Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
File:                     XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft (raw, json)
Hash identifier:          J0bmjLsNmmntKUZqexopxf/+7YyyqhSXQfL3uJf/9Ds=
Subject key identifier:   67:EB:AF:F9:BF:96:BF:BF:B2:05:E6:ED:7E:F6:DE:44:DE:B4:A0:60
Authority key identifier: 5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
Certificate issuer:       /CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Certificate serial:       01962F743EB97985965C5902711AF9644B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
Manifest number:          0ABF
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl (hash: MeQ4EOm3lzGP51ovhKRRiJBVO02wsabzgM0jpXQ9viI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3e:b9:79:85:96:5c:59:02:71:1a:f9:64:4b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=67ebaff9bf96bfbfb205e6ed7ef6de44deb4a060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:30:5d:89:6b:fa:4a:ac:82:a4:ce:91:6c:
                    b9:70:ba:9f:08:5b:18:28:f8:dd:94:ed:d1:16:30:
                    f8:7a:7a:03:93:8b:c9:b1:b3:89:26:3a:f8:f3:16:
                    9c:cd:06:ae:b2:eb:98:f4:f5:64:78:4b:8a:c2:62:
                    fb:97:05:05:b2:8b:55:5f:08:98:97:c0:20:a1:ca:
                    05:7d:8e:b6:42:a8:3c:86:fd:41:7d:87:f5:f9:df:
                    61:0e:56:2a:af:2f:ff:8f:59:16:3b:27:ad:16:22:
                    7a:82:d4:81:43:69:26:52:e3:1f:61:d1:03:eb:61:
                    96:1f:a6:4c:17:39:fa:4f:b3:1c:f3:e4:d1:66:40:
                    4a:68:09:e5:ae:bb:12:1e:82:29:ce:c3:1c:9d:92:
                    26:3a:4b:9b:82:fe:4e:c3:d5:86:4b:64:49:16:4b:
                    e8:ff:db:cb:e3:f7:47:9a:18:ab:3b:8e:4b:93:ed:
                    39:b5:aa:bc:c3:63:32:9f:10:ad:b8:af:6b:49:ec:
                    07:52:45:7b:41:8d:95:81:cd:84:6a:db:b4:25:4e:
                    d7:1f:34:1e:f5:2e:f5:cf:ba:b3:92:6e:69:b1:3b:
                    1d:ee:2b:5d:76:1f:d5:4d:4a:4a:df:98:ac:8c:98:
                    99:a9:3d:99:c8:4d:81:b2:e0:33:02:e5:b2:0c:53:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EB:AF:F9:BF:96:BF:BF:B2:05:E6:ED:7E:F6:DE:44:DE:B4:A0:60
            X509v3 Authority Key Identifier:
                keyid:5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9c:85:0b:4d:1e:99:35:1c:c5:c2:af:7d:23:be:8b:dc:6d:
         3b:57:6b:66:03:5f:85:8c:a2:77:82:bc:f6:ca:6a:93:ca:40:
         9b:6e:1d:60:93:6a:b6:56:c8:97:02:d3:f0:c7:ae:c4:56:42:
         3d:59:5c:01:6c:ca:37:5c:6f:e2:ac:33:fe:2e:fd:cb:b5:cc:
         d4:17:74:ad:f2:1e:f0:27:c8:9e:38:b7:14:70:7a:cb:87:55:
         c8:5d:f4:c5:14:7c:a1:a5:3c:ec:0a:68:64:8e:4b:c9:66:f3:
         25:a4:5e:75:22:04:e5:41:19:35:ed:9c:84:16:e4:97:cb:03:
         1a:ea:65:20:6e:b5:c4:f8:73:1d:2b:ac:3f:6e:06:f2:0b:1b:
         f3:18:5b:4e:98:78:f9:7c:b3:c1:61:f5:f1:83:01:bf:51:ab:
         dd:12:18:47:9a:27:a2:c9:e0:0b:93:f5:3a:e7:ba:96:31:04:
         e4:57:ac:a1:93:1a:39:f8:1f:e1:87:a4:01:64:09:da:b6:4e:
         11:5f:4b:a0:38:5f:5d:40:65:4e:19:63:29:a6:c1:58:d9:1c:
         b9:7e:4c:86:51:9b:fd:6b:70:2b:f5:79:e3:08:61:54:fd:a7:
         b7:82:8a:0b:2d:b8:49:38:b6:15:8b:ab:ec:ac:49:59:d2:de:
         34:9b:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----