Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File:                     2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier:          9gPskFmzZnf9ts5qmZkBBheFYoAt4ILOwuKUf45I6v0=
Subject key identifier:   1D:48:98:3A:9F:85:A1:5F:DE:FB:AB:4B:30:07:57:20:3E:C1:58:17
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer:       /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial:       01962E2B174C5FF450DB7E86A8A797CA0236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number:          0271
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: s0dlpUTAymu28+GsviWWA3Qn8diCP08CJkw71ZdOlrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:4c:5f:f4:50:db:7e:86:a8:a7:97:ca:02:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=1d48983a9f85a15fdefbab4b300757203ec15817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:03:6c:20:0e:60:51:12:7d:5a:3f:e1:57:
                    37:28:c5:25:34:5b:6e:a3:23:c2:f6:49:94:99:29:
                    31:1c:79:1d:42:e4:d9:09:82:84:36:44:82:4c:a9:
                    21:92:d7:30:48:f4:53:76:c2:07:0e:0d:6e:06:76:
                    e8:34:26:8b:5f:b1:a3:1e:4b:4d:0c:a2:c5:13:f0:
                    31:51:80:be:07:c9:7d:aa:cd:4e:66:15:a5:0e:19:
                    0a:50:9e:5c:ce:4a:00:88:b6:11:b4:2e:e1:cf:c9:
                    b7:50:13:dc:11:ae:f4:9f:a2:bc:cf:1f:c0:0c:39:
                    2a:f5:f1:bb:f8:46:b8:94:91:dc:cc:8c:6a:f0:b8:
                    96:93:1c:8d:f8:61:a1:06:89:44:4e:29:fe:8d:4a:
                    5e:76:90:f7:39:03:bc:8a:a0:c4:9c:b0:b6:7e:a9:
                    ac:b2:65:48:93:e1:48:0a:e5:d1:97:4d:94:09:b3:
                    1d:33:79:78:e1:74:1f:f2:1e:d7:c0:26:57:a1:83:
                    6e:0f:4d:9b:9e:d3:d8:43:75:b0:b1:1b:3c:12:ce:
                    cf:d5:4a:6d:1e:3f:08:43:6d:1b:3b:21:75:05:5c:
                    22:f0:7c:79:61:0d:cc:12:83:ea:e1:70:b7:bb:67:
                    c8:ce:46:76:5a:81:4d:5f:6a:61:0b:7f:11:ae:f0:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:98:3A:9F:85:A1:5F:DE:FB:AB:4B:30:07:57:20:3E:C1:58:17
            X509v3 Authority Key Identifier:
                keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:d7:ab:23:e8:20:99:54:48:5c:06:86:2b:76:3c:2b:15:
         0c:7d:85:c3:cc:38:6b:71:5d:79:f9:10:22:99:2f:1d:ac:21:
         71:5a:f1:6d:d2:9b:6d:9e:64:11:5d:92:aa:2f:45:13:56:63:
         5d:48:e4:9e:4b:ca:b5:6f:52:a6:29:48:ff:d3:fa:8c:69:df:
         e3:99:26:44:f9:2d:10:aa:b8:6f:7a:3c:67:c5:e4:26:16:e0:
         27:3d:56:57:c9:62:8b:49:9e:b1:e9:5a:9c:70:c4:a1:d0:62:
         c5:b5:cf:41:eb:b9:a4:63:5a:d4:82:78:67:1b:6b:fb:55:a3:
         bf:fe:7c:db:63:c0:50:e5:79:8b:e4:ee:76:f1:44:b3:6a:9c:
         3c:08:54:34:4f:82:32:d4:d5:33:26:6c:07:dd:72:ca:68:cc:
         0e:22:6a:42:0e:a6:74:00:80:77:9f:54:91:22:79:37:08:99:
         fc:ef:70:7f:9e:4f:13:c0:cf:24:d5:3e:fa:f6:7d:10:01:3a:
         48:e2:73:d1:30:e2:76:24:bb:cc:ba:72:c0:4e:c4:d2:51:83:
         93:81:4f:2a:6f:d1:d7:73:5e:32:64:4b:ee:9c:2a:0e:3f:1d:
         7a:e7:d8:ca:5f:58:be:d6:04:55:d0:fa:c9:31:e1:8d:99:8a:
         9c:0f:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----