Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File:                     by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier:          1o9ulytRuTXPqbNLHD66XZ2xXQ28YVyqpDQyfm/rkWo=
Subject key identifier:   33:4A:B6:DC:4C:FE:EF:7E:9D:2F:1E:90:0F:49:70:52:72:A8:86:6C
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer:       /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial:       01962E986DED78EC4D215B911B6C3A377671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: WV9zjszu6aO4D+/mZOE1lLXHh91Rsl4E5kMJbK0Ca4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6d:ed:78:ec:4d:21:5b:91:1b:6c:3a:37:76:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=334ab6dc4cfeef7e9d2f1e900f49705272a8866c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:ff:ec:e2:54:6d:bc:3b:4b:aa:ff:ed:69:
                    a3:d7:ed:78:5d:f1:67:97:b7:12:41:b8:0f:1e:51:
                    ae:55:d5:fc:a2:7f:9a:84:cb:dc:2b:95:92:ef:97:
                    36:9b:29:cf:e0:48:47:2e:6c:05:2e:ba:c7:a2:f8:
                    36:de:e8:72:fc:3a:a0:13:c9:96:1a:8a:64:8b:2e:
                    20:d5:ac:14:ae:a8:58:65:cf:0b:f8:62:32:7d:46:
                    ad:35:5a:dd:1d:d6:c0:9d:20:1d:24:65:67:68:6b:
                    a5:b6:94:18:a6:ec:a1:d4:b3:25:ea:73:bc:eb:6c:
                    d1:ad:92:2f:bf:63:a3:88:92:70:a1:65:ba:dd:15:
                    0e:24:8a:33:cb:03:fe:f3:23:93:e4:36:9f:a2:da:
                    43:ed:12:ee:e9:58:f8:dc:12:95:fe:66:65:80:5a:
                    a0:3c:2b:60:52:78:21:c3:a5:5b:9b:4e:91:97:e1:
                    fc:96:79:b2:16:82:c9:9a:4f:77:f1:46:00:af:31:
                    03:08:36:33:0c:03:fa:99:c2:4e:53:5a:fc:13:ee:
                    15:7f:8d:03:25:4f:f3:bc:2b:35:b5:b3:b5:9b:6e:
                    05:26:b4:7b:15:c5:5e:a3:4c:60:fd:5f:84:98:f9:
                    39:f3:3b:d1:8c:21:00:7e:22:e0:5b:fd:68:28:f2:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4A:B6:DC:4C:FE:EF:7E:9D:2F:1E:90:0F:49:70:52:72:A8:86:6C
            X509v3 Authority Key Identifier:
                keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:4d:a4:93:54:29:82:c9:15:d3:5e:d9:1b:54:b6:fb:06:
         c0:e0:9d:6e:c1:76:23:18:25:d3:ff:5b:3d:02:d0:68:c3:9c:
         6c:5c:77:86:b9:5b:b7:4b:15:4b:03:ca:df:57:2b:f4:b0:3b:
         4e:ea:d5:6a:02:e1:27:17:36:e0:77:e9:09:b4:28:97:4d:35:
         c3:44:9e:ce:a8:81:e4:8b:ac:93:5b:67:24:eb:05:fa:2f:f0:
         56:09:c6:ef:a0:a5:75:d7:fc:4c:33:e1:a2:79:52:9b:5e:4d:
         87:78:da:ea:14:e6:b0:a0:ff:01:d2:b0:d7:0a:22:99:be:d7:
         bf:a2:af:a2:cc:d5:92:7a:2a:c0:d2:6b:a6:b4:44:91:33:3f:
         80:98:a7:26:8f:41:eb:09:f3:cb:43:df:0f:e3:ad:f9:64:7b:
         16:bf:e3:5e:6b:02:b1:ee:b1:8c:aa:a1:11:32:59:e5:ca:63:
         61:80:ae:f9:b9:cc:40:a6:31:58:5d:02:18:f6:48:b0:34:95:
         0d:82:45:f6:a6:ce:86:5b:07:34:51:ef:0a:1e:ae:7e:ac:2e:
         d6:3d:51:47:50:5a:50:2c:66:2e:68:6b:11:dc:87:52:8e:ab:
         13:04:4a:0b:6a:49:92:3b:d0:31:eb:b8:25:c4:69:fe:db:c3:
         a5:62:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----