Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File:                     c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier:          Rd+SrMjrspRjzKiRRJT7i8Y8vroamjKNc2kdMEaK9V8=
Subject key identifier:   76:BF:41:F2:00:B8:CF:51:6D:AB:00:22:72:F4:3E:BE:25:33:7B:FB
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer:       /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial:       01962E986F78AABDDBE108D6D836326ED76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number:          0FF0
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: Q9wTRWolnyJMKxtlBSUbUgdRkFBha0ClPOkEoJ32xCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6f:78:aa:bd:db:e1:08:d6:d8:36:32:6e:d7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=76bf41f200b8cf516dab002272f43ebe25337bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:7b:0f:d0:e3:3b:96:62:33:fe:ba:91:3f:
                    74:6a:7f:7a:97:41:bd:92:89:d0:f1:42:e2:a6:f9:
                    3d:c7:91:91:4b:48:d9:9a:29:3d:b7:a7:4c:43:4c:
                    6d:85:78:7f:1e:ca:54:52:8f:76:45:2c:d3:6d:6a:
                    83:56:04:91:b2:dd:8c:68:8e:12:f4:37:2c:43:90:
                    41:d7:44:01:f2:02:03:45:86:d1:7f:83:63:a0:94:
                    2f:be:68:25:66:9f:6f:c5:b4:bc:35:b9:d0:d3:6b:
                    08:6d:93:c5:a3:e8:90:38:8f:b1:29:40:e5:5a:21:
                    6e:d4:8f:e1:f1:1e:16:86:c3:ae:76:4a:c1:17:d7:
                    d0:5d:34:90:69:db:b8:b7:4b:3a:b4:3f:07:87:4b:
                    ce:af:ec:6b:4d:bc:0a:f3:58:7a:60:90:65:38:35:
                    78:40:46:91:7a:ba:cb:1d:cc:41:20:64:d4:ee:e3:
                    e1:9d:b8:92:d4:94:4e:d1:22:9f:8a:b5:fc:bb:dc:
                    61:ac:7d:1d:94:00:a7:0b:a1:09:9c:b7:1d:18:76:
                    2e:12:1d:ef:7c:22:58:21:9a:2f:cd:de:a2:72:0c:
                    1d:e3:ea:27:ec:08:30:2c:48:db:10:0c:9b:78:da:
                    3e:36:01:32:04:37:64:ed:38:cc:05:74:04:a0:c8:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BF:41:F2:00:B8:CF:51:6D:AB:00:22:72:F4:3E:BE:25:33:7B:FB
            X509v3 Authority Key Identifier:
                keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:41:b8:de:1d:64:07:61:af:a9:36:9e:2e:3f:5f:81:2e:
         98:81:a5:08:77:88:24:17:13:be:e1:07:5f:82:f5:e2:ec:9a:
         a4:a7:2d:c5:d0:08:85:30:d7:dc:02:08:c0:52:fc:79:1a:59:
         8a:19:51:4a:c7:74:2d:54:58:8f:bd:5a:29:d3:d5:ba:e3:e2:
         47:38:cf:34:05:fe:08:c6:e7:af:28:5b:59:c9:a5:09:2a:b2:
         26:e1:12:ed:c5:bd:2c:b8:bc:0a:bb:2c:9f:3a:b9:e6:e6:6a:
         ce:a8:2c:42:6d:5a:8b:08:10:30:8b:d9:29:51:54:77:6b:96:
         e2:2c:67:24:62:8e:86:68:1c:0e:60:89:45:a5:b9:38:ee:bd:
         91:c5:54:aa:be:15:c9:06:97:f9:33:8c:94:ba:aa:bc:6d:45:
         9e:af:89:59:1a:af:8d:11:97:db:aa:cc:f2:a6:0e:cd:cd:52:
         85:07:04:42:a1:4a:44:21:bf:1b:e6:45:eb:84:e5:89:ee:f6:
         9e:d7:e9:d1:6c:28:96:0f:48:9e:6e:b1:8c:e8:77:45:a2:4a:
         f4:f9:8e:a4:68:62:b2:00:28:1c:2b:a0:c0:c4:72:b6:5e:b3:
         6a:c5:27:91:03:ee:46:98:27:cd:fc:c9:f1:f8:a1:b3:d3:0c:
         69:15:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----