Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File:                     2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier:          F501k1WZUtaqAPOzx4UrllFodW4Cf48R0CVA1URwTa0=
Subject key identifier:   CE:3A:A4:DF:F0:54:17:94:2B:EE:A6:CF:0C:C3:18:83:83:D4:22:8B
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer:       /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial:       01962E9981F319EE8BFDCA86F212C59CB2A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number:          0781
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: 6WNa8YfN4I3yHUhfVPmGArUpMdnJoCrEYRpOnZMG3DU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:81:f3:19:ee:8b:fd:ca:86:f2:12:c5:9c:b2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=ce3aa4dff05417942beea6cf0cc3188383d4228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:f6:db:5e:ad:8b:75:13:68:b7:b6:ed:b3:
                    6d:c5:82:2c:71:91:eb:46:77:d4:8d:ad:d4:4a:e9:
                    fe:dd:2e:c6:14:a1:54:05:64:20:11:fc:c7:45:7e:
                    86:02:34:0c:23:92:27:11:3f:95:ec:0b:69:3c:d4:
                    4e:e0:8f:58:c4:4a:10:65:8b:bb:74:ee:5a:d4:3b:
                    3f:b2:7f:f5:d9:b0:f6:75:c5:84:9a:73:59:f1:b0:
                    cb:9b:36:b6:10:bd:e1:20:c8:0c:4f:ec:c4:62:64:
                    63:f8:74:d1:66:a7:cd:04:91:a1:b6:22:65:1a:a4:
                    6c:3e:24:f4:59:66:ae:22:8f:2b:d6:2a:94:9a:b7:
                    e7:e3:ff:46:7c:6c:81:8f:2c:ac:80:a2:41:56:d9:
                    11:c8:49:ed:ba:02:7b:1d:78:e2:ed:05:59:d1:e2:
                    03:47:69:56:1c:2e:20:94:e7:b7:e8:be:82:9a:56:
                    42:c4:0d:03:74:6f:b9:13:a2:06:8c:4e:1b:ba:54:
                    ab:52:c6:43:6b:f4:8c:47:11:18:93:9a:ab:26:a9:
                    e3:71:58:74:f7:ca:02:bb:ed:74:74:9b:89:d7:c1:
                    e8:55:80:73:87:d8:52:7f:b7:0b:bb:ce:8e:46:a1:
                    e9:45:3d:dd:32:54:53:a5:b9:05:c7:bc:cc:52:c9:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3A:A4:DF:F0:54:17:94:2B:EE:A6:CF:0C:C3:18:83:83:D4:22:8B
            X509v3 Authority Key Identifier:
                keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:be:ed:c6:8e:3f:9c:d4:3b:ec:e9:10:d6:d0:21:ce:60:6b:
         d9:01:b8:3b:35:54:f4:44:79:06:14:12:bb:ac:ed:6e:4d:b8:
         ad:fa:a7:89:34:1e:5c:5f:50:97:89:a1:f9:b6:4b:3f:88:2e:
         54:c4:4a:f6:8c:d3:7c:59:ad:b5:ee:0a:b3:98:8f:e8:10:91:
         46:2d:3f:c8:2e:7d:99:a4:8f:78:90:eb:3b:4f:a2:cf:02:aa:
         03:7b:6b:94:76:f7:88:8e:a2:6d:a8:89:02:b7:e8:59:33:31:
         19:c8:63:67:a5:8f:07:d1:59:5b:28:e3:e9:ae:4b:ad:4a:f0:
         c5:a9:96:74:5c:d4:1a:57:e1:73:91:fe:1f:c1:82:a5:cf:03:
         fd:0a:46:e3:e2:12:65:52:15:32:bb:e3:8b:63:cb:0a:1c:db:
         c5:a9:23:1e:5f:e8:50:1f:bc:ab:f6:ef:77:bd:3b:68:9b:2d:
         7e:ff:d0:28:54:99:ec:ad:15:a2:42:0a:88:34:db:71:94:b2:
         1f:b2:fb:c8:d8:61:c7:74:59:dc:86:b9:ad:4c:d2:a4:88:75:
         b6:30:b3:af:72:be:d3:48:8c:3d:52:7b:b3:92:75:89:4c:78:
         33:ff:95:bb:0f:8a:10:2f:78:0b:ac:e4:87:09:d8:12:13:cb:
         6f:d5:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----