Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
File:                     txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json)
Hash identifier:          QVEAgZrMppjchxIMvR1YK9k8tArswLlmSrNGUMdxhss=
Subject key identifier:   0F:AD:C9:CA:9E:C8:32:40:1E:08:0D:75:D8:7B:22:54:CB:74:3D:FC
Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
Certificate issuer:       /CN=b718859d412f9b5872a58977320d2d083bd7a04b
Certificate serial:       01962E61942EADC3F5998762CFA95C764E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
Manifest number:          0ED3
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: TIJNg8PMWGXiRxPuMQmMIDtQwORNeiNzA4RWsKbIWQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:94:2e:ad:c3:f5:99:87:62:cf:a9:5c:76:4e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=0fadc9ca9ec832401e080d75d87b2254cb743dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:23:86:40:9b:18:8c:fa:69:29:b6:a0:73:
                    69:c6:82:c1:5a:f0:2a:9b:e7:d4:91:ed:bb:54:b6:
                    3f:67:8c:55:de:3b:f2:0e:85:bc:82:06:9e:c9:17:
                    10:e4:bf:d3:e9:6a:14:45:db:84:13:88:5f:b3:37:
                    3f:b6:53:e1:a0:b6:2e:c4:f2:35:a8:f6:f1:61:d5:
                    b9:51:76:95:1e:ae:fa:37:3c:d2:2f:c3:29:fb:0d:
                    39:92:cc:fe:c1:c1:42:60:2c:71:3c:39:c6:b6:a0:
                    2d:54:1d:ef:4d:7c:1a:86:b5:c3:30:f1:1b:25:f1:
                    f6:f5:b6:fb:f7:90:cb:2c:97:48:0b:21:af:0f:b6:
                    92:c3:22:95:c6:e3:ba:9e:0c:0f:37:60:f6:ba:2a:
                    fb:48:14:2c:14:5f:7f:64:8b:fb:a9:7c:19:da:a5:
                    a8:1c:57:f6:8a:e3:25:9b:e6:ae:ab:38:19:92:13:
                    c9:1d:d0:5f:ce:a9:bf:88:79:90:48:2c:3a:30:f6:
                    27:78:fd:d0:4c:2f:b8:51:e5:bc:51:f7:a0:05:39:
                    55:dc:df:1c:28:c0:a1:0d:6c:e5:9d:1d:fa:ef:3b:
                    ef:45:15:f2:19:18:0a:2a:53:0e:1c:a3:93:89:36:
                    5c:dc:fb:1f:3d:e5:78:a2:1d:3b:b0:51:46:c8:db:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AD:C9:CA:9E:C8:32:40:1E:08:0D:75:D8:7B:22:54:CB:74:3D:FC
            X509v3 Authority Key Identifier:
                keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:91:3a:4e:32:eb:b4:da:06:ed:3a:6f:be:ef:54:64:f2:
         2d:e6:0d:c8:81:c0:ad:36:d0:3a:90:eb:fc:58:d7:0d:13:23:
         73:1b:df:b3:24:09:11:c9:9b:75:37:74:cb:2b:9c:e1:0b:76:
         5d:3b:a7:9a:0f:da:8a:e2:17:fd:21:af:46:c2:80:54:c6:fb:
         ea:c0:fd:8f:02:f4:c8:2b:1b:f5:66:83:3c:f7:ea:9d:c5:dc:
         a0:90:c3:ef:27:81:50:43:67:f7:79:50:42:c0:f0:9c:00:8e:
         63:c9:e9:c7:04:38:fb:fb:57:ed:df:c2:d5:7a:39:2c:52:47:
         18:45:82:57:d5:b9:fe:5e:30:0b:ad:ac:fd:88:c3:c7:d0:0e:
         b8:3d:c2:8e:a8:9c:cd:38:a1:27:92:6d:ac:79:56:63:3e:83:
         b0:76:a0:a9:71:93:db:a6:33:8d:2d:8f:32:b5:58:e8:ea:b0:
         47:5e:fe:cb:b4:7c:00:ba:4a:d6:54:d9:74:2b:11:22:50:b4:
         35:5d:b3:b5:46:61:e9:08:c5:21:bb:8e:fe:c9:6c:4f:55:51:
         60:ac:75:c1:38:65:cd:7a:ed:19:bb:42:a3:7a:ca:10:92:e3:
         44:9e:77:1f:49:99:b5:b6:17:8f:d7:06:3a:3f:a6:91:e4:4e:
         16:81:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----