Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File:                     2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier:          Ze9FahvI451CnYIxfLflkjp/GcbniNl3AfWld3TKmI4=
Subject key identifier:   67:F9:CD:C1:11:AD:D2:C3:ED:F6:B7:BB:F4:B4:6A:71:11:70:48:E3
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer:       /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial:       01962DF432150FE520CAEF43DF7420C0DCF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: loO7B2PqcpvezIFjsFiLHglRSyJBwlUVE1wk3OBYUUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:32:15:0f:e5:20:ca:ef:43:df:74:20:c0:dc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=67f9cdc111add2c3edf6b7bbf4b46a71117048e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:9f:b8:ea:08:2a:1b:4e:20:c4:4d:4c:94:
                    e6:53:db:7f:cd:27:8c:b9:f6:27:a0:5b:26:d9:80:
                    f2:95:5d:d7:e6:47:e2:e7:95:8f:ab:2d:fc:b0:26:
                    7d:3f:8b:1d:51:9e:47:14:84:18:78:d0:ef:01:53:
                    9a:3b:05:48:c7:eb:06:b6:3f:02:0b:cb:7b:09:63:
                    5f:3a:8d:65:0f:42:54:f0:d0:35:10:43:49:c3:4a:
                    cf:2c:29:63:5b:1b:2c:6c:78:47:dc:76:a7:e7:30:
                    4e:68:cb:9f:29:be:92:53:2e:f5:28:f9:e2:72:9e:
                    52:82:dd:fc:69:fd:b6:6e:f1:64:01:76:3f:dc:c0:
                    08:35:40:ce:8b:c7:24:d4:d9:9f:4d:4d:84:79:cd:
                    4a:7e:a3:c8:f4:81:39:76:9a:4b:f3:5c:8f:d9:5e:
                    fa:b8:c5:1e:74:ac:85:fc:d2:f3:d3:c3:98:b7:b7:
                    bd:25:0c:1a:37:2b:6c:86:31:ce:f1:9d:d6:16:cf:
                    d7:91:bc:de:c3:4c:1f:c1:4e:8c:ef:ca:a5:81:25:
                    2e:c4:ca:28:ab:7b:7c:89:69:0e:53:47:e0:f6:01:
                    33:69:1f:65:24:6a:3d:cd:e3:3c:9a:ca:40:38:06:
                    82:47:ed:1b:34:1f:e6:df:eb:52:20:13:0a:cf:21:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:CD:C1:11:AD:D2:C3:ED:F6:B7:BB:F4:B4:6A:71:11:70:48:E3
            X509v3 Authority Key Identifier:
                keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:fe:a5:4e:33:cd:54:46:6f:62:9f:99:c5:45:a7:78:2a:
         0e:77:87:31:16:52:7f:f1:c3:e9:ba:43:aa:c9:66:cc:db:93:
         ee:2d:d4:f9:df:8a:4a:60:a7:35:09:a2:ab:56:9e:2c:57:a6:
         72:d7:a9:dc:fc:d0:90:b1:e9:9b:2d:06:69:a1:92:3f:10:35:
         24:70:a5:0b:8c:e5:67:bc:d7:39:19:3e:de:a6:d9:01:2c:52:
         62:8d:8d:a5:c3:c3:10:44:7a:23:bd:ca:6f:07:76:5b:88:f1:
         e6:e3:db:1f:b3:6b:45:60:c9:55:81:89:eb:17:c3:6d:86:9e:
         7f:07:7e:80:94:2e:09:58:49:99:ff:18:44:00:5f:1e:18:d4:
         cc:29:a9:f8:e8:33:4b:09:3a:1f:24:0e:e0:38:4b:46:23:ce:
         1e:0c:44:f6:b9:78:42:d9:ed:e3:61:19:85:b9:05:b6:d8:01:
         3c:08:a6:08:12:f3:c1:fa:a9:ab:81:fa:29:e6:d1:07:50:7c:
         53:60:37:e4:0b:e1:a6:37:03:ff:78:a1:b4:83:9d:bd:57:44:
         7c:04:a2:35:85:98:b2:b0:05:d0:2f:e1:cf:ba:8e:94:1b:73:
         c8:63:fa:a5:64:68:41:4e:54:50:c0:58:20:93:f1:f9:ac:4e:
         d9:62:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----