Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File:                     aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier:          Bml40KugHBlnkBn++pxeKSNkrJbmSTpbKrKMEbBmFhY=
Subject key identifier:   C2:15:51:A7:27:67:DF:B4:7A:92:6C:95:7A:CB:D7:24:42:59:DE:D4
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer:       /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial:       01962F072416B03CF6AEDDA58ED095E87B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number:          036C
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: UqOaj954wpjV5pDyaFHKjNjUlWPN2DfuFnt86aVa9vQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:24:16:b0:3c:f6:ae:dd:a5:8e:d0:95:e8:7b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=c21551a72767dfb47a926c957acbd7244259ded4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:9b:9f:43:db:3b:e4:b8:36:fd:5a:b6:98:
                    c7:b1:5d:c3:7f:e0:24:4e:bc:c4:dc:20:49:08:a9:
                    05:07:5e:c1:52:68:4a:38:a7:f7:cc:8b:0a:6d:12:
                    f4:bd:cf:80:9e:23:50:19:e2:3e:61:b1:42:a9:5b:
                    49:f2:03:01:21:1e:7e:3d:f1:b7:ca:e6:87:de:b5:
                    20:20:61:aa:89:ce:d0:8d:60:36:4c:df:58:52:6b:
                    87:e0:4d:7a:93:02:0f:10:f4:bc:11:4a:5e:5f:f6:
                    41:9b:e5:bb:80:8e:ca:8c:4e:68:6f:8f:2c:9d:3c:
                    83:f7:b3:27:0b:9c:e2:4c:72:99:cf:04:bf:4e:33:
                    f8:c0:3e:49:82:d6:aa:27:bb:05:b9:aa:32:d9:cf:
                    8a:e2:6b:ee:bb:d2:31:80:a9:93:ae:77:93:ad:f9:
                    ab:b7:be:10:f4:fa:8c:4b:dc:82:64:aa:42:5a:9d:
                    f5:48:e7:76:5f:d3:d8:38:52:ab:99:91:81:77:c2:
                    2e:b3:7d:e1:4e:28:30:ba:33:f2:fc:cb:b7:6f:2f:
                    48:87:41:09:9a:c5:52:c8:0f:45:ec:ea:69:8e:ce:
                    3e:80:28:a5:ab:63:b6:a4:bd:ac:b2:cf:97:4d:a8:
                    b1:d5:04:b1:72:da:d4:4b:5c:bb:b0:d4:8d:20:37:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:51:A7:27:67:DF:B4:7A:92:6C:95:7A:CB:D7:24:42:59:DE:D4
            X509v3 Authority Key Identifier:
                keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:57:64:c4:84:fa:f9:13:31:b7:54:b7:63:7a:48:fa:dc:
         3d:63:2c:e7:29:1a:45:96:dd:60:da:2b:fe:78:5e:a5:80:f0:
         24:76:a3:61:1e:46:e4:eb:7d:49:10:89:0f:c6:67:46:89:b3:
         2b:cc:e3:83:f0:82:ba:2e:a3:54:82:dc:2e:6e:39:9c:94:b9:
         a9:1a:0e:e3:f7:99:38:25:14:a6:bb:7a:29:16:fc:30:9f:36:
         c2:6f:91:69:ce:c1:74:e5:fa:48:e1:5f:77:48:89:d7:d3:bb:
         af:f3:44:4e:b7:21:5a:ae:d3:93:bc:35:04:40:47:f6:de:ee:
         26:1f:b4:b9:15:3f:37:ee:32:a1:3f:e6:4e:e5:f9:94:a9:39:
         1f:7f:eb:bf:5a:61:99:38:d7:de:df:26:c1:a4:27:b6:54:02:
         3e:d3:20:eb:6b:35:01:92:11:23:60:55:43:c8:30:ec:18:2c:
         99:0f:35:01:ea:c6:56:d0:20:b3:7b:b9:75:ba:ba:90:9e:73:
         f2:1e:2c:3f:e5:84:24:7c:32:de:ec:ed:90:8b:b5:8e:0e:f0:
         a4:e3:cb:da:ed:aa:d3:80:6e:ba:2c:7a:19:cd:57:6b:42:8c:
         91:ad:ea:42:15:0e:92:74:59:b0:46:a3:70:ae:68:b2:ac:b1:
         e4:24:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----