Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File:                     r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier:          AM3mh/3ayqHl3lK1FI7ZfC2Z9jy7SwqBx5VEUfq5Nos=
Subject key identifier:   40:D1:B9:36:CB:C1:FB:DA:85:2E:C2:A9:F4:29:9A:3E:A7:6A:C1:A6
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer:       /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial:       01962E997BD63D772740F7249FDE20948F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number:          081C
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: qpHrP2bmB+AObDfAaAzOQkCICwJfZPP2QilBAVJZLu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7b:d6:3d:77:27:40:f7:24:9f:de:20:94:8f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=40d1b936cbc1fbda852ec2a9f4299a3ea76ac1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:40:72:a3:6c:47:4c:e1:69:34:71:ea:93:
                    35:65:6d:b7:5d:7c:d0:ad:90:86:09:aa:a3:ba:c6:
                    37:0d:61:f0:86:e2:12:82:f4:67:a4:59:5a:ac:cd:
                    55:f7:24:2e:14:d3:25:ea:0b:48:74:3b:ca:14:36:
                    d7:aa:53:9a:26:d4:3d:d8:82:82:13:81:03:d2:e6:
                    54:14:83:96:e6:ea:f0:0c:32:db:b9:e5:88:8c:27:
                    c4:e8:b3:77:73:ef:1f:50:ff:1d:3e:71:13:e6:b3:
                    c8:10:94:c8:45:d6:85:db:93:c0:46:dc:cf:45:59:
                    22:6b:40:8a:71:37:85:b8:54:13:3c:5d:c8:c2:71:
                    1f:c5:25:de:1b:c5:28:34:18:24:89:e8:0c:09:7a:
                    b6:a5:d2:5b:b5:82:66:e5:d4:a2:70:1d:02:88:20:
                    e6:4d:08:62:04:81:28:8f:b2:fe:2b:8e:6d:8e:c3:
                    c8:f0:35:81:72:5c:6a:a1:24:1b:39:9a:a1:74:8c:
                    20:76:0d:7c:1d:f1:e3:81:57:c0:ac:38:cc:d6:43:
                    7a:0f:a0:2a:2f:f8:58:48:27:9f:60:76:ba:56:3d:
                    ec:09:22:46:b3:a6:cf:71:20:63:d0:81:70:72:40:
                    a6:7e:34:ba:cc:b0:1a:bc:25:73:31:63:0c:32:6b:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D1:B9:36:CB:C1:FB:DA:85:2E:C2:A9:F4:29:9A:3E:A7:6A:C1:A6
            X509v3 Authority Key Identifier:
                keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:31:c3:11:d4:d2:69:12:7c:24:e8:d2:5f:aa:fd:62:40:d2:
         9c:c7:b5:9c:f7:2a:7f:61:eb:40:c4:6a:bb:61:3e:5a:81:94:
         4a:f2:a9:d4:42:e8:3b:5a:75:7d:52:63:10:e7:07:0a:e4:e3:
         ea:fe:21:b1:34:75:b7:30:62:1a:ae:31:b6:8b:eb:9e:aa:bb:
         04:07:e6:c4:88:e1:fc:cd:47:f0:49:dd:9e:02:26:d1:7d:8e:
         e8:2e:a0:fa:df:7a:7a:3a:eb:1f:9b:9e:10:1c:18:4a:7c:35:
         52:19:40:c1:65:5b:87:83:24:c1:29:50:16:88:ca:28:71:fb:
         75:95:2c:5d:eb:e6:3d:01:4b:a7:b4:da:41:bb:59:97:12:d8:
         67:45:52:d2:08:63:15:4b:8c:68:ce:64:37:80:aa:b2:a5:33:
         80:f9:5f:f2:13:2a:7c:0b:23:91:8d:9c:f8:53:fc:a5:8f:a5:
         f2:dd:59:ab:62:85:0f:d5:2b:25:24:e8:01:4b:e3:d4:84:f7:
         76:72:7f:1e:4b:ce:fc:2a:99:fb:03:9e:0e:38:e5:62:a3:d3:
         a8:02:5a:00:3a:d6:43:02:c9:1d:09:bd:07:20:da:a0:22:ed:
         78:79:22:71:21:45:8b:d8:ce:14:f1:ca:66:2c:68:bd:50:0c:
         48:0a:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----