Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File:                     rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier:          +0aHiLNgXWQCG6kuXXr32IH1SM/S4EW/mL9kJ28YW7k=
Subject key identifier:   B5:E4:03:3F:B9:B3:86:E3:A2:52:B6:62:85:58:99:36:B5:09:D4:19
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer:       /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial:       01962E99B6E983CF7389911FA33E708B15A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: m0AKyU+PHeHW8E1PqgrMiubizmgr2yBIzt65gGOuGUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b6:e9:83:cf:73:89:91:1f:a3:3e:70:8b:15:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=b5e4033fb9b386e3a252b66285589936b509d419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:09:a9:49:21:2a:71:c0:fd:09:42:3c:4a:
                    47:9a:77:68:5f:61:b0:34:43:c9:7c:76:a3:d0:46:
                    65:1a:34:28:b2:2e:6e:49:e9:60:64:f8:9e:32:46:
                    f8:22:92:3f:be:fe:7b:94:c5:0a:f2:f7:05:8b:ce:
                    61:a2:8d:3a:33:26:c4:1e:7c:7a:68:92:38:fd:24:
                    6a:3d:f5:b6:6f:0c:91:02:1a:6c:3a:2a:e7:5f:7d:
                    3c:50:97:c1:b7:56:72:94:64:68:03:f9:b0:9c:fb:
                    25:9e:c7:58:68:04:2b:82:3d:5b:40:88:45:ff:91:
                    26:eb:79:72:b2:d8:b0:3d:40:89:3e:9e:63:aa:a5:
                    87:22:30:82:15:66:f4:a6:62:84:17:57:38:e0:8f:
                    4f:4f:a8:ec:46:7b:79:6e:18:e4:89:15:aa:f0:99:
                    5d:f9:2a:63:9a:03:b7:87:b9:1a:76:44:cf:e3:41:
                    7e:c4:32:f6:d2:3d:ef:bd:d9:80:7d:83:1b:ab:c8:
                    66:ce:7a:d9:e7:4e:6a:60:c2:a5:f5:62:23:51:09:
                    f4:af:98:c3:1d:08:05:65:d7:22:57:16:e7:85:f3:
                    47:2a:f1:94:53:e3:ef:45:2e:fa:09:91:94:31:4b:
                    ef:41:db:82:fe:32:6f:48:55:f7:f2:b9:5d:4e:ca:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E4:03:3F:B9:B3:86:E3:A2:52:B6:62:85:58:99:36:B5:09:D4:19
            X509v3 Authority Key Identifier:
                keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:dd:58:c2:74:a5:39:7e:e2:b9:b5:0b:af:5d:72:a7:fc:
         82:28:42:36:57:97:09:c2:f2:f6:d5:b8:01:41:ad:ec:1f:9c:
         3c:30:07:fe:4a:c9:70:6e:80:2a:46:be:a4:85:b6:c0:b2:73:
         09:f5:81:76:52:39:4f:de:54:f7:29:55:5c:ba:9b:e5:c4:6f:
         e3:a6:bf:03:03:ab:ba:32:dc:1a:dd:0f:a4:49:21:87:fc:80:
         db:f0:01:bf:0e:b3:97:b4:6c:b9:40:6d:11:06:0e:f4:57:05:
         83:59:d3:16:c2:bf:08:06:ba:de:a5:06:23:f5:d4:67:e4:c5:
         5a:0c:fb:fd:f3:a2:0a:7d:45:34:fa:eb:b5:c7:13:aa:fb:e2:
         c0:ee:64:bc:0c:1d:11:ee:bc:92:84:0e:04:d0:e0:1b:d7:84:
         cf:8f:dd:b4:b6:e2:90:9f:ab:ce:88:67:82:e7:ba:b0:8d:26:
         04:6b:18:41:95:00:b3:73:74:4e:4d:74:5c:90:9c:90:d4:94:
         bd:2c:3c:0e:86:46:42:c2:9c:60:64:2d:87:1f:28:d6:2f:81:
         f7:52:8d:6d:32:8e:3a:f8:04:60:bd:06:a5:a0:cf:88:15:19:
         91:2b:7c:d6:c4:80:31:34:71:ec:9b:72:47:18:57:10:2b:b2:
         48:80:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----