Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File:                     brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier:          c62iCtq8uMGWQgOblIVsYRq0YzBizeo5oz6mZdC1qCA=
Subject key identifier:   4A:5F:B1:50:6B:00:AF:3F:18:7C:6C:6D:18:65:B4:08:BD:56:0C:F5
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer:       /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial:       01962F74AA53992E4ABD0396101DE52F3ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: niCs7jRIPvB+DEjWxi62D57E9+08RoIQHqwPlYZQqJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:aa:53:99:2e:4a:bd:03:96:10:1d:e5:2f:3a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=4a5fb1506b00af3f187c6c6d1865b408bd560cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:47:43:ae:ed:e7:0e:66:df:fd:0e:f3:6b:
                    7f:91:eb:cb:5b:79:00:ca:6c:ae:4e:68:06:40:3e:
                    3e:5b:2e:f3:e0:95:a3:6a:f3:bd:ab:86:cc:dd:58:
                    12:90:a8:8b:fa:bc:f5:4f:82:75:12:e0:0e:a4:15:
                    6e:40:0a:91:00:c5:3a:3b:44:db:92:4d:b8:64:f4:
                    53:79:96:61:3f:df:62:90:30:44:0b:48:ff:97:8c:
                    04:ba:72:b7:b5:ab:f1:60:e6:e3:b5:ee:e1:2a:22:
                    19:8f:65:5f:d3:4c:18:c6:aa:0e:b0:5f:a7:18:de:
                    23:97:52:20:ea:5c:22:bb:0d:0d:b2:43:d1:81:dc:
                    d5:80:5d:03:dd:09:3a:ac:41:71:7e:f5:1d:ad:d3:
                    c2:da:74:f4:3d:a3:6c:a4:87:e4:e7:3e:fc:93:94:
                    ef:f6:93:6e:a0:e0:a0:18:0c:6d:5f:eb:e8:5f:b1:
                    83:d2:44:bc:e9:e2:1c:2b:d2:c0:29:82:94:02:fe:
                    9e:af:d2:01:2b:9d:e9:5e:43:7e:d6:55:dc:7a:53:
                    85:ab:81:a2:7d:3a:86:92:87:b1:90:15:11:6b:87:
                    11:88:72:b7:18:90:71:46:fe:f4:cc:e9:9e:18:cc:
                    e4:c4:51:c1:f5:a0:aa:a5:f8:a8:5e:1b:e6:26:f5:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:B1:50:6B:00:AF:3F:18:7C:6C:6D:18:65:B4:08:BD:56:0C:F5
            X509v3 Authority Key Identifier:
                keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:57:17:f8:0a:e8:0f:7e:36:30:bc:9f:b4:05:32:2a:c6:44:
         50:46:67:e3:d5:c6:fb:fb:52:5e:71:1e:61:ec:ea:9b:ac:a3:
         28:23:bd:48:c4:1e:de:34:a5:bb:7a:da:1f:07:a6:2e:a1:ba:
         85:d0:04:0e:28:ea:7f:a5:d2:f1:9b:9d:42:21:d3:f3:12:8f:
         90:3b:cb:1a:fa:04:68:3e:fa:49:77:e1:a9:03:68:90:06:f8:
         41:3f:79:ee:58:49:2a:dd:75:60:ec:0c:78:f5:62:be:a7:1c:
         f1:d7:b4:6b:10:e7:cd:7e:5e:62:7a:3f:33:e7:6a:34:cc:d5:
         1c:3d:3b:22:84:57:b0:17:ba:88:2b:2d:f4:9e:6e:cf:b2:d2:
         de:3f:af:61:da:e0:a9:f4:0c:23:13:a5:9b:99:7c:d5:b1:c3:
         e8:d5:ee:a4:05:a9:e9:57:02:bd:26:34:df:f4:ef:de:1a:0a:
         5c:df:00:83:71:b0:7a:4b:28:b8:67:08:4f:c2:c8:e1:2c:11:
         f4:70:56:e6:14:09:f5:16:1b:eb:41:db:85:47:12:2e:92:59:
         cb:27:a1:1b:ef:28:0b:7e:29:ad:81:7c:7a:a8:a7:ee:0d:f2:
         91:8f:7b:b8:eb:21:01:e4:07:ab:c8:25:3b:d8:9f:2c:a6:36:
         6b:fc:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----