Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7dbd11-1b22-404c-94d3-2b9d437fe902/1/bNmlABXpaTdlb8DKW21WXkWb02A.mft
File:                     bNmlABXpaTdlb8DKW21WXkWb02A.mft (raw, json)
Hash identifier:          nlo26g1f3cPn2xD9uCot4w8Qh4dZV6hEoMxLytgHo6U=
Subject key identifier:   01:07:A5:FA:C1:5E:7E:58:AD:B1:C8:63:19:35:5E:34:01:45:78:48
Authority key identifier: 6C:D9:A5:00:15:E9:69:37:65:6F:C0:CA:5B:6D:56:5E:45:9B:D3:60
Certificate issuer:       /CN=6cd9a50015e96937656fc0ca5b6d565e459bd360
Certificate serial:       01962E98F2C0D27B7F28369B586DAC050152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmlABXpaTdlb8DKW21WXkWb02A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/7dbd11-1b22-404c-94d3-2b9d437fe902/1/bNmlABXpaTdlb8DKW21WXkWb02A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: bNmlABXpaTdlb8DKW21WXkWb02A.crl (hash: u9feN9GwQSd9KdJtVEWGUk+lsCbYD7wFGY4BmRplNxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:c0:d2:7b:7f:28:36:9b:58:6d:ac:05:01:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd9a50015e96937656fc0ca5b6d565e459bd360
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=0107a5fac15e7e58adb1c86319355e3401457848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:2d:77:c2:db:a9:91:6b:d7:76:39:e9:22:
                    42:43:10:b4:34:38:42:ae:0c:b4:9b:ab:1e:48:d1:
                    6b:8b:55:a3:5b:ea:f7:00:3d:6f:f3:d2:ae:8c:e7:
                    15:ad:73:2a:9c:fe:85:0e:ed:dc:85:8e:df:e5:21:
                    71:19:df:e4:16:31:69:1f:fe:cc:c8:f4:43:fe:f1:
                    f6:cd:16:7b:ee:b8:8c:07:a9:8c:f7:76:bc:32:f1:
                    ba:48:d6:1b:5f:9a:06:90:88:55:85:0c:ec:05:68:
                    59:37:2d:72:1b:ca:c2:8b:dd:7a:c3:8c:ea:c1:61:
                    a6:9f:ed:ce:4c:d8:c8:ae:b9:56:83:50:af:0e:c1:
                    f5:02:e7:05:2d:98:ac:dc:d8:83:18:d5:42:93:cc:
                    3a:72:e7:33:6a:a2:4b:18:f8:a7:76:fc:f8:aa:69:
                    26:7a:cc:89:23:8f:42:89:45:50:08:1a:ae:65:a1:
                    d8:b2:15:9a:23:02:02:e5:08:18:57:20:67:96:65:
                    e1:0c:3d:33:62:bd:d8:9a:a4:2c:db:99:80:fe:3b:
                    24:86:66:d8:fc:2b:c6:4b:3b:75:29:a6:1b:29:ed:
                    53:ae:6c:f0:51:20:34:d7:58:8e:31:41:02:88:78:
                    0b:a7:c1:37:59:8a:a8:18:aa:e2:85:21:3b:33:c2:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:07:A5:FA:C1:5E:7E:58:AD:B1:C8:63:19:35:5E:34:01:45:78:48
            X509v3 Authority Key Identifier:
                keyid:6C:D9:A5:00:15:E9:69:37:65:6F:C0:CA:5B:6D:56:5E:45:9B:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmlABXpaTdlb8DKW21WXkWb02A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7dbd11-1b22-404c-94d3-2b9d437fe902/1/bNmlABXpaTdlb8DKW21WXkWb02A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7dbd11-1b22-404c-94d3-2b9d437fe902/1/bNmlABXpaTdlb8DKW21WXkWb02A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:c1:10:32:8e:6e:dd:e6:53:bb:a6:37:31:4e:2f:7b:96:
         64:70:3f:b2:3a:23:2e:5b:b5:0c:7f:5e:89:12:55:e1:b0:25:
         49:00:2c:b8:f7:52:1a:10:bc:1c:eb:bb:2f:ed:e9:1d:fc:2b:
         6a:d5:21:64:81:ec:c8:07:6e:01:c4:79:ac:c2:0c:c1:f8:0a:
         52:22:22:da:86:48:f4:84:e1:c2:c4:eb:62:07:4a:22:70:b9:
         72:21:a7:98:51:d1:9b:f5:62:30:62:23:56:87:10:ae:7d:ec:
         8f:a7:4a:05:d2:d6:bb:90:30:0a:db:64:3d:c1:ad:7e:18:ef:
         15:f5:c4:f7:ee:50:b7:a0:7f:72:9f:e1:0c:cb:47:d3:76:e7:
         5d:a8:ea:79:3e:00:ba:8d:0e:ce:d5:84:ba:78:60:47:13:52:
         73:13:1c:99:4b:9b:43:2f:c3:27:78:e0:ec:46:59:a0:44:48:
         4b:15:48:4c:c0:ca:b8:37:18:cb:d1:c1:76:bd:b3:bb:3d:20:
         ca:ee:32:22:e5:ae:8f:60:f0:ee:fb:3a:3a:ea:fa:ac:89:dd:
         3a:f4:94:a5:4b:30:ce:fa:35:2c:d6:9e:66:91:1b:95:60:05:
         27:7b:f6:76:23:d8:b1:02:d5:59:b7:9d:6e:d6:7f:ec:85:20:
         28:09:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----