:0d:75:bb:11:c4:73:c6:
                    da:1d:dc:1f:19:04:0a:84:d4:e6:24:78:37:65:56:
                    c2:7a:76:c7:6b:93:df:09:92:24:c5:62:4a:a6:e6:
                    44:0a:51:c3:4b:71:bb:3a:05:6f:3c:5c:f9:4e:cb:
                    17:29:7c:c7:65:3c:4a:d1:f4:2b:10:81:72:43:f9:
                    e2:3e:78:e1:ba:52:1c:43:e9:7c:f8:6a:24:ea:df:
                    1c:b0:64:d6:96:cc:46:84:5b:59:8a:af:1f:69:73:
                    1d:b2:fc:9a:85:fb:8c:e2:af:a4:4d:c2:34:ff:52:
                    9c:b7:7b:23:40:8d:bb:9a:cd:ca:53:3d:0b:57:95:
                    b0:5c:17:fe:d2:4c:e0:a1:a7:75:e9:1d:9d:5f:18:
                    90:39:1c:c2:ed:37:8f:7c:f5:1d:bd:c4:dd:9d:59:
                    ef:f0:d3:81:37:59:92:1b:8d:16:67:a3:00:14:fb:
                    23:cf:77:03:e6:39:71:8f:57:7b:4a:47:84:bf:54:
                    7d:bc:02:6a:7a:d9:db:0a:96:c0:ed:ae:fd:d9:71:
                    f5:74:40:85:8e:dd:ab:68:d0:4f:26:74:22:67:b8:
                    0b:8a:e6:fb:a4:8c:cf:7b:cd:24:42:6f:fb:6c:3d:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F3:30:DE:62:C8:EA:1F:ED:A8:71:E0:4E:36:E2:87:10:1C:BC:89
            X509v3 Authority Key Identifier:
                keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:da:0f:0b:45:a8:f6:64:db:d3:04:b7:a6:41:bc:b2:a9:ed:
         2a:a0:4a:74:78:52:ba:9f:2c:c5:f1:a3:2f:88:94:98:5b:00:
         ad:d2:bd:2c:f4:99:d2:4e:3a:9f:ca:7c:92:c0:93:d3:c5:7e:
         d8:72:aa:87:5d:85:80:b0:f1:39:7f:9c:77:34:80:b5:aa:8e:
         f7:25:45:66:5d:82:2e:ff:cd:ab:37:b3:49:c3:28:be:7c:6c:
         28:1a:26:d1:ff:f9:e4:02:df:ae:54:11:01:0d:98:ac:50:e4:
         2f:06:20:1f:23:1b:4b:1f:45:32:f7:75:b3:39:50:0e:76:78:
         5e:59:1c:12:13:5a:94:03:43:60:af:5a:53:a8:cd:36:34:f2:
         6e:41:c7:88:ee:4f:bc:71:38:e7:a7:32:ca:d9:e3:19:cf:04:
         df:cf:92:c3:b7:df:b6:c6:b2:76:44:8b:20:a0:28:68:2c:66:
         ec:de:22:31:f4:9f:4a:c8:29:fe:b1:85:df:0d:e5:de:f9:ac:
         35:bb:b7:e4:21:f9:dd:9d:4f:35:56:ac:bf:1f:22:db:35:88:
         5b:2b:76:7b:16:2f:7a:f7:39:7e:86:99:90:5a:45:b8:82:09:
         2c:cb:c2:08:e8:6a:38:79:9f:47:30:7b:94:79:f1:2f:23:1f:
         75:a5:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----