Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft
File:                     EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft (raw, json)
Hash identifier:          e+KKkfQqCXgRwzwbJtsqeztN8Z1Efx8LC9k1AlxAMT0=
Subject key identifier:   6F:F2:35:D9:4F:DA:91:8E:F9:58:14:09:38:39:C4:1B:67:71:A7:83
Authority key identifier: 10:AD:EF:12:2B:1D:E4:BF:8E:B1:63:1E:AB:CA:74:1E:4F:52:96:E4
Certificate issuer:       /CN=10adef122b1de4bf8eb1631eabca741e4f5296e4
Certificate serial:       019547B5C56C275774A79842C388373F9376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EK3vEisd5L-OsWMeq8p0Hk9SluQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft
Manifest number:          0684
Signing time:             Thu 27 Feb 2025 14:00:49 +0000
Manifest this update:     Thu 27 Feb 2025 14:00:49 +0000
Manifest next update:     Fri 28 Feb 2025 14:00:49 +0000
Files and hashes:         1: EK3vEisd5L-OsWMeq8p0Hk9SluQ.crl (hash: BZEoenAyJfY43qM33hADoSJfSwc6LanHuPlg9cxT3Xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:b5:c5:6c:27:57:74:a7:98:42:c3:88:37:3f:93:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10adef122b1de4bf8eb1631eabca741e4f5296e4
        Validity
            Not Before: Feb 27 14:00:49 2025 GMT
            Not After : Feb 28 14:00:49 2025 GMT
        Subject: CN=6ff235d94fda918ef95814093839c41b6771a783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:0d:c6:84:8b:23:c9:c3:d5:b9:98:08:5e:
                    1e:b7:e6:67:17:ad:5b:93:62:c6:84:90:66:0a:a5:
                    0a:52:12:1e:a5:16:23:68:b3:39:f8:ef:33:2c:7a:
                    d9:95:d7:6b:3c:9e:ea:79:26:48:e3:29:8c:c5:49:
                    f7:70:f3:7d:a7:b1:55:71:52:d1:d7:d5:d7:ae:5e:
                    44:68:7f:5d:f9:d9:50:3a:87:2c:a4:27:73:0f:af:
                    24:b2:aa:42:52:a0:66:7f:72:65:b3:a5:59:e7:62:
                    a8:f2:24:bb:f3:9d:8a:9e:86:bb:75:38:aa:1c:5a:
                    ba:f1:9f:b2:03:23:09:b4:83:04:88:d2:69:2b:2d:
                    86:1a:c7:72:22:26:f6:a8:85:e9:cc:ac:5a:6f:50:
                    b9:36:87:66:0b:df:59:99:7d:05:63:7e:74:e3:96:
                    3e:2f:8f:4a:84:0a:a2:55:30:7d:34:c9:b6:d3:88:
                    3f:ea:28:e0:ea:5c:e5:d2:4a:ab:31:95:0e:15:1f:
                    7f:5b:7b:56:d0:58:6f:4b:26:2b:74:94:f8:6c:0d:
                    16:6d:5e:d9:55:47:26:3b:03:1a:ed:13:4d:f9:f9:
                    c9:e9:d4:ed:66:af:af:07:0d:1b:e5:cd:d5:7f:0d:
                    61:ef:1f:e1:ae:76:09:d7:62:fd:be:db:27:26:c6:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F2:35:D9:4F:DA:91:8E:F9:58:14:09:38:39:C4:1B:67:71:A7:83
            X509v3 Authority Key Identifier:
                keyid:10:AD:EF:12:2B:1D:E4:BF:8E:B1:63:1E:AB:CA:74:1E:4F:52:96:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK3vEisd5L-OsWMeq8p0Hk9SluQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/57b6b5-2909-4ee7-b46f-ca72472bdd87/1/EK3vEisd5L-OsWMeq8p0Hk9SluQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:03:54:33:f3:69:a4:a9:80:42:ce:d8:88:e4:51:42:18:3a:
         cc:fd:3b:47:df:e0:52:42:83:ff:de:08:c9:49:51:3c:ee:96:
         62:19:c5:88:35:8f:3a:86:6b:a6:4f:e9:cf:01:6b:f2:4f:9e:
         2a:df:31:9f:8b:93:cb:a2:46:0d:b2:47:f4:1a:33:4a:95:c4:
         bf:8a:2d:a3:79:0f:de:a0:5a:e2:80:72:56:53:27:f4:76:ea:
         b3:17:72:a5:2e:74:c4:ae:6e:2f:3f:96:b8:55:22:a8:dd:3d:
         4c:6a:80:ce:c9:95:57:03:dc:dc:1e:98:40:4d:5f:98:fa:40:
         ea:79:45:7c:f3:61:6b:3b:dd:a1:3b:21:54:26:6c:27:46:6a:
         f6:8c:fa:5d:c3:bc:7d:55:3c:62:00:12:88:ff:b4:d7:5f:cb:
         25:c5:17:65:69:51:01:b1:68:66:27:9e:31:64:9d:0e:8a:a8:
         31:d1:6d:11:a0:c2:f7:64:a3:fd:e3:99:65:d7:e2:9c:c8:07:
         4d:af:0d:a3:d0:4c:93:22:3c:4f:e4:ac:de:bf:91:99:c2:ff:
         6d:51:d2:b2:b4:8d:5a:86:55:d5:bc:1e:d5:4a:24:53:82:a7:
         1d:c5:42:f0:2f:96:48:f1:e2:d3:bd:df:73:b9:d0:66:d5:c9:
         d1:6d:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----