Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
File:                     2nGl-6KA1tAY7MOp1-WMPGEeav0.mft (raw, json)
Hash identifier:          M+9sGpajx6JBlZ4SQj20QLupReNIMJBrUkc70k+cFRo=
Subject key identifier:   59:55:4F:38:95:FF:1A:03:8E:3C:71:EF:2B:05:F1:ED:E0:C7:63:3D
Authority key identifier: DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
Certificate issuer:       /CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Certificate serial:       01962E61D167C49495CC94B0370D5A89F8F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 2nGl-6KA1tAY7MOp1-WMPGEeav0.crl (hash: KtNolgH3egvvVfTnBUOZeD7dX1T6VbeT8SgM1r9RAeM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d1:67:c4:94:95:cc:94:b0:37:0d:5a:89:f8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=59554f3895ff1a038e3c71ef2b05f1ede0c7633d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:9c:57:45:9a:2d:f4:97:a5:5a:ec:e2:44:
                    2a:3d:78:4e:79:26:96:3d:42:b8:b8:ee:e7:43:4d:
                    ec:58:ba:49:49:7a:1c:1b:a8:ea:a9:3e:c2:64:c7:
                    d6:cf:e9:f3:7a:b2:e6:7e:ab:9b:b0:1c:e9:17:6e:
                    77:2c:54:14:e1:61:63:93:d5:3c:ae:b9:99:c5:b7:
                    75:99:cd:c9:75:b4:0a:28:af:39:9c:6d:9d:99:03:
                    34:15:25:53:05:46:e3:0b:fb:f0:67:8d:b6:22:c0:
                    4f:2f:74:eb:eb:f8:49:57:e2:a4:64:b7:1d:b7:61:
                    75:bb:cd:a9:df:03:54:64:35:ff:7f:2a:bb:05:40:
                    5e:19:fe:c7:43:6f:f6:89:74:07:2e:d1:7f:d4:c0:
                    c1:8e:dc:73:59:84:4f:2c:3f:99:77:92:26:e6:b7:
                    a2:de:91:30:28:60:45:f8:eb:2d:d2:49:6b:08:26:
                    f1:0b:f8:6e:6b:1f:2d:40:cb:1e:d7:48:6f:c1:31:
                    27:fa:d1:5f:69:31:01:af:07:c0:35:95:d9:3b:7a:
                    af:2b:87:9a:63:f7:56:2c:a4:17:38:b1:30:62:1b:
                    62:c6:0c:12:87:84:bf:f3:7c:06:11:ba:2f:7c:8b:
                    34:ed:d7:4d:80:b8:25:b0:95:fa:ac:2b:68:08:3e:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:55:4F:38:95:FF:1A:03:8E:3C:71:EF:2B:05:F1:ED:E0:C7:63:3D
            X509v3 Authority Key Identifier:
                keyid:DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e5:e5:70:9a:ec:3e:0e:64:b7:5c:46:97:c6:8a:83:56:47:
         04:98:26:c6:5e:3d:6f:45:71:36:68:66:13:7d:e2:6f:0b:4e:
         66:47:41:9d:cb:2a:c8:26:e0:e6:b9:d7:55:ce:50:7b:97:1e:
         6e:fb:1c:e3:e7:35:ab:22:0b:58:e8:65:a7:93:73:44:65:cb:
         f6:d6:f3:db:64:42:06:bd:b7:12:00:5a:c7:65:dc:4a:87:6c:
         ce:9a:78:59:ee:37:88:9b:cd:fa:e4:f7:19:e0:61:d5:b5:50:
         f7:6e:0a:d4:d1:50:85:ef:79:9e:15:cd:ac:bd:38:8c:34:dd:
         0e:78:2e:3a:56:08:c7:d0:94:a7:22:9c:4c:a0:aa:4a:27:57:
         1d:4a:07:83:45:81:6b:3f:a7:ad:ba:e5:44:b1:15:08:38:54:
         cf:e5:ee:f1:87:20:45:31:91:eb:1a:dc:63:dc:31:93:6a:04:
         1e:d7:2b:54:1e:54:e2:a1:3a:f5:eb:db:c6:08:fb:7f:a6:50:
         b9:28:29:c0:4c:6b:ee:7d:30:02:cb:67:5b:7e:93:cf:50:ef:
         4c:ee:40:97:40:cc:1c:50:78:23:72:25:ad:30:3c:0a:1f:75:
         ce:5c:22:2a:d2:e9:64:da:5a:3e:ee:79:0e:e2:6a:7c:85:ea:
         a6:be:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----