Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File:                     tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier:          iX/p7SXSJ4uDlUbKyBUosS+2qautwNgn7DFY8FYrnwc=
Subject key identifier:   C6:94:34:DC:2A:A9:B1:23:75:A3:2B:58:C9:1F:86:42:7F:FA:2F:2E
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer:       /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial:       01962F06AE24F482E89BE89F0A1806E9DC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: T8kBxlVCmNmpAqOqcYEgrJQXuTuj8pI4wKqF9dcEFZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ae:24:f4:82:e8:9b:e8:9f:0a:18:06:e9:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=c69434dc2aa9b12375a32b58c91f86427ffa2f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:26:22:0d:fa:5a:93:ee:f4:8f:1f:c6:e0:
                    bd:ab:96:84:4c:ef:74:8a:4a:d3:15:ea:a1:d6:cc:
                    6e:e0:87:65:2d:1b:64:70:23:f0:0c:7d:8e:e7:cd:
                    99:6e:5e:e8:cf:da:2f:5a:68:08:55:2c:71:21:42:
                    b0:83:c2:44:be:ad:a3:65:e3:8c:20:ae:1b:84:b8:
                    cc:35:01:82:03:63:ea:cc:35:0f:83:90:ad:30:4a:
                    78:21:84:34:53:4f:31:77:35:ea:bd:8d:69:51:99:
                    a9:ba:59:f0:6a:fd:1c:20:17:c3:41:7b:d9:b0:74:
                    99:5d:1e:4a:8b:e3:38:e1:ce:c0:60:37:f8:88:5c:
                    56:e1:7c:6e:40:7f:34:c6:a4:45:22:95:d9:e7:ff:
                    e9:7d:a6:0d:77:9c:b3:49:31:f0:7c:43:ab:fa:d5:
                    be:81:60:fc:a2:c1:00:0f:59:12:ef:c2:4f:c8:11:
                    05:39:9e:ae:78:47:bb:f5:06:22:73:64:d0:71:b7:
                    68:37:88:e2:79:1b:80:87:77:60:a7:9a:eb:88:cd:
                    ef:2d:47:0d:ad:ae:5d:63:a3:27:c1:a6:56:98:04:
                    9f:9d:f1:32:61:62:36:2a:4e:7d:4a:c1:f8:5a:5e:
                    66:f3:31:cf:fe:3b:f0:a3:c2:c2:ba:95:73:5b:b2:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:94:34:DC:2A:A9:B1:23:75:A3:2B:58:C9:1F:86:42:7F:FA:2F:2E
            X509v3 Authority Key Identifier:
                keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7e:a0:d0:81:90:c3:e3:d7:50:65:f0:91:f8:ff:fe:f7:6e:
         79:dd:d1:55:58:4b:16:8f:69:43:39:53:b6:b4:ee:11:62:9f:
         75:ba:95:4c:67:89:4a:c5:5a:8c:68:94:9d:92:18:92:2e:c8:
         d5:9d:37:bb:d3:79:a7:39:a1:f9:f2:bf:14:bf:fa:2c:53:79:
         f8:a2:9e:73:38:4b:96:20:c8:41:23:71:3e:67:73:85:47:1a:
         3b:bb:3e:6d:a3:53:bd:2f:bc:34:f8:ec:75:42:d7:69:71:6b:
         eb:9d:db:90:06:70:7d:b0:4b:7d:0e:66:9a:96:5b:08:f1:d7:
         20:b3:91:f0:b7:fb:b1:0b:c5:3c:c1:f3:cc:90:a9:23:ed:95:
         03:0a:79:35:bd:bb:09:cb:bf:68:f8:ae:7e:5e:2d:38:27:8f:
         06:32:ad:6f:bf:c0:89:35:a9:f1:a3:02:56:4c:e2:3c:5b:f2:
         0d:b7:37:89:ab:de:c2:f6:10:45:75:e9:ca:57:ed:80:24:73:
         90:25:7b:38:b6:a6:3a:a0:84:42:57:ce:65:1f:ac:ad:62:c1:
         da:e9:d7:85:86:20:4d:67:f0:a6:54:8b:b2:37:08:df:fa:21:
         57:be:a3:a1:08:d0:18:99:61:25:63:b8:98:2e:a2:48:ed:31:
         bf:6c:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----