Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier:          nhCG+Rogf0UHnVEkai/ygWRCyT2zaef0UGXKoCICb5s=
Subject key identifier:   1D:F5:D7:6A:6B:55:6D:C3:08:6F:34:94:F8:C9:9C:CA:2A:31:62:32
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer:       /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial:       01962F07220F217ED6F1FE3D4D0E1223F4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: deHpq249Yx+WkdD5tsUyqe3JWi8mpCcdpdm5tRoYiZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:0f:21:7e:d6:f1:fe:3d:4d:0e:12:23:f4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=1df5d76a6b556dc3086f3494f8c99cca2a316232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:29:1b:6e:be:2c:d4:78:95:9c:18:33:99:
                    5c:7a:f1:8c:d1:40:3d:82:d5:8b:63:8a:e9:cd:a3:
                    e3:2a:94:c2:3a:1d:60:3e:0f:17:f0:42:cf:6b:09:
                    ad:e8:04:93:2c:b7:f0:b2:27:e3:18:ef:5c:b2:df:
                    bc:c2:7a:2d:8f:00:5d:a5:60:cf:f2:ae:a6:90:eb:
                    9f:f8:4d:19:ea:a8:ef:a4:0e:ba:f1:8d:0f:cc:52:
                    37:f7:ff:5b:e7:3d:49:1e:c2:1c:52:cc:ed:18:b8:
                    11:27:96:64:90:3e:41:b6:c4:22:4b:e7:ac:41:47:
                    b9:95:00:e1:b1:e0:f5:dc:23:43:b0:60:a3:d6:7c:
                    8f:c7:06:39:85:d0:31:50:3c:25:a1:45:0b:7d:68:
                    6b:87:88:da:67:b1:b7:fc:ea:2f:7b:e7:6a:38:ed:
                    dc:87:18:e7:9e:cd:7b:d5:47:c6:99:5a:84:65:41:
                    0d:4e:cd:cb:79:00:1b:f7:21:41:f0:47:25:97:01:
                    4d:28:23:9a:cc:28:69:b1:cd:56:b7:df:32:bc:0e:
                    98:06:66:3f:a4:8f:a0:24:be:df:35:69:5d:aa:80:
                    8f:5d:26:7f:d4:9f:d7:97:08:95:15:ad:88:f0:80:
                    69:0e:5c:52:d8:26:06:78:2a:82:7a:cd:4b:e7:39:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F5:D7:6A:6B:55:6D:C3:08:6F:34:94:F8:C9:9C:CA:2A:31:62:32
            X509v3 Authority Key Identifier:
                keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:12:b9:d9:d5:97:01:81:29:f3:d3:3a:cc:5b:f1:01:f5:56:
         0d:71:28:36:db:06:3b:28:ab:31:33:c6:83:56:76:06:af:87:
         d5:71:e9:9f:d5:94:3c:80:ee:4f:4f:2a:08:8d:bb:cf:b8:5b:
         24:dd:98:e5:d2:78:5b:7b:fc:03:66:27:29:fd:d5:d7:01:94:
         61:51:80:f2:9e:b3:e5:32:89:bd:6d:23:1f:f3:6e:9e:29:6b:
         fc:33:66:0b:3b:de:be:0f:95:7c:21:6b:dd:b4:44:b3:a8:3d:
         db:b1:5b:cf:ee:36:22:15:7e:6a:f2:f4:af:02:f7:8b:c2:d5:
         71:bf:9b:b2:04:ad:c2:57:25:0d:a6:6a:c0:6f:95:ff:71:6c:
         80:62:c0:9d:48:8e:9a:3b:ca:49:6f:c1:3b:37:2d:e7:55:b1:
         c8:8a:20:73:75:45:f1:66:26:ba:03:27:0a:86:3d:19:d5:46:
         86:eb:a8:78:07:22:dd:ce:eb:1c:16:97:12:1e:99:3b:bc:5a:
         64:fa:ba:ca:d5:b7:ff:68:26:1a:5b:6a:da:b6:33:0d:7e:50:
         78:e5:22:69:48:ce:7c:23:ab:da:33:4b:84:78:a1:26:b6:ff:
         20:56:d9:9a:7c:0f:7c:15:24:21:b4:83:43:4b:1b:cb:e2:38:
         9c:35:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----