Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          yE6+dOj/VxSGSh/1YXF0vJp3amrukURYfrF0lcuYb0A=
Subject key identifier:   0B:2C:E1:B9:AF:58:DA:59:1E:4D:9A:1E:44:56:5F:90:79:A8:69:4C
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       01962E61CE162BD3D0759C3EB635C7843ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0910
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: n6ZEVNHNVnpHfsZIfw3vlw+OVMrk9ePMAQYsbywNio8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ce:16:2b:d3:d0:75:9c:3e:b6:35:c7:84:3e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=0b2ce1b9af58da591e4d9a1e44565f9079a8694c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:5c:40:1d:2b:de:bb:c5:b5:5b:81:17:25:
                    6f:a9:3b:3d:a9:21:c8:a3:08:b2:55:cb:4b:7f:10:
                    39:d0:97:10:a2:71:42:9f:7a:96:f0:01:fa:99:50:
                    9c:b6:b4:99:14:b1:a6:32:70:d2:ba:8b:02:c3:95:
                    21:87:30:ef:ab:61:3f:62:63:0f:fc:07:dd:b5:cf:
                    23:2a:b8:be:e3:da:f4:a1:c7:ad:d2:ed:74:b2:f0:
                    f0:98:07:19:c3:57:df:fd:a8:7b:20:c2:3f:4f:1c:
                    a6:8e:e4:16:2b:3c:e0:af:ee:45:c0:b3:93:26:d3:
                    c3:cf:e7:cd:71:9a:94:31:a4:dc:48:33:61:b7:35:
                    9c:4e:28:23:7a:21:de:39:85:00:03:8b:1f:47:3c:
                    a1:27:d7:9b:c8:8d:3f:f9:05:3f:65:e0:d2:67:d3:
                    0e:e2:c4:b7:e7:42:36:ea:c3:0f:ed:77:00:7e:5f:
                    07:76:97:ca:51:03:74:fe:eb:2f:02:be:7d:79:7a:
                    25:e5:42:a8:c0:ed:3c:92:9a:99:60:4c:75:c5:e3:
                    fe:71:6a:92:dc:03:46:74:b0:23:36:0b:f7:73:08:
                    b9:84:03:62:eb:90:11:58:6f:6a:d6:35:fb:51:fe:
                    6d:eb:b6:21:ef:2f:43:e4:da:b9:db:6b:f5:3d:9a:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2C:E1:B9:AF:58:DA:59:1E:4D:9A:1E:44:56:5F:90:79:A8:69:4C
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:67:25:6f:f8:21:70:63:34:1a:a0:dd:17:f1:00:40:03:97:
         01:d9:15:08:d9:da:4d:45:6d:c6:b7:04:75:c0:60:ab:7f:65:
         f4:ed:41:44:c2:b1:fc:36:36:a2:ab:3f:ee:29:0a:25:ea:1e:
         2f:18:03:32:64:00:18:36:ca:1c:47:46:86:35:35:9f:97:57:
         69:37:03:22:d7:bf:01:c5:bf:65:6c:e7:0e:e0:92:1f:ee:d9:
         6a:96:af:c2:d1:69:da:4d:c8:19:d0:13:57:8d:5f:3e:b6:26:
         0f:65:28:2e:03:ca:f9:ed:d5:1b:9e:b1:67:c1:21:8d:58:50:
         b8:50:8c:da:09:57:86:6d:e5:db:bb:16:8a:7c:ec:6b:67:1f:
         14:8a:91:7b:67:f8:3e:91:26:6c:c4:8c:bc:0b:6a:04:b0:59:
         d1:08:87:36:0d:ed:2e:e5:43:4d:fb:56:f9:75:94:a7:7e:52:
         cc:ce:e8:17:17:4a:67:b1:4b:01:48:91:26:3a:c7:c3:ea:80:
         4d:af:d4:39:06:0e:7f:ca:e1:93:b5:f7:9b:e5:da:58:ff:dc:
         72:0f:16:ce:a4:3f:ff:ad:f4:30:9e:d5:77:5d:c3:00:21:9a:
         f5:13:46:71:cc:b3:38:60:8b:31:82:e7:08:c7:52:24:8c:5d:
         bb:7a:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----