Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File:                     xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier:          rHV+0WwIKa6c+HRO9omfyxPfK1ppnKZ08CEyAadKGPQ=
Subject key identifier:   CB:B7:E0:58:76:05:C6:A9:10:39:04:C0:7F:B7:A2:FB:0E:04:C6:A9
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer:       /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial:       01962E98F8442CB130643DA045A773CB1A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number:          0C48
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: xsVUpT+0lFkTF3D3IdwOt7XQ3RV43OYXIJn2FkAf5o4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:44:2c:b1:30:64:3d:a0:45:a7:73:cb:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=cbb7e0587605c6a9103904c07fb7a2fb0e04c6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:d1:37:90:2d:4b:f3:0f:27:51:8d:9d:c0:
                    b8:fb:73:98:d4:6b:41:11:4b:ce:f9:eb:6d:e5:78:
                    92:3f:9e:7d:5d:75:4c:26:9b:bb:dd:0f:f5:fb:ab:
                    b0:8a:bb:12:60:03:ca:20:39:94:5e:82:97:d3:3a:
                    71:b1:1c:6a:f9:60:b0:8c:07:8d:5e:95:5f:f0:30:
                    6a:d5:6d:f5:0b:bf:dc:97:db:a4:bc:ce:67:28:79:
                    99:49:97:a8:dc:51:8a:c2:9e:8e:d1:ad:e9:ba:e4:
                    24:0a:a5:24:e1:70:fb:66:78:90:89:d9:b1:3c:77:
                    b9:6c:97:e2:11:08:63:da:66:d1:e4:47:44:36:ae:
                    14:2a:a8:18:96:99:47:fc:d6:5e:d4:13:66:b5:24:
                    d5:a1:26:24:8d:7a:ce:f5:93:5e:1d:cb:93:83:d0:
                    b0:e7:f8:e7:73:22:09:14:38:80:94:c3:73:e8:29:
                    de:5d:92:fc:69:12:b8:35:f8:94:9d:f2:e8:68:bf:
                    8c:ed:85:0d:db:a9:14:86:e3:cc:e3:bc:a7:f1:d5:
                    99:1d:4c:16:71:60:ae:6d:12:a1:8c:22:9d:8a:c9:
                    61:83:2a:1b:94:7f:2b:ba:96:5a:16:55:04:86:b7:
                    f9:14:f5:d3:95:15:97:10:d8:e6:aa:7e:fa:5d:c3:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B7:E0:58:76:05:C6:A9:10:39:04:C0:7F:B7:A2:FB:0E:04:C6:A9
            X509v3 Authority Key Identifier:
                keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:32:c1:00:f5:3f:e6:6a:1a:08:38:4c:6d:a1:eb:15:3c:ae:
         7b:5c:14:f2:86:03:b1:6b:2c:cb:50:2f:f3:09:40:57:bc:48:
         35:a7:c3:56:99:7c:13:a3:47:c1:13:5c:ce:38:30:2e:31:26:
         65:ef:a5:59:9d:e3:4b:b1:b5:18:6d:f3:32:9b:9d:4b:da:c1:
         11:c0:4d:8a:3d:23:97:6e:fa:ea:a5:fe:67:f3:7b:2f:c3:d5:
         30:10:d8:6b:48:d1:69:77:50:11:3d:19:ec:b2:dd:7a:74:43:
         90:cb:93:6c:aa:fa:74:4c:39:22:0a:ed:16:16:00:ca:06:ac:
         b7:6a:65:b2:78:3b:51:cc:ff:d8:c8:dc:4d:8c:e9:37:8c:6a:
         18:41:3f:e5:ef:e6:ea:47:c9:3c:b1:67:97:94:f0:6b:bc:1d:
         f8:d0:29:ca:c8:26:c9:4e:88:57:f7:db:e9:0c:19:3c:7b:48:
         41:4c:b9:6e:6e:55:85:9e:34:51:7a:53:bb:cf:36:68:44:90:
         20:da:78:f2:09:86:fd:00:62:28:b0:20:9c:c4:ad:c6:02:1a:
         63:6b:a0:eb:54:26:f8:70:42:91:17:00:1f:b3:74:b3:7c:3d:
         74:e1:e6:e3:3d:6b:0b:28:92:d8:e6:ea:7a:b3:14:d6:31:33:
         f3:7e:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----