Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File:                     1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier:          7AaYZuv4IcHWoEerfwEPkxz7cfh4XOLLbmV48QL/tS8=
Subject key identifier:   CF:01:59:45:52:31:2F:8E:B3:74:8A:B9:61:86:C3:78:44:65:90:05
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer:       /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial:       01962F3DB6EAB32410C54EF39B19FFC405E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number:          0122
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: bwJ12WrmkIIptnd0lxZKwbwCztBrVFv3i+C4Fz5LnHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b6:ea:b3:24:10:c5:4e:f3:9b:19:ff:c4:05:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=cf01594552312f8eb3748ab96186c37844659005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:00:32:b6:2a:e0:b9:c9:2e:a6:68:f3:9d:
                    2f:fc:0d:57:8e:46:b0:df:88:e8:ac:e3:37:af:10:
                    33:f1:8e:52:6d:7f:a4:9e:62:2a:07:4a:45:0b:8e:
                    aa:df:e2:14:36:3a:47:6c:61:12:b1:2f:63:27:a2:
                    50:a0:ca:fa:d2:37:b0:4a:0e:c5:28:9e:fc:88:aa:
                    68:75:c3:2c:df:53:21:10:e2:45:48:e7:58:47:b6:
                    6f:ec:8d:09:35:1d:99:73:dd:40:c9:a8:a0:6b:2b:
                    d1:7a:75:8a:59:56:41:3a:85:ca:2c:2f:f3:03:dc:
                    05:10:ff:e9:7f:c9:03:a9:da:c2:f9:16:62:7a:68:
                    ac:5f:2b:4b:c6:08:76:a4:99:f7:bc:1a:1a:de:ea:
                    c8:c2:d4:c3:b5:6e:aa:6c:41:9d:23:fa:2f:b6:37:
                    ef:01:73:01:8e:ee:c8:68:70:d4:07:c7:1a:e1:db:
                    f5:40:c0:97:fc:0c:61:e2:ab:6e:78:ae:9b:c5:dd:
                    c0:c7:0b:17:f4:81:de:5e:92:85:64:cb:4f:7b:c7:
                    43:14:a5:5d:9f:2f:36:9a:93:6e:62:4f:46:0b:dc:
                    e5:db:43:a1:d9:f9:db:a0:97:d5:0e:2c:fe:c9:fd:
                    be:3c:9c:47:4f:9f:9f:40:fc:1c:47:52:bb:f8:61:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:01:59:45:52:31:2F:8E:B3:74:8A:B9:61:86:C3:78:44:65:90:05
            X509v3 Authority Key Identifier:
                keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:af:73:39:f5:fe:97:27:08:04:60:72:e8:00:ea:c7:67:
         99:2e:cf:a8:77:50:a9:c9:99:0a:ae:5d:2e:c2:c2:6d:8a:8f:
         3e:16:c8:ea:24:49:17:22:23:a3:0e:15:12:4c:a3:df:91:73:
         64:2f:99:cc:a7:92:62:4e:08:c8:ef:00:ce:0e:11:61:06:42:
         ee:21:ae:44:9f:b1:c1:c3:1e:c2:94:50:bd:61:98:4e:5b:cd:
         c2:5a:48:3d:fc:2e:f0:58:ae:0c:e2:ac:eb:6a:8a:b5:ff:e6:
         89:8f:6b:2b:4d:e2:31:9f:cc:99:b3:c1:89:08:7b:90:05:6b:
         f6:2f:9d:3a:a8:1d:ba:f4:a6:e5:e7:49:aa:25:ea:0f:e1:d6:
         ca:c3:9a:07:c5:30:24:7d:ea:5f:f3:f7:80:75:c7:a8:32:df:
         8f:99:04:34:1d:d6:34:57:3c:0e:54:33:32:d5:d1:86:97:03:
         ad:12:00:20:7e:19:09:18:e1:09:54:b0:96:0f:f6:e2:18:92:
         75:ec:41:9d:43:9c:f4:73:bc:be:72:9f:d3:bd:22:49:6f:fc:
         5b:02:a8:32:ba:c0:f9:27:6c:e8:bb:7c:cb:78:40:5b:cb:e8:
         36:42:00:69:65:e2:d6:72:3c:53:a9:50:ce:8e:c3:58:f5:34:
         17:7d:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----