Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File:                     _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier:          oBqJ++5ToTHNT14FWpfv11GgpembV6yxA5z30y0Si5c=
Subject key identifier:   45:00:17:8D:E1:DB:E4:8B:BE:91:39:B6:08:85:54:5B:BB:17:3A:02
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer:       /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial:       01962DF44C39FA403ED1F846A0DAE883880D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: C3GjxX7itUDVtB1tTL/BBK630TVf6MDuaeQca7Pqqx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4c:39:fa:40:3e:d1:f8:46:a0:da:e8:83:88:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=4500178de1dbe48bbe9139b60885545bbb173a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:3a:b6:41:64:b3:73:32:a5:d8:1b:a1:9a:
                    77:6d:0f:53:50:7f:91:fb:a0:79:47:fe:79:44:a5:
                    9d:2c:7d:d5:2a:f2:29:c1:ea:90:a3:45:90:f8:d3:
                    fe:41:5e:36:b9:bd:01:d7:52:79:82:e3:24:c1:79:
                    10:a1:1c:b1:23:17:c4:69:a2:4d:f4:7a:54:df:cc:
                    bb:81:7c:96:81:ba:e5:ff:c1:5d:0f:8b:d1:18:ff:
                    e9:7b:3f:2d:42:cc:66:7d:54:24:8c:d5:a1:dc:01:
                    6a:6e:9a:44:cb:a6:23:03:a6:17:ec:8f:3d:0e:09:
                    95:f8:86:54:b4:33:1e:6e:7a:ed:8e:02:8a:a7:01:
                    48:3b:c1:9c:7d:f6:7d:aa:9a:2c:b5:55:c3:e5:9d:
                    14:bc:1c:c8:fe:48:3a:69:f7:c4:44:eb:4f:1d:96:
                    97:3b:21:7b:ff:3d:c3:61:f7:eb:d4:a9:2f:1d:0e:
                    65:d0:75:c9:79:7e:0f:10:8a:62:d1:18:4e:1b:4c:
                    cd:7e:98:56:c3:2a:cd:65:f3:02:b3:e5:21:f1:f7:
                    63:d1:12:55:2f:a3:b5:b6:91:8f:3c:0e:18:4d:97:
                    cf:7d:db:62:fd:c9:02:38:bd:ec:b7:41:92:b9:a1:
                    bc:b6:94:72:0d:1d:ea:2b:f8:b1:7b:2e:59:dc:ca:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:00:17:8D:E1:DB:E4:8B:BE:91:39:B6:08:85:54:5B:BB:17:3A:02
            X509v3 Authority Key Identifier:
                keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:4f:75:06:9b:37:12:2f:7d:58:f8:26:bf:d8:de:6b:f5:
         13:13:bf:ac:ef:50:55:42:9a:18:61:f6:02:87:78:4d:24:ba:
         bd:f2:7b:bf:3e:c3:bf:fc:cd:15:37:7e:30:bc:8e:14:54:5c:
         cd:ff:cf:28:19:42:71:04:fb:a9:fa:c7:d5:20:77:c6:e0:30:
         a6:2b:e5:fc:6a:49:e9:8d:17:b5:80:8a:f5:4a:7c:59:03:86:
         3a:f3:cf:b3:05:38:ea:9f:80:a7:54:86:82:73:a4:0c:35:6d:
         fe:ca:54:1a:33:bc:d4:83:ed:77:4e:75:16:b4:f2:fe:cf:8b:
         cb:5e:7e:8e:bb:2a:c7:f5:d9:0a:37:b2:9e:b7:3d:d6:41:0a:
         38:b3:ae:b2:42:dc:ae:1f:47:0f:bc:5e:5a:ca:53:17:50:89:
         1e:a8:e6:8d:42:ff:12:2b:b4:03:95:a3:09:d3:90:5f:0d:1c:
         c2:28:e8:3b:de:70:db:22:e3:fd:11:f9:cc:8a:ed:df:d5:f0:
         4d:83:e7:7c:87:62:4f:76:0d:07:ae:fd:e3:76:c8:34:dc:17:
         d9:02:cb:d8:95:64:28:cc:a4:20:de:1f:c4:ca:dd:bd:ad:73:
         12:4c:6f:1b:36:b1:8a:74:b7:16:28:68:2a:0b:50:43:65:8e:
         76:97:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----