Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File:                     1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier:          lzeqySg/KcupZYJOKHXkQKLDBBlf8SFKVRzXwnTrpxs=
Subject key identifier:   81:36:B2:FE:2C:5B:FA:69:81:8A:B8:CD:EE:29:62:CA:4B:17:69:60
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer:       /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial:       01962E987787C5A0346C5463D69FDE479C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: iUhB+8qBHVrnzMRnUdrdh+d7NTQ0H7WfM2lv2siYhOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:77:87:c5:a0:34:6c:54:63:d6:9f:de:47:9c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=8136b2fe2c5bfa69818ab8cdee2962ca4b176960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:df:af:6c:9b:25:be:f8:cd:e4:2a:29:d1:
                    4c:52:22:1d:b8:a9:58:cb:a9:64:bb:89:39:3d:af:
                    69:16:a2:b5:a3:0c:66:3f:20:3c:0a:c6:54:1d:31:
                    1b:78:22:56:e3:08:96:1f:59:ce:0e:5b:0f:c8:09:
                    18:a6:bb:80:74:3f:ed:b2:87:03:f0:04:cc:4b:65:
                    81:d2:97:cc:c3:54:63:b1:df:7f:c9:cb:51:07:51:
                    45:14:26:22:2f:82:97:09:79:a8:b6:45:2d:f8:8f:
                    fc:fd:2a:50:28:d7:de:8f:32:36:93:c5:a9:9b:fa:
                    5c:74:f6:9e:d4:83:eb:ad:df:c5:08:0c:b2:6e:19:
                    79:ac:1c:ae:cf:0a:55:f2:8c:5b:ab:32:8c:be:ae:
                    ac:90:d9:70:b3:a7:55:84:f5:98:d9:b8:61:47:cb:
                    03:96:4a:1d:92:dd:8f:dc:fe:0d:36:9d:84:c9:ed:
                    8d:51:13:99:06:5a:13:65:27:fc:eb:30:93:3b:be:
                    92:5f:a5:d3:d0:86:f8:dc:4d:11:52:13:5b:70:0c:
                    4a:de:71:4e:c8:90:73:52:0a:bd:99:a7:a0:81:74:
                    8d:72:74:8b:e4:95:5b:09:9d:c4:26:70:7a:d4:5b:
                    6c:88:a0:b9:18:3d:80:af:0b:97:be:c0:0b:24:d9:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:B2:FE:2C:5B:FA:69:81:8A:B8:CD:EE:29:62:CA:4B:17:69:60
            X509v3 Authority Key Identifier:
                keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:29:20:db:83:26:51:aa:bc:89:39:d9:c2:e6:f0:1a:89:51:
         f7:85:3a:ce:00:fc:b5:0b:b0:06:cb:66:e0:94:98:e3:73:39:
         4d:7b:e2:34:29:bd:32:16:48:9f:f7:48:10:1f:90:a6:e3:d9:
         ce:42:b6:28:c3:5e:20:3e:f3:2f:25:d4:86:48:31:2b:9f:6c:
         e2:61:cd:41:a5:de:2a:b7:77:49:33:38:c1:18:61:ff:14:d0:
         7d:9b:7a:45:b5:37:95:c9:c9:83:de:bf:7a:23:3f:f3:7d:fb:
         77:2b:86:19:b5:89:d5:09:64:a4:7a:c1:28:cb:76:50:df:6e:
         dc:b6:40:b9:4e:f1:f6:ae:7b:4d:f4:63:4e:ad:ae:76:a1:3d:
         f6:fc:e2:f9:a1:80:40:ca:e1:4b:0f:08:8f:ce:9a:52:d7:30:
         b0:98:52:fc:0a:33:57:a6:4c:65:40:50:3a:29:b3:c1:dd:fb:
         ce:af:3f:f2:95:55:26:c4:66:91:4e:bf:42:25:67:37:4c:4a:
         05:97:24:26:54:e2:ba:78:36:25:06:69:ec:a7:31:29:95:86:
         5a:3d:a2:77:5a:a5:df:64:91:5c:59:21:82:8a:d5:0b:d5:d7:
         1e:10:b7:74:fe:e0:d3:71:b9:9a:40:8f:d0:ec:24:b5:d3:03:
         85:48:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----