Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File:                     MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier:          9/Zksykg8FjLr54lC6wONfUVDx51eMX9vrxzfXOUhwI=
Subject key identifier:   45:03:98:9E:BE:01:54:FD:DE:F2:EB:60:C3:D6:82:23:BD:79:DA:1B
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer:       /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial:       01962F74C93EB847EA289299F0C8605A82DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number:          11BB
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: HDC5WN6eWd0aPHrwpYp/T4fXnhaUEhBmqsFSL36Dx50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:3e:b8:47:ea:28:92:99:f0:c8:60:5a:82:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=4503989ebe0154fddef2eb60c3d68223bd79da1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:2a:58:5d:aa:98:7f:7f:cb:bd:69:9b:7e:
                    6a:6d:9c:d4:b3:f8:d3:df:3d:c7:46:56:48:f9:93:
                    d3:f7:8d:4f:b0:21:7d:14:2e:06:a2:8f:03:f6:d1:
                    8a:36:14:8f:c9:54:12:48:a8:c5:03:fc:f4:39:3d:
                    4d:04:9a:8c:46:3e:6c:cd:54:d2:82:9f:79:30:f7:
                    c0:fd:8c:7e:1d:e6:00:19:93:72:86:f1:55:99:7d:
                    ee:83:b8:e9:34:e8:35:8d:1f:dc:25:b2:d9:aa:a7:
                    9b:44:09:a7:40:1a:b7:a8:00:a0:3e:73:f9:98:5b:
                    17:5d:f2:a0:86:c4:fc:3e:60:57:ef:13:82:9f:2b:
                    db:f4:d4:8f:5f:70:6b:0c:d5:50:c2:0d:8d:39:b2:
                    0e:58:82:2f:d1:3f:3d:4b:26:b6:a5:18:4d:18:03:
                    de:e4:eb:47:d6:eb:ec:db:ad:29:bb:9f:83:c9:04:
                    a5:ce:ab:de:bf:77:fd:10:ba:b5:02:c4:5c:92:04:
                    0f:20:f5:33:9d:20:3c:b2:61:18:e7:70:b7:a2:0a:
                    01:63:e9:22:cc:30:9f:29:7a:f7:5e:d0:02:04:a4:
                    1a:f4:bf:8d:47:ea:9a:fc:22:f6:d9:30:7b:3c:c9:
                    2d:51:3d:50:ce:cf:05:35:7a:8b:7c:75:48:a0:34:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:03:98:9E:BE:01:54:FD:DE:F2:EB:60:C3:D6:82:23:BD:79:DA:1B
            X509v3 Authority Key Identifier:
                keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:07:54:8a:e9:e8:b8:d5:17:24:63:0a:36:62:60:22:8f:06:
         2c:40:a9:e6:2e:ae:0b:5b:fb:7b:31:cc:e5:48:8a:19:7a:24:
         26:d5:bb:84:d9:b6:dc:c5:03:ea:d4:96:e3:36:05:d8:3d:72:
         9b:4b:eb:50:72:30:3d:85:5c:93:c8:49:2b:04:06:2f:a9:c9:
         98:94:f6:0a:03:e2:c0:fc:b1:66:50:e9:d1:58:5f:37:d8:58:
         48:6d:04:64:46:f0:92:6b:27:be:af:17:e3:fc:f8:d2:ef:fa:
         ad:fb:9b:ba:98:a5:9d:c3:47:81:04:6f:34:51:a5:43:c7:08:
         97:46:ca:b2:d6:92:64:76:84:fb:4e:3e:b1:9c:1d:74:26:8d:
         e7:0b:18:bf:df:b5:0a:1b:65:96:f3:75:e2:bd:5a:dd:81:fd:
         66:b0:02:d0:2d:47:d8:58:64:9c:4e:d5:dc:a6:87:fb:d4:53:
         ee:af:c2:44:02:11:ee:16:bb:91:20:24:65:b0:6c:ca:f0:f3:
         c3:e5:e3:ad:cf:fc:76:24:f0:8d:93:85:ea:6a:63:e8:1c:83:
         54:2b:4c:42:d9:5c:d5:76:2a:8a:e9:d4:b2:83:b4:c2:42:a8:
         bd:9d:69:ce:c7:f0:b2:ba:50:01:1f:ac:5d:f7:e7:7b:51:70:
         e5:aa:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----