Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File:                     b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier:          9si6m8Xbrcz/57DlaEQZBTmtt0aPsngzCp3twDGx80c=
Subject key identifier:   1B:FC:2A:B7:9E:F3:9D:C7:B0:1A:A7:C5:1B:4C:06:5A:08:7C:17:DC
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer:       /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial:       01962E9879E89908040EF431D921DE5795A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: m+Fsmv1Z63z9x6gW0JmZHCfvMkW9y8enhSp0W00Xsuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:e8:99:08:04:0e:f4:31:d9:21:de:57:95:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=1bfc2ab79ef39dc7b01aa7c51b4c065a087c17dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:a8:79:c4:68:97:f6:71:aa:73:11:e3:ee:
                    ab:3e:af:70:52:15:b2:18:ba:72:61:d8:e7:a1:f4:
                    0d:1e:0a:a3:6a:73:79:2c:88:82:1b:80:cd:f0:d3:
                    96:97:d4:33:ca:60:2e:e5:61:63:60:72:a4:a2:64:
                    02:dd:0c:d1:0c:58:6a:2c:f0:c5:07:9b:83:27:d0:
                    ab:7e:65:43:60:2c:71:df:51:6b:98:66:ac:26:51:
                    0f:40:e0:65:53:ac:22:af:dd:0c:a6:91:6f:4b:e7:
                    93:c9:f0:0f:fd:76:26:ff:7e:e5:8a:3b:ee:d8:68:
                    cc:95:e4:ab:bd:4c:11:93:05:e6:be:70:c0:e1:73:
                    8f:a6:85:25:2e:f6:24:91:d3:10:fc:bc:76:7e:52:
                    d2:a2:29:52:7d:ce:43:ba:bd:73:97:c3:f7:a3:e7:
                    4b:d8:5a:33:e0:71:74:19:e9:47:d8:28:92:93:9a:
                    ce:14:0c:a0:43:ee:24:ae:83:a3:5e:c4:77:67:97:
                    87:8c:7e:5a:fd:1a:2d:78:f2:73:f7:de:b8:93:09:
                    00:58:9d:1e:bb:e9:56:ae:9a:29:89:0d:45:ad:c9:
                    47:8b:fa:6c:5d:05:00:ea:49:3b:60:f3:b1:fe:29:
                    38:d0:86:7f:b4:b3:98:06:93:88:d2:97:8a:2e:26:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FC:2A:B7:9E:F3:9D:C7:B0:1A:A7:C5:1B:4C:06:5A:08:7C:17:DC
            X509v3 Authority Key Identifier:
                keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:73:e1:46:3d:2b:af:dd:ea:0f:1d:2d:79:39:00:29:1f:0a:
         93:98:4b:4a:cc:44:1b:20:52:34:99:77:2f:a1:54:64:62:83:
         d6:87:ef:06:37:c1:67:ad:28:53:a1:a8:f9:90:ef:ee:6e:a2:
         bd:0c:de:fc:8f:ea:11:46:6c:9c:de:27:0f:a9:03:69:f6:02:
         4c:7b:79:0e:e9:bc:2a:24:62:c2:5f:38:8f:f1:58:ed:ba:e6:
         62:45:a6:7e:db:c6:9e:53:27:19:d6:81:f9:94:68:81:61:8c:
         69:ab:a4:60:61:15:4a:85:6f:20:1a:a6:8d:79:aa:67:d9:e6:
         af:9d:e6:24:4f:33:cc:a8:f4:22:f9:03:62:f8:e2:2c:8e:51:
         5f:bf:80:a4:60:30:da:0a:a4:11:b8:e9:03:35:a5:a1:07:45:
         f6:eb:c0:72:27:6e:ad:76:58:a6:c0:94:3a:b7:47:55:63:78:
         12:7e:e4:63:bb:64:ee:95:ce:de:b2:ef:e9:a0:95:4b:92:cf:
         7a:ce:f0:ec:0b:98:7b:fe:15:d4:00:06:dc:6d:d8:13:21:63:
         1d:8e:92:5f:3a:22:bc:fa:0b:cc:50:b3:d3:37:fd:18:45:38:
         fb:98:f7:80:05:3c:5e:ec:1c:5a:c2:b5:07:dc:2d:4e:4c:92:
         c7:b6:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----