Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
File:                     9oUCGMB4Hne2SXXDTBalwSm3nrk.mft (raw, json)
Hash identifier:          dlvRzCVIq3KTtkDQ6u0B5OARIWc0hSuY/6HDz/9SFf8=
Subject key identifier:   A6:50:74:F3:5C:50:E0:4F:82:C2:15:A6:6B:42:4B:2F:62:44:03:AA
Authority key identifier: F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
Certificate issuer:       /CN=f6850218c0781e77b64975c34c16a5c129b79eb9
Certificate serial:       01962E9981C545DD68B1A6B09236ECCD24AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
Manifest number:          03
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: 9oUCGMB4Hne2SXXDTBalwSm3nrk.crl (hash: erigafiqD1LzqpKzCU2xDlX1gjo2WcmrDfYVqUPJO/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:81:c5:45:dd:68:b1:a6:b0:92:36:ec:cd:24:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6850218c0781e77b64975c34c16a5c129b79eb9
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=a65074f35c50e04f82c215a66b424b2f624403aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:ed:c3:6f:6f:3a:45:6d:8b:5e:dd:5d:36:
                    b9:06:91:2c:33:b2:1e:f0:8e:f5:25:80:31:5d:b5:
                    29:5a:24:ee:f6:33:22:a3:9c:9f:60:9b:e4:4d:13:
                    d9:5f:d9:1a:3d:67:ba:f3:00:bc:82:91:fc:c5:02:
                    1a:46:3e:79:63:36:75:e2:90:4a:d5:25:12:9d:62:
                    e1:61:08:16:b0:26:64:55:54:51:38:7d:23:61:f0:
                    5c:3d:16:f1:b5:06:54:92:56:c4:a4:98:8c:ec:1a:
                    f8:2a:e5:0e:95:83:97:07:ef:4b:f0:70:ef:e7:a1:
                    46:d6:0d:b2:ef:c0:1c:91:f6:ef:fa:72:b4:c9:b6:
                    1b:49:78:d7:b6:ba:e0:ee:6a:59:28:e4:41:a8:1e:
                    04:e0:a8:b8:b9:19:50:77:60:0f:82:4e:16:87:01:
                    a9:32:a8:61:33:0c:57:ed:77:ba:46:2a:08:a5:27:
                    7d:53:d8:2d:45:ed:ad:03:70:89:ed:e3:9f:f3:17:
                    b9:bc:e8:f9:cd:02:49:cc:2f:05:ac:28:ca:97:68:
                    59:18:40:7e:5e:dd:77:19:b2:6c:27:ea:e8:79:7e:
                    46:3e:4c:8f:ec:6d:16:3a:35:b8:5d:7f:ac:08:a0:
                    04:12:d1:11:02:d0:6d:fb:fa:ab:6b:5a:59:1d:bc:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:50:74:F3:5C:50:E0:4F:82:C2:15:A6:6B:42:4B:2F:62:44:03:AA
            X509v3 Authority Key Identifier:
                keyid:F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:2a:a5:10:3c:96:29:eb:0f:84:d4:e0:34:fd:ed:7c:50:
         c1:b0:a3:2d:73:40:7c:4e:ee:f7:9d:ee:f6:d6:e4:54:5a:72:
         36:95:03:aa:04:7e:a1:e0:6b:e1:f7:30:9b:4c:32:c8:7f:f7:
         bb:13:85:80:e9:57:6d:f3:4f:08:06:da:ed:44:85:8e:30:b0:
         f1:f8:2e:b0:4c:b1:5e:49:b1:5c:d5:cb:23:17:1e:cc:f4:da:
         3f:a0:7d:ba:b0:8c:3f:df:55:5c:3a:71:14:82:66:c3:36:b2:
         8e:13:11:ea:5c:9b:39:fa:4c:88:e4:55:16:8f:f4:20:34:ff:
         30:a1:33:d3:5a:de:09:26:b8:e3:62:8f:8a:ec:12:2d:bf:6f:
         96:31:d3:e2:22:31:20:a6:bf:a1:a2:c6:ed:0f:8b:1f:12:18:
         88:eb:a8:b0:b2:22:c7:f1:68:30:1a:d3:43:6a:74:41:12:67:
         3d:a5:29:c8:4b:a1:e0:1d:4f:a9:28:4a:78:94:b0:2e:20:aa:
         23:97:fd:57:cf:75:6a:d7:99:50:35:4f:f5:a0:64:e0:74:25:
         23:c6:3a:7b:55:06:78:0c:cc:df:39:0e:eb:d9:42:a0:f6:e2:
         8c:81:33:13:1a:9a:fb:d8:77:47:94:92:67:60:3f:7d:f0:f0:
         3b:0a:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----