Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
File:                     adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json)
Hash identifier:          TVMN1YW/wRUvotR/NHtRAaVnWsQVIGkDi1/Ldh3IRu8=
Subject key identifier:   EC:50:C9:C8:35:22:86:3A:F8:9A:77:0A:D2:77:A5:B3:74:43:19:E0
Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5
Certificate issuer:       /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
Certificate serial:       01962E98612D5473E39FF24471BCA6A9A8C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
Manifest number:          117A
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: QFRdfI10/mi/Wq29fBxRi/xh17eWna8Lf7Hv9D8BqtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:61:2d:54:73:e3:9f:f2:44:71:bc:a6:a9:a8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=ec50c9c83522863af89a770ad277a5b3744319e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:f7:1d:3c:9e:61:1e:f3:67:13:52:31:a8:
                    b9:89:be:f7:bc:15:9a:a5:96:b5:03:0b:9c:b2:fc:
                    29:f9:bc:09:8c:c1:9f:1d:49:26:df:4e:63:08:62:
                    5a:1a:2a:03:1d:4a:02:c8:2b:b4:e3:9b:d0:67:4c:
                    05:d4:ea:39:54:dc:ea:f1:71:e9:15:14:f7:d2:4b:
                    39:b0:28:5c:0b:cc:b1:f7:cf:66:1e:50:79:45:03:
                    a4:5e:a6:3c:b5:bd:3c:42:86:bb:4d:2a:cf:a4:b0:
                    67:7d:45:5e:ed:ef:30:ea:dd:8c:da:d0:a8:c3:a8:
                    6b:35:d7:96:da:52:7f:12:ec:d0:9c:cd:32:4c:d1:
                    5b:1e:aa:18:ac:dc:06:61:24:56:3a:bd:93:83:5e:
                    da:da:0a:ab:31:1e:4a:c4:d7:88:b7:13:6d:18:74:
                    49:07:bd:4d:05:de:a0:6f:58:8b:ff:8d:83:1d:cb:
                    bf:48:32:a7:15:84:13:8c:80:29:de:96:f9:40:a7:
                    c6:f4:6a:73:f9:f7:ce:aa:73:d6:2f:e6:91:b1:81:
                    85:15:62:6c:d5:97:a3:df:4d:e1:ec:25:be:ac:ae:
                    3b:0e:48:4f:2a:d1:38:8e:7a:40:e7:0d:88:72:67:
                    8b:c4:6e:36:22:02:dd:4a:e3:30:81:b7:21:d1:74:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:50:C9:C8:35:22:86:3A:F8:9A:77:0A:D2:77:A5:B3:74:43:19:E0
            X509v3 Authority Key Identifier:
                keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:51:ff:32:7c:49:86:97:3b:5b:6c:78:f9:b5:3e:e9:ab:e8:
         6f:7d:92:d1:13:ee:cd:3d:b7:64:fe:62:7d:de:0c:dc:60:d2:
         10:c0:91:4e:19:92:5e:c5:c3:2b:89:3f:94:0e:d4:4a:76:73:
         e8:ce:d5:72:2e:d2:09:0c:78:d5:d3:6a:66:a4:17:19:c6:ea:
         72:b0:19:b2:e1:01:2f:95:71:f7:25:df:1f:3f:16:df:6f:b8:
         0d:d9:3a:f1:96:fe:fb:fd:f4:f9:f5:15:62:c1:1f:b6:d3:66:
         5c:6c:31:e9:11:50:2d:6f:eb:da:c7:70:0f:c5:e0:82:86:d9:
         e3:81:4d:11:45:10:7c:97:5d:ab:78:a8:d5:b6:e8:13:34:ad:
         21:e7:cd:b7:d8:57:bc:1a:27:dc:98:98:99:69:76:a0:a3:bd:
         35:e0:a6:72:66:93:34:74:76:a4:bf:14:68:49:21:ca:3e:6e:
         84:72:d2:8a:39:9d:82:3e:93:f1:26:73:5e:2b:b7:fb:49:96:
         0f:f8:0e:0b:f9:90:3a:31:a8:aa:91:a6:24:61:cd:8d:75:51:
         cd:bb:0b:39:1b:f0:e6:af:75:17:cf:31:3d:36:5c:a4:7b:a6:
         66:49:27:0d:79:a2:0e:b7:ab:38:c1:19:38:20:c1:5d:28:0f:
         d0:03:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----