Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File:                     UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier:          YAHg1Y2EJuHtUAAx71NhsuOcgTy2EEmYj27bjbZf9vk=
Subject key identifier:   34:AA:7C:26:BD:81:4E:E8:61:2A:1A:7D:B3:26:EA:E0:71:FE:CB:0C
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer:       /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial:       01962E9975AAD65FF58F45C520C73E375BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number:          0ED0
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: /OQzA+OKlk8aS67Uh9eJx7WtMipJuaMF35FNiQSE3Ss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:75:aa:d6:5f:f5:8f:45:c5:20:c7:3e:37:5b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=34aa7c26bd814ee8612a1a7db326eae071fecb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:89:af:bd:b7:49:9d:19:bb:e2:9a:ff:82:
                    89:b0:b6:0c:e4:13:5f:5d:ba:35:c0:e3:8e:e9:cf:
                    46:75:91:42:05:20:40:1b:94:16:f4:d8:b8:ae:43:
                    9a:29:b0:cc:ab:da:b6:1f:a0:09:56:e5:65:f8:53:
                    db:0f:59:91:75:92:40:61:b8:26:18:50:07:b3:f5:
                    f3:91:9f:7a:aa:c1:5f:9d:93:9e:f1:e3:12:8d:59:
                    13:38:12:31:85:f5:1b:57:50:fe:06:be:b3:6d:9d:
                    18:5e:90:af:e7:87:f4:9d:2b:51:1d:ea:e0:a1:39:
                    3e:52:56:95:98:fd:3c:30:ab:dd:7d:30:d9:b1:f5:
                    53:81:53:ee:3c:d0:93:ae:b9:5f:69:f5:93:d0:8f:
                    8f:c5:95:1d:46:76:ae:53:ad:e9:0f:e4:2d:c2:4c:
                    bd:e4:6e:f4:ff:f5:8f:f6:fd:c2:74:92:d1:7c:e4:
                    1f:bd:c0:21:93:5b:fb:91:0c:df:ec:36:c3:61:e7:
                    f9:bb:ac:49:32:46:be:f9:e7:a5:ad:89:73:03:5f:
                    32:05:08:e5:b8:1e:b1:de:23:1d:45:02:62:c7:9b:
                    1a:28:85:22:2f:37:10:a6:54:7a:62:9c:63:b9:58:
                    e6:29:bc:93:68:ea:8d:14:b2:30:5c:a5:e7:ac:f5:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AA:7C:26:BD:81:4E:E8:61:2A:1A:7D:B3:26:EA:E0:71:FE:CB:0C
            X509v3 Authority Key Identifier:
                keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:80:9c:d3:d5:90:10:f8:0a:06:91:78:c0:3b:18:fa:f8:
         ce:f6:62:7b:a7:cb:42:76:af:cc:3b:38:bd:aa:bb:c1:51:68:
         d4:05:1b:53:c1:9f:38:c2:f0:c3:f4:14:52:24:9c:eb:08:32:
         c8:cf:18:2f:08:4e:58:94:9b:d1:98:c6:18:81:92:f3:a5:31:
         09:7b:e8:14:bb:f0:9e:41:b2:a8:76:7b:bb:d1:21:c9:ea:a3:
         90:95:7f:55:00:d0:46:08:4b:54:d8:47:c2:06:38:0b:6a:f6:
         4b:79:dc:8f:61:7e:25:60:e1:ea:c4:33:00:d2:ba:89:17:c2:
         c8:00:f7:a7:27:7c:3f:2e:a2:1f:0d:8b:c9:e8:13:51:de:fd:
         b6:5d:0c:06:65:56:3d:77:ba:2e:9b:f3:d0:90:87:6f:d3:04:
         71:a9:b4:3d:f8:d2:81:f1:83:55:72:c6:b4:26:32:45:e7:39:
         53:fd:0e:ac:35:51:15:f3:39:90:b4:74:81:b2:34:b7:9b:c5:
         6f:76:4c:4f:c7:b2:62:27:50:76:74:dd:4d:96:0f:e2:34:32:
         fd:3e:28:e7:b9:98:5e:1f:00:9a:17:3e:85:68:79:ba:d9:b9:
         b4:07:2b:78:4a:ba:a0:d3:2b:2c:8b:b3:43:09:82:a9:b8:2a:
         55:0d:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----