Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File:                     buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier:          UfkGFLGEMoFXgCYeiTAqRPiuJm3595OsqhnYo9MPlPI=
Subject key identifier:   CF:8F:0B:F6:6B:8E:E1:17:57:4C:B0:99:BC:EB:FE:21:F1:0F:20:E5
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer:       /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial:       01962F3DB540B9C1DDBED1BA031C89091FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: jLPTjaYaI/7jy5zQF/u2J6TvqHW6o3vOZTigdEF4m+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:40:b9:c1:dd:be:d1:ba:03:1c:89:09:1f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=cf8f0bf66b8ee117574cb099bcebfe21f10f20e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:e6:70:b9:b9:e1:7c:ab:02:3a:7a:ac:84:
                    32:24:73:9d:69:04:c3:d7:ee:68:0c:6f:a2:fe:d1:
                    d4:30:2e:18:e9:23:2c:b9:df:ed:d4:a0:16:ac:f8:
                    a7:8a:9d:d9:8b:d8:e9:f5:91:d0:43:9d:cb:f7:a7:
                    15:a2:ce:68:e2:28:c1:3e:dd:70:bf:95:24:d2:8b:
                    2f:de:e4:dd:2a:ec:ed:ca:ab:54:0f:5b:2e:d3:3e:
                    69:32:ce:58:66:5e:25:2d:1e:6b:96:59:ab:59:df:
                    14:10:a9:3e:c4:41:58:cf:7e:47:0a:d5:c9:ca:66:
                    ca:3a:ec:ea:1b:5b:ed:47:92:65:f9:80:9c:3b:0a:
                    20:14:c2:59:29:7d:5a:21:7e:06:3d:d3:5b:a0:0e:
                    8d:f5:9f:75:ce:19:ae:f2:b9:ca:46:61:1c:d8:28:
                    68:38:5c:31:1e:f2:19:6d:f2:a5:56:3c:75:20:89:
                    1b:77:b1:cb:f2:6f:ad:96:ae:08:e1:de:cf:74:40:
                    e8:50:d9:55:c4:51:b2:2f:a8:db:df:6c:75:9d:11:
                    69:51:72:cf:33:6b:e2:01:92:ab:06:fb:a3:3e:1b:
                    01:ce:9c:ac:34:43:8a:00:16:6f:bf:6d:85:09:fe:
                    a7:f8:e8:d3:9d:06:81:73:67:0c:1e:70:31:4d:3c:
                    d2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8F:0B:F6:6B:8E:E1:17:57:4C:B0:99:BC:EB:FE:21:F1:0F:20:E5
            X509v3 Authority Key Identifier:
                keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:96:54:5d:de:d8:12:f4:76:de:35:97:61:06:08:08:4b:07:
         f9:7a:3a:22:c6:e8:ea:a5:8a:f0:03:28:70:b8:87:8e:cc:61:
         5d:8d:ff:b2:de:19:6b:d3:e5:81:00:75:ab:18:d4:9b:29:f0:
         2f:d7:88:86:d2:19:0a:f6:30:41:db:c2:ba:2d:f9:52:2f:38:
         34:e5:ad:fb:53:c9:65:e0:73:9d:93:3c:cb:2a:17:e1:b5:4a:
         7a:f3:7e:af:c8:d2:12:df:bc:49:b6:92:54:8e:44:16:dd:50:
         76:af:23:88:7d:32:f0:20:54:8b:73:25:75:6c:b2:f9:02:11:
         87:00:73:e4:6c:bd:56:d5:f8:04:6c:ec:ac:70:03:da:e3:e2:
         47:23:6f:70:c2:a5:66:93:7b:6c:01:6c:fa:37:fc:ee:c9:a6:
         31:9f:47:fc:cb:bd:a8:f5:f7:7b:6c:0c:d8:1c:62:ea:6c:16:
         bf:95:64:3a:c5:b7:0c:45:23:9e:ab:54:3a:dd:1d:71:8c:07:
         b0:d6:0d:bf:4a:a2:7f:da:eb:39:9d:08:fd:c0:da:7b:5e:a5:
         aa:e4:db:61:75:85:45:af:55:4b:d0:51:b7:ba:d2:95:73:e4:
         49:88:ff:76:d6:db:36:ff:68:d8:23:4e:b6:66:0d:7f:19:39:
         41:34:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----