Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File:                     mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier:          +qesAP3kkDofFAvtIBpmOh6mwBItEfQRXXEzKOxY6zo=
Subject key identifier:   6E:2A:64:40:DD:D0:44:5A:DE:09:0D:E9:F7:EF:5C:47:E0:E5:AA:97
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer:       /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial:       01962DF3E737F0B9C8B651FFD29ADED751FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: a0Qa6caadryFEOUez87Mr5xIoI4fLZQ0vl4jf8iL9PY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:37:f0:b9:c8:b6:51:ff:d2:9a:de:d7:51:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=6e2a6440ddd0445ade090de9f7ef5c47e0e5aa97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:1a:5a:ed:9a:60:3e:91:0a:03:3d:31:29:
                    69:e2:d2:c6:97:fb:3f:82:f8:7e:59:90:99:5c:77:
                    34:98:68:3f:0e:3c:96:34:05:99:87:24:b8:2c:a6:
                    d8:dd:56:ae:e1:99:f3:a1:14:4c:d8:68:02:be:66:
                    e9:8a:9c:9a:e2:55:08:59:f9:73:3a:b9:22:fe:cc:
                    2e:99:8b:a4:01:f2:65:c7:e3:0c:a5:15:fb:db:99:
                    0e:26:d1:31:2c:a4:20:d4:ca:06:c6:d8:f9:a7:0f:
                    b7:3f:97:b6:a5:de:40:b8:ea:c9:34:27:81:4e:36:
                    c5:aa:a2:8c:c2:b6:e6:f6:3f:ba:8f:36:21:bc:be:
                    c3:be:7e:20:fc:15:05:08:02:81:1d:9d:b3:59:bf:
                    10:e8:8e:32:fc:0d:cd:0d:6e:23:62:09:25:16:3a:
                    c8:df:b5:98:92:68:87:c7:b3:58:09:93:9f:fb:a3:
                    3b:fc:7c:25:fe:53:14:86:bf:8b:72:11:93:6e:0c:
                    0e:76:ca:98:4d:c4:5f:50:aa:a1:aa:6d:66:af:54:
                    16:ea:cd:90:d2:06:cd:e1:ac:d9:29:93:ef:d4:88:
                    53:0c:6c:c4:f2:fe:89:ee:ec:a5:67:a5:b6:0a:6e:
                    97:be:a9:1a:08:7c:4d:43:d6:a2:e3:36:bd:93:63:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2A:64:40:DD:D0:44:5A:DE:09:0D:E9:F7:EF:5C:47:E0:E5:AA:97
            X509v3 Authority Key Identifier:
                keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:7c:03:bf:1b:d5:a5:ed:19:14:4e:b7:06:9c:ed:6a:39:
         9c:a9:9e:24:77:cf:72:a2:79:19:a9:3a:17:7e:8f:0a:f8:3f:
         ff:55:dd:23:d0:ed:67:59:c5:46:0f:59:ff:05:b7:5e:63:dc:
         30:99:d6:f9:5e:ed:ab:d2:52:89:2f:8d:d4:c7:61:a2:98:4f:
         22:4a:07:1d:2d:98:5a:a7:a1:ab:55:1f:41:f2:4c:e6:bf:b8:
         f5:bc:fa:33:12:86:94:58:3a:cd:d8:5b:39:2e:9a:52:8a:01:
         1d:f6:23:e2:44:73:db:07:9e:3a:84:e4:02:32:3d:d0:a3:c0:
         a3:ad:f9:7f:00:e5:02:4c:12:94:34:c0:cd:0a:0e:f0:59:3d:
         e8:a5:a9:27:90:46:f6:82:75:47:9d:53:49:41:bd:80:2f:89:
         41:0f:fe:e4:76:fb:d7:22:88:66:52:52:f3:ad:30:a3:63:c9:
         09:e6:5e:97:2e:dd:0a:95:47:b8:78:ab:f9:46:f7:8e:33:75:
         68:f1:fe:31:7f:e2:2c:d6:ec:39:b1:09:82:f0:fb:d1:f8:e5:
         a8:75:e7:f0:31:a1:d8:60:b9:ea:14:b6:e9:a5:08:6b:ed:dc:
         2b:53:da:8d:f5:1d:1e:6c:d4:a4:1c:6b:81:c5:6f:57:9e:18:
         48:b5:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----