Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
File:                     q33wfyEEN2kvd-7DRpuaSCuW0ao.mft (raw, json)
Hash identifier:          1cCnhyNdeKYm7euBh9vWx8HaS5ad7lTtLDXq+64JcUA=
Subject key identifier:   AA:DB:AC:1D:3B:40:7E:24:5A:7F:CF:20:C8:AE:2C:D6:FD:E2:13:F0
Authority key identifier: AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA
Certificate issuer:       /CN=ab7df07f210437692f77eec3469b9a482b96d1aa
Certificate serial:       01962FAB14B010E5E0809ADE28DC43155158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
Manifest number:          047F
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: q33wfyEEN2kvd-7DRpuaSCuW0ao.crl (hash: 39PFnzKZhRymjAQZXfBapXnJC8Bvghb6byheZunPqGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:14:b0:10:e5:e0:80:9a:de:28:dc:43:15:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7df07f210437692f77eec3469b9a482b96d1aa
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=aadbac1d3b407e245a7fcf20c8ae2cd6fde213f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:da:01:43:d5:dd:35:c5:74:8a:a7:c2:69:
                    5c:60:44:8a:3e:a0:53:91:89:12:1f:5d:ef:ca:1d:
                    a9:ea:78:8f:08:b7:91:6a:33:a4:df:0a:4e:b5:b9:
                    8a:da:6d:79:29:f2:96:fe:7a:14:46:bb:fc:7f:ef:
                    a7:9b:62:a1:c1:e9:b7:9b:36:86:73:a5:c7:61:3f:
                    c7:6e:ef:18:89:49:f4:e1:fb:c0:b5:2d:91:14:3c:
                    dc:88:0d:9e:b9:c8:8f:3b:aa:28:b9:ce:c9:46:f8:
                    28:7c:dc:a6:4b:4a:5c:83:82:f3:11:97:81:19:28:
                    b1:a4:0d:d3:13:a2:3a:0d:71:5d:55:f3:8c:99:4b:
                    bf:89:89:90:42:41:90:52:bc:e8:dc:17:32:ca:68:
                    ec:f6:37:28:b4:d7:7f:62:b8:7a:6a:29:2e:6d:f5:
                    04:2d:60:f1:48:37:93:f6:e3:6f:48:e8:8c:9a:6c:
                    28:1d:ce:8e:5f:4e:1d:91:1d:d3:73:fb:ff:45:b4:
                    aa:18:c4:8e:c6:3d:92:67:76:fb:65:0e:c5:99:75:
                    8e:d4:4a:61:80:ec:ed:38:33:fb:c6:28:fa:5e:5d:
                    1d:b1:39:d9:2b:2f:04:d9:2d:8e:66:39:ee:25:c0:
                    3e:8a:6e:2a:4d:82:02:1d:be:9b:d0:05:e3:96:5e:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DB:AC:1D:3B:40:7E:24:5A:7F:CF:20:C8:AE:2C:D6:FD:E2:13:F0
            X509v3 Authority Key Identifier:
                keyid:AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:e3:e6:aa:6e:ad:de:3b:84:f1:92:7d:5f:08:e6:54:7b:
         fc:08:39:e2:10:10:3c:b9:fc:5a:ed:23:8e:9c:99:83:d7:e6:
         0d:90:47:25:c2:ef:a4:0c:d0:94:03:65:3c:d8:5e:b3:26:9a:
         15:23:13:fd:cd:a4:95:fb:64:a4:6c:ab:19:83:c0:67:32:bc:
         4e:33:c2:4f:cc:ea:58:51:b5:8a:3e:b4:a3:91:03:9c:1a:b4:
         74:11:e5:44:6a:0b:72:f6:51:4e:a4:f6:90:36:db:fd:a6:98:
         7b:b6:59:9d:ce:12:96:a1:64:22:ec:0e:86:a5:bf:39:7e:60:
         39:57:9f:f9:4f:c6:6b:c6:be:f6:a0:06:c8:7e:12:75:9e:85:
         24:b6:51:74:e7:b7:0b:79:17:0b:8f:49:02:af:ce:c9:31:6c:
         8d:19:23:1b:99:fd:4b:20:4a:c7:51:a2:b4:57:8b:50:1c:3f:
         8e:ca:18:45:de:43:c5:cb:94:78:db:6c:e7:fe:1a:7f:21:35:
         4f:9b:be:b6:99:f6:b6:87:4f:1e:95:16:d6:b9:ab:41:f8:65:
         fc:4f:8f:f7:60:fc:8c:d4:1d:0c:be:1f:df:73:9b:7a:f3:81:
         bd:7d:b6:d0:42:34:a8:f9:5f:21:20:3a:04:58:e0:cb:be:3b:
         c1:84:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----