Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File:                     mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier:          Sv/jIqteHMGZuEcUBezsqey1IFrHlF7zQxFPBOE1Ifc=
Subject key identifier:   29:C4:D8:62:32:25:D3:1E:6D:84:F4:CA:2A:ED:2D:25:2C:5B:54:42
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer:       /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial:       01962F0677A5CCEC909163774FBE000556E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number:          10E2
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: i3ISmlU2EtrSWobB4p5AYXzBMGVfOheeFOO/Yhng1EM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:77:a5:cc:ec:90:91:63:77:4f:be:00:05:56:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=29c4d8623225d31e6d84f4ca2aed2d252c5b5442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:4c:6f:ef:ad:8a:cc:99:10:67:44:c6:6a:
                    cf:d6:16:be:6c:44:b4:9c:b1:a6:57:9e:84:3e:f2:
                    28:a7:71:75:bd:c1:eb:bb:60:a5:6a:42:e3:32:b1:
                    f4:95:95:8b:27:a7:ae:42:ef:bb:2b:f1:a4:61:ec:
                    13:9c:1f:98:30:f2:6a:3e:ca:c8:63:54:ce:1d:f2:
                    5f:1f:52:ea:9c:9a:d1:1f:e3:61:ff:39:f1:8b:f9:
                    92:50:76:49:03:da:1f:f9:3d:6e:a5:7c:c8:5f:56:
                    d7:3e:ca:7c:96:33:5a:9f:28:2a:2c:59:26:f6:d6:
                    f2:ac:e2:3f:31:12:85:41:46:cf:58:04:a0:11:06:
                    7e:20:ca:c0:dc:0b:2f:b5:9a:24:39:83:b7:32:35:
                    60:5a:e7:51:e4:43:24:e0:25:8c:cf:e1:95:d7:b8:
                    5d:6c:8a:27:67:7b:4e:70:c3:b0:89:b0:be:e5:d2:
                    7f:e4:10:b8:b9:c3:4f:73:5a:fa:7b:81:a2:dc:7d:
                    bd:70:dd:2a:9e:2b:cd:c8:26:6d:50:67:79:45:76:
                    eb:de:d1:db:14:f3:a9:bd:73:15:45:5b:2c:6c:d2:
                    f2:81:bd:46:9c:5d:1a:99:4d:a2:fe:6e:e6:25:a1:
                    a5:ac:7e:cb:f7:96:be:0e:7d:5d:9f:9d:e3:2a:c5:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C4:D8:62:32:25:D3:1E:6D:84:F4:CA:2A:ED:2D:25:2C:5B:54:42
            X509v3 Authority Key Identifier:
                keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:ee:b4:26:1b:7e:27:00:cb:15:37:fc:f2:1f:77:ac:5b:
         26:d9:db:2b:c8:f3:08:f7:ef:56:e4:9f:33:64:8d:92:38:90:
         83:d5:70:6c:aa:3e:ed:eb:b1:a3:80:83:75:3e:e8:4b:2c:43:
         97:be:18:2a:e7:ad:12:f5:00:a3:9c:26:51:fa:95:75:0e:19:
         6e:35:fe:f4:61:c4:13:8d:44:f2:8d:b4:8b:df:4d:7b:c7:3e:
         99:98:8f:77:b0:4d:3b:cf:84:6b:1e:7d:06:61:6c:3c:15:79:
         9d:94:cf:a6:22:f0:c8:d7:9b:08:8a:43:84:7b:73:60:a7:25:
         d8:c0:a8:ae:7d:c1:a4:d5:53:28:8f:f1:a9:97:47:30:47:20:
         ac:35:a5:3c:eb:bd:c9:cd:28:22:15:bf:29:4d:c8:2b:b4:6d:
         c6:67:a1:72:24:bb:ca:47:66:68:4c:21:34:60:20:7e:a4:68:
         33:e3:73:63:3f:68:34:ba:53:35:ca:43:bd:3e:5c:d9:f8:34:
         e6:e1:bd:07:08:b1:3e:df:f2:ad:e8:09:3d:b1:d7:75:ae:65:
         a6:c4:6f:d3:6d:e2:7c:3a:0d:27:c3:55:b5:fb:d2:f6:d9:08:
         33:2f:63:ef:2d:c2:73:f8:2b:f7:1a:75:21:ec:73:98:da:0e:
         3f:8c:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----