Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
File:                     nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft (raw, json)
Hash identifier:          ydOOIv2fUueqJSLg9Pyt83zG2Ia8Q71McCePXdBmyJY=
Subject key identifier:   41:7E:1E:A1:03:72:49:02:14:16:B5:FD:F2:B0:F1:06:05:17:F0:01
Authority key identifier: 9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
Certificate issuer:       /CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
Certificate serial:       01962F3D2ECB6F990A9D65F721BEBAE8A530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl (hash: PF55DJkLHlnL2lZTA3UgKQEsIkk52TmoKn4HcQ8qsyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2e:cb:6f:99:0a:9d:65:f7:21:be:ba:e8:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=417e1ea1037249021416b5fdf2b0f1060517f001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:dc:53:09:ab:5d:37:d7:a8:cf:d3:51:e7:36:
                    31:a7:e9:44:57:d5:92:40:72:e3:0f:31:76:0c:4b:
                    73:0f:57:9e:c0:e6:81:d1:cb:bf:e2:22:1f:75:41:
                    0f:3d:ac:8d:f8:55:b3:b7:85:94:98:da:ff:c7:67:
                    ac:60:ca:9f:86:42:68:52:d6:ef:a6:db:0d:a1:64:
                    76:e6:53:4f:13:11:4a:00:fb:2c:4f:e6:3c:7c:3e:
                    8c:2e:65:4f:65:92:6c:f7:9d:7e:6d:69:e4:68:a3:
                    c9:1a:03:86:3b:80:e0:45:8d:34:1a:d6:b0:24:99:
                    2d:5b:98:3e:ab:3a:bd:1f:f5:70:4b:4c:3e:e7:bf:
                    0e:e9:e2:e5:a7:d1:15:23:c5:9d:b8:b9:07:d2:c0:
                    f7:8e:8d:7d:43:b4:0e:52:2b:1d:6a:5a:a0:dd:ef:
                    87:af:c1:e0:29:47:83:94:79:91:be:fc:e6:94:6e:
                    71:8d:b6:b1:71:73:33:ec:78:05:ba:32:ee:69:54:
                    89:5c:76:b3:39:50:23:c4:7e:77:fe:e5:5c:45:2e:
                    35:86:34:6b:42:38:de:79:b4:2f:ab:d1:c1:92:f9:
                    46:8e:4b:79:b4:80:4b:09:fb:f5:ec:b1:f1:9e:49:
                    8b:46:a6:14:da:7c:65:7e:71:b4:3f:98:fc:de:b3:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:1E:A1:03:72:49:02:14:16:B5:FD:F2:B0:F1:06:05:17:F0:01
            X509v3 Authority Key Identifier:
                keyid:9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:dc:ca:46:ae:94:bc:be:e7:92:58:37:be:35:3a:30:38:
         a1:04:22:0e:56:9f:1a:33:13:47:ac:0c:70:80:3f:a0:b0:cc:
         df:f3:8c:2b:e0:f6:1f:6e:2b:84:09:b1:46:73:f5:89:b3:22:
         fb:6d:6b:90:bb:fc:91:ab:0e:65:20:b3:6c:4f:f4:b1:a1:8a:
         6f:7b:6f:a4:47:a1:39:5f:ea:58:fc:dd:d5:5c:e5:b8:e2:39:
         29:3d:a0:fb:7b:96:f8:6e:a9:d5:94:b4:e4:0d:b3:68:ab:2e:
         a9:8d:48:e4:8e:2e:90:18:92:fc:e6:20:21:9a:08:68:22:04:
         ee:dd:2e:16:c0:0e:c6:99:05:58:fb:14:87:64:e7:5e:f2:b7:
         9d:0e:c3:af:33:37:d8:97:05:15:ac:12:83:ea:52:84:30:35:
         b8:ac:26:ae:c9:a4:64:89:7a:c1:e3:c5:8a:27:cd:6b:03:05:
         fc:ab:ae:59:34:c2:7e:84:f0:61:b4:35:ec:79:28:dc:24:41:
         ff:4c:83:19:b0:cb:d4:2f:85:f8:b1:4c:3e:28:57:79:20:4f:
         4c:59:ee:c3:74:0f:e4:c0:ff:f5:4a:b6:2c:95:2b:df:d6:cb:
         89:d0:b0:aa:34:66:6f:5e:12:1d:60:ba:ae:2f:9c:f2:89:73:
         0c:47:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----