Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File:                     stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier:          wmW+xeGwxdYNbK3Eyfl6ktlsf8SW6Cjz/ILJsOsbe30=
Subject key identifier:   5E:B1:FB:4F:11:7D:B1:7C:75:D2:10:31:02:9D:A6:D5:D7:62:82:7C
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer:       /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial:       01962E990E4FFCC5B3E82FB528D5C7A6FA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number:          0DC3
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: 11WyeKnTABB9IVFBMmby/56hMGrGIK403DrOPciNBCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0e:4f:fc:c5:b3:e8:2f:b5:28:d5:c7:a6:fa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=5eb1fb4f117db17c75d21031029da6d5d762827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:7d:42:11:3b:1f:85:40:12:e3:33:52:5c:
                    d1:75:82:6c:9a:a7:20:93:d0:fa:00:61:4d:a2:55:
                    25:50:17:ce:b2:74:d1:6f:77:4a:9d:4b:04:9c:da:
                    4a:4e:21:cc:61:ae:25:1f:aa:48:d0:0c:d2:c9:7b:
                    42:22:7e:73:06:30:41:da:e9:25:5d:d4:9d:23:e5:
                    03:e4:2a:55:4a:04:6b:81:07:64:42:56:19:99:ae:
                    3f:40:3e:96:31:a0:76:ef:ee:9a:3a:ec:05:b0:7a:
                    7a:90:e8:6a:e4:f2:67:46:cd:83:c2:e5:88:64:8a:
                    24:f2:0c:02:86:a5:ec:5a:8a:24:27:88:d2:ed:ae:
                    2a:10:4a:27:e8:a9:dd:e1:81:a6:b3:e2:a8:e9:09:
                    13:e0:bf:c6:26:de:34:47:db:03:e5:68:10:ac:16:
                    81:f1:3d:9c:31:ac:fa:38:f3:e6:b7:06:b9:55:64:
                    7e:b6:56:3e:09:bf:95:28:3d:d2:cc:7b:08:aa:7e:
                    26:a8:94:a6:aa:9e:ef:dd:de:38:01:7a:fb:0b:2f:
                    b9:d2:58:d2:59:5d:de:48:9e:2e:0c:95:46:95:1b:
                    2e:c1:26:e4:81:b3:7c:a6:5f:1d:5a:ee:28:57:f0:
                    ab:4f:0e:f2:82:64:d0:65:92:4c:91:24:08:6f:ae:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B1:FB:4F:11:7D:B1:7C:75:D2:10:31:02:9D:A6:D5:D7:62:82:7C
            X509v3 Authority Key Identifier:
                keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:dc:c7:bc:8b:fc:75:49:06:37:59:3b:f2:55:02:a2:e3:e0:
         d3:84:72:30:60:1c:8b:9e:3e:8a:9d:ac:96:06:09:3a:55:c7:
         e4:5b:33:f8:f1:8a:bb:a4:2c:3d:ff:c5:52:29:d1:ca:f3:41:
         96:d9:77:5b:06:48:06:e0:c4:1d:53:8f:14:ba:a1:6f:ca:a6:
         dc:28:6e:bf:a5:fb:c2:35:31:cb:79:6a:4b:7b:9e:e4:98:df:
         53:5b:51:70:0a:6a:3e:e9:08:f4:cd:e1:e8:03:35:1f:95:53:
         39:c2:6c:1a:8a:e1:68:9f:16:c0:28:b6:dd:55:88:40:99:9c:
         4c:7a:73:a2:60:7d:32:82:03:21:ef:95:36:0a:d2:6c:12:07:
         d9:4c:ed:7a:75:d5:21:c8:08:43:f0:28:87:09:8b:7c:ea:ee:
         46:a9:5b:49:47:ca:33:f0:12:20:a6:08:4c:8f:ef:85:54:75:
         5f:14:54:44:f0:1c:07:4a:69:2b:10:e0:03:a0:86:66:04:2f:
         93:34:72:18:27:e0:27:1f:40:c1:82:63:69:a0:dc:9f:12:ee:
         5a:b1:43:37:45:13:6d:a0:f0:f9:47:be:8e:0a:05:af:5e:ac:
         5a:96:5b:2c:e9:24:56:92:92:43:1d:34:51:35:9f:6a:3d:51:
         9f:52:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----