Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File:                     I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier:          nKmCpyDwfgUdAD8DEreYPiGJYmicDAKgFHRVy51LMwU=
Subject key identifier:   5C:E0:3C:1D:FD:7F:E5:30:51:99:C3:C0:64:10:4E:67:AC:E5:38:92
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer:       /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial:       01962E99060DB08307123A261044CAFEADA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number:          1332
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: ZSOaCcxaw2QyzNS1TtPwqHF/NX94VG03NveMkQuGWxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:06:0d:b0:83:07:12:3a:26:10:44:ca:fe:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=5ce03c1dfd7fe5305199c3c064104e67ace53892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:bb:3d:6c:d1:bf:a6:31:9d:e8:2d:1c:82:
                    16:9c:cb:ed:49:e4:f9:d8:da:2c:41:f3:5b:45:e2:
                    d6:bb:3d:4f:cf:55:47:ed:fe:66:bc:24:80:8e:54:
                    22:a7:33:92:40:da:26:b2:95:2d:27:0e:d1:b0:96:
                    5d:ae:fe:e2:26:a0:3c:ad:69:3c:4e:8d:b2:57:d9:
                    10:a4:9e:a2:d1:22:64:c3:ec:56:91:d7:14:15:47:
                    e9:64:15:9e:0e:5f:31:09:08:f9:55:77:8d:11:df:
                    f5:95:f9:6d:bb:b7:6d:46:a2:75:6a:36:29:97:8e:
                    44:83:d4:8a:fc:7f:6d:c2:ca:5d:30:63:8f:b9:b8:
                    58:42:43:1d:ba:04:33:b0:a7:70:92:e8:2d:8b:42:
                    8d:54:75:7b:09:85:3e:1f:12:8a:23:27:e0:e7:59:
                    c6:7c:8f:2a:fb:0d:e1:c9:92:c9:1e:d3:cc:4c:4f:
                    a1:c1:09:2c:ec:bb:44:db:73:5e:07:d9:51:31:10:
                    d7:e0:b7:88:6a:55:b7:0b:62:b1:59:74:9d:87:73:
                    c4:8b:8b:7f:7e:ad:ea:8a:7e:70:af:f6:14:de:65:
                    74:83:00:bc:1d:15:ae:56:10:4e:7f:39:73:90:e9:
                    89:d0:75:66:9a:e4:f7:3e:5e:28:29:25:34:ca:0f:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E0:3C:1D:FD:7F:E5:30:51:99:C3:C0:64:10:4E:67:AC:E5:38:92
            X509v3 Authority Key Identifier:
                keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:20:2f:73:26:bc:fc:b9:f3:cf:4f:bf:2c:70:6d:21:f5:90:
         59:3e:fa:9b:8e:31:88:d0:81:98:2d:2a:81:8e:dc:fb:81:2c:
         b7:c9:3e:c2:4c:e2:47:35:33:8c:65:c1:a9:80:c0:ec:54:92:
         ae:55:2c:84:02:91:73:bd:ea:da:a0:cb:bb:75:a6:2f:9d:8b:
         0d:37:c3:04:36:fd:9c:b9:e4:cf:d9:99:9a:e2:a3:76:ac:30:
         65:b9:a0:23:3d:0c:ce:61:fe:10:76:4b:cd:b4:95:bb:53:69:
         7c:5c:29:03:df:37:44:57:c1:a1:66:ee:01:15:41:06:87:59:
         48:47:48:f1:57:be:e7:e0:79:40:94:03:59:77:b1:f5:cf:65:
         6f:07:48:f8:31:ed:4b:67:25:0d:40:73:1b:01:3b:95:2c:63:
         c1:d4:d4:02:a8:cf:8d:f3:93:de:65:12:07:fe:11:2a:fe:75:
         10:6a:96:79:4c:ca:da:a7:36:b1:5d:b1:b2:6b:0f:b2:4f:95:
         cf:d1:7e:34:fd:c1:29:e3:4b:30:a1:0c:e4:ff:38:3d:1e:11:
         14:f3:72:ce:d2:fb:a5:1a:7f:38:04:6c:23:03:cb:80:a4:36:
         7b:8e:90:32:a1:d5:8e:b0:91:7c:4e:71:ea:e4:50:bf:e9:e4:
         6a:fb:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----