Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.mft
File:                     DXtk3YGIxSbrXrReqB6mqK-cWek.mft (raw, json)
Hash identifier:          uq0W8zVUViN6mXL3Gv+LUcfATdVQzVpWf93cBhi2ybI=
Subject key identifier:   EE:75:C3:9F:BD:E1:BC:09:1D:80:DF:BD:FB:16:E0:61:2D:4C:6C:27
Authority key identifier: 0D:7B:64:DD:81:88:C5:26:EB:5E:B4:5E:A8:1E:A6:A8:AF:9C:59:E9
Certificate issuer:       /CN=0d7b64dd8188c526eb5eb45ea81ea6a8af9c59e9
Certificate serial:       01962F064D6F8AD675DEC51C78DB7F1A3196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXtk3YGIxSbrXrReqB6mqK-cWek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.mft
Manifest number:          0170
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: DXtk3YGIxSbrXrReqB6mqK-cWek.crl (hash: fz9UpMwo2xKOgZ4RltTPNoUXNODGNu97rlOXCIcST3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4d:6f:8a:d6:75:de:c5:1c:78:db:7f:1a:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7b64dd8188c526eb5eb45ea81ea6a8af9c59e9
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=ee75c39fbde1bc091d80dfbdfb16e0612d4c6c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:11:c3:c3:01:52:a3:e0:fd:25:70:b5:a1:
                    c4:10:98:83:3e:52:e0:71:de:bb:59:0c:18:e3:dd:
                    7e:54:2d:34:69:d7:40:7e:c6:d5:7f:d8:93:fb:12:
                    ad:54:12:58:51:3f:0f:77:1d:c6:49:a0:6c:be:5c:
                    ee:30:9c:65:c2:f7:79:6f:33:89:b8:6c:61:d5:99:
                    7b:a0:a7:2a:f1:bf:75:c2:1e:a3:c5:7a:6e:17:8e:
                    06:c6:38:cd:cb:fd:d5:72:d4:d7:76:29:d9:ba:4a:
                    0c:9d:8e:e1:74:15:ad:dd:51:17:dc:02:5a:37:0b:
                    8f:73:30:31:ac:4b:71:d9:a0:3d:c2:2d:bd:0b:da:
                    70:14:8e:88:86:87:af:66:6e:af:ee:b3:12:76:af:
                    ba:ff:d1:c7:4b:5f:da:4b:37:67:6c:a1:24:48:62:
                    b8:03:43:52:8e:a1:e2:62:1a:a2:f1:f9:35:ea:89:
                    8b:57:b4:8b:ca:3e:47:3d:57:04:35:49:f2:2d:1e:
                    6e:02:c6:2e:89:37:20:25:22:fc:43:25:e8:2d:9f:
                    3b:e4:36:1a:54:15:f8:6f:87:04:16:51:03:29:a2:
                    59:76:2c:33:c9:7f:d6:55:b0:1c:01:3e:73:7a:60:
                    9a:70:9a:87:53:e4:b4:7f:39:78:92:47:18:ed:d0:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:C3:9F:BD:E1:BC:09:1D:80:DF:BD:FB:16:E0:61:2D:4C:6C:27
            X509v3 Authority Key Identifier:
                keyid:0D:7B:64:DD:81:88:C5:26:EB:5E:B4:5E:A8:1E:A6:A8:AF:9C:59:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXtk3YGIxSbrXrReqB6mqK-cWek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bc91d2-e209-4a1d-9f78-33d31293f0e1/1/DXtk3YGIxSbrXrReqB6mqK-cWek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c2:92:66:b8:95:c1:5c:ed:70:80:4f:f5:08:cc:65:7b:0c:
         d5:ed:a8:4d:77:35:ef:ce:49:00:95:ee:4d:89:88:70:37:2e:
         52:45:e0:d9:e6:44:8f:d9:cf:ed:0f:e4:65:c7:08:2f:dd:f5:
         69:b1:e4:65:37:c7:7e:3d:19:26:ed:5d:48:3d:92:9a:df:1f:
         e1:84:59:b3:9e:7b:d1:82:28:72:9a:9b:77:6d:b7:96:f7:7a:
         af:2d:c0:75:22:80:a3:c2:d1:19:39:14:2c:94:98:a9:2a:40:
         d4:b6:a7:b3:38:0b:d2:cd:39:d2:45:31:f6:c0:f0:0a:8c:4d:
         7f:ef:2e:9a:50:9e:83:18:ce:93:b1:29:24:cb:87:84:c1:42:
         d2:a4:70:0f:95:3c:ca:29:be:cb:fc:c9:b5:a0:b3:48:e4:3e:
         94:c1:a5:49:55:eb:cc:07:a8:ff:80:94:23:e7:b8:cd:fc:5e:
         c7:cd:0f:ad:d0:65:01:7e:0b:d7:08:ad:d5:b4:e4:a6:41:97:
         d4:e8:2b:f9:10:f8:73:07:46:5f:e6:77:d5:9c:ab:96:9a:89:
         80:2d:b4:17:e5:08:f1:46:fa:13:7d:7b:33:43:da:5d:2f:37:
         09:af:85:87:45:a0:2d:01:c0:fd:2c:8f:27:3f:2a:68:08:0a:
         18:11:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----