Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File:                     B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier:          YOMkzXu0cJFWFhFgGr3BIxnL+U5JtvBVI6W0IzOdRDM=
Subject key identifier:   57:6E:23:55:22:82:CF:06:72:A9:1F:E7:2B:CB:25:B0:4A:7B:A4:EC
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer:       /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial:       01962E989671BB544E0ECDDC7691344C8830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: pRefdsgXTt18spqGH89Qjqp9CTvrkpMSNniGiiqwxPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:96:71:bb:54:4e:0e:cd:dc:76:91:34:4c:88:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=576e23552282cf0672a91fe72bcb25b04a7ba4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:80:a7:d3:27:db:cf:1e:c7:20:fc:5b:12:b0:
                    31:82:b3:db:07:5a:29:87:ae:26:56:4c:8e:93:3a:
                    63:78:98:51:e8:a2:e5:fc:07:70:12:37:89:be:2d:
                    61:d5:4c:fa:ec:07:f5:4b:ed:e3:c1:ff:91:3e:f6:
                    65:f4:69:58:fb:f9:80:7c:cf:21:cb:00:d6:a0:6e:
                    10:51:5a:45:b2:42:12:9f:89:21:e2:47:e3:bd:9b:
                    8a:ad:b4:55:cc:72:e9:76:3f:48:af:33:15:43:e5:
                    a8:ed:44:c8:e8:1e:37:0a:87:06:9f:b3:97:c0:41:
                    2a:77:2c:ec:86:37:09:a1:f7:9b:91:a6:b8:93:fa:
                    fb:ca:80:1f:9e:d9:7a:d6:a6:a4:08:54:fe:bd:87:
                    6b:23:f8:83:41:00:ca:4e:4c:e1:70:1f:49:6c:d4:
                    22:1c:f0:45:87:e2:e2:fb:21:a7:8f:39:bc:72:ff:
                    d9:8d:18:df:49:b4:f8:11:83:60:53:1f:95:4d:a3:
                    4b:05:69:37:53:ed:4a:46:8f:73:a5:4b:a8:5b:bd:
                    95:a7:b0:50:c4:8f:a9:15:53:e5:fb:d0:87:1e:9b:
                    bd:69:9e:86:9f:f7:c8:68:fb:50:99:b4:53:38:c6:
                    81:a3:14:31:ff:e7:b9:22:35:84:81:4e:fc:a8:21:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:23:55:22:82:CF:06:72:A9:1F:E7:2B:CB:25:B0:4A:7B:A4:EC
            X509v3 Authority Key Identifier:
                keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6f:63:cb:fe:53:f2:37:28:17:ba:ea:ab:a6:83:e2:83:2a:
         b2:0e:d9:1d:70:bd:54:65:d6:e2:ef:66:b5:21:65:85:9a:93:
         3f:e3:d2:34:a0:a8:ba:01:b3:ec:72:55:f2:e5:83:90:b4:49:
         7c:a8:63:18:62:8c:1b:71:2c:a2:02:cf:3d:a1:22:0f:4a:80:
         13:b2:45:86:e1:2a:3a:be:9c:29:c9:7a:9e:7f:bb:f1:59:87:
         32:65:dd:e2:ba:fa:5b:57:19:21:e1:9d:35:e8:c5:36:ab:45:
         13:20:bc:72:ea:fd:13:ac:f0:2a:f1:95:30:f6:88:3e:9f:8f:
         2c:7a:3d:7f:ba:5d:bb:59:62:02:fb:0e:53:4a:a2:95:4b:01:
         0c:0b:0e:9c:79:79:5a:a9:57:5a:14:e5:00:c2:09:6c:36:53:
         63:c2:15:0d:df:5d:7e:4e:22:e6:13:5b:08:25:e1:c6:2d:e9:
         61:92:af:10:38:e5:bc:b4:a6:7d:63:09:8e:80:8f:45:ea:82:
         67:23:3b:a7:57:9b:ad:d6:f7:19:e4:13:11:6d:e7:d8:bd:bb:
         72:f5:ab:fb:3e:53:43:79:15:7f:ed:b4:dc:ed:e3:e7:ea:ee:
         46:4b:77:f3:0f:10:f8:cf:f8:3e:93:e0:54:e0:6c:d2:5d:c2:
         eb:61:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----