Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File:                     9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier:          Y5Y6pIfTXFHFWpwGJZU+ZbI8TN6Kd/SvuReuB4Q2kqQ=
Subject key identifier:   C5:8E:58:34:8A:A0:C3:3F:FD:AB:87:44:12:48:C4:5F:C3:E9:C3:49
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer:       /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial:       01962F0747F01663C6722A9C1DE3376446B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: tUp49DSc5SjMkM76YUaWXykEiA/UhI1Q6rIw6IR7cAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:47:f0:16:63:c6:72:2a:9c:1d:e3:37:64:46:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=c58e58348aa0c33ffdab87441248c45fc3e9c349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:e7:4f:17:f8:cb:d6:c2:a7:53:e3:c8:8a:
                    f9:c0:ab:a5:6a:f7:2e:2b:49:6e:24:8c:f4:09:05:
                    9f:72:02:fc:32:be:9c:a4:bb:b8:22:dc:dc:35:0f:
                    da:78:cd:06:f2:78:4b:04:e8:6b:1a:f3:b5:7a:db:
                    ed:b0:99:2b:6c:00:b5:3a:0e:e4:2b:66:1c:bc:54:
                    17:d0:7c:11:1b:31:43:cf:06:89:2c:f4:83:47:06:
                    82:da:22:cf:27:d6:1e:02:46:72:5c:94:2d:f6:5d:
                    09:ea:e1:03:f9:fe:f6:bc:d3:22:72:af:d9:a4:e7:
                    c7:e9:19:c7:d0:4a:2c:49:df:bd:0f:4b:7b:db:da:
                    5e:75:d7:dd:8d:f2:71:1b:ae:c7:da:39:a7:f4:fe:
                    3b:a9:21:16:a4:dc:92:15:a3:87:02:af:7b:d0:a1:
                    64:9a:61:c0:20:9f:06:3e:0a:56:e8:da:5c:a2:92:
                    03:96:4d:40:96:56:17:c0:5e:83:15:fb:94:9d:e6:
                    47:27:c5:b7:e4:eb:ef:df:46:d5:8e:10:06:2d:49:
                    34:42:9f:39:53:0e:32:60:60:0f:7a:98:f7:fa:98:
                    64:1c:fc:ee:d9:ac:b6:10:05:67:a7:c9:71:10:34:
                    42:b8:d2:8d:12:0c:f3:e1:8d:ca:d3:6e:83:43:52:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8E:58:34:8A:A0:C3:3F:FD:AB:87:44:12:48:C4:5F:C3:E9:C3:49
            X509v3 Authority Key Identifier:
                keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:40:93:41:c7:c4:de:d4:23:76:8b:8a:30:45:5d:50:67:ca:
         cb:fd:1d:49:1f:86:3c:a2:db:c4:13:38:7b:97:e5:b3:6d:8d:
         b8:39:31:79:e9:ef:f2:73:e3:6b:cb:49:3f:7f:16:f1:cb:be:
         f5:ad:a8:f6:2f:53:cd:a7:d9:81:35:86:b0:fe:ca:ce:df:36:
         5a:25:b5:31:f1:7f:ec:85:6a:b1:8d:09:e7:14:50:96:c1:59:
         65:d3:59:e5:d5:f2:00:88:04:57:40:1d:31:1e:b6:51:db:f1:
         66:e9:7f:72:da:1c:5e:02:48:cc:ba:c9:18:c2:20:21:21:bc:
         44:f6:11:20:a5:24:ec:18:79:03:66:c2:e0:36:b7:d9:c4:a7:
         f3:48:f5:26:37:bc:c5:8d:51:15:35:c1:b4:8e:36:75:63:d3:
         8a:93:1a:b0:49:9c:ac:7b:40:7f:47:a8:07:85:1f:79:e3:69:
         10:98:12:35:c0:82:02:b3:3b:25:9c:09:cf:d4:b8:5c:27:fe:
         ff:5a:fc:8d:b3:d1:9f:ce:ed:df:38:8d:2f:11:3d:fb:43:88:
         c8:51:95:98:24:bb:59:53:89:10:76:9d:cf:80:a5:13:a5:44:
         4a:0c:cf:23:7d:ff:bf:bb:16:be:94:97:b5:9c:d8:83:d1:f3:
         7f:d5:b9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----