Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
File:                     mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json)
Hash identifier:          cGX9u3+PP1Y/bddLG51hnZqxNPvHzQs6G3fyhrmY9DA=
Subject key identifier:   81:72:D5:15:A7:37:29:9F:5E:61:F1:99:DD:20:93:C7:7B:4D:1B:AC
Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
Certificate issuer:       /CN=9a351493af887e544dcc01a113b77528bc987bce
Certificate serial:       01962F07403C8E4A30CA4195A1A201F4175B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
Manifest number:          0E66
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: BtxgCTOUwnQuTh2SWuaGyh5HyVB3kFLx6NLths3Uzow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:3c:8e:4a:30:ca:41:95:a1:a2:01:f4:17:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=8172d515a737299f5e61f199dd2093c77b4d1bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:7c:79:28:f8:1c:9e:cb:61:b9:00:ce:f5:
                    a1:e4:eb:f0:9d:d3:c5:ca:25:de:1d:ca:d0:1e:c1:
                    87:84:f8:49:26:ea:ae:a1:66:22:f1:2c:21:57:1c:
                    c4:75:30:2e:67:ce:c8:cf:79:34:2f:4c:46:d8:ab:
                    12:ba:1d:6b:25:13:5f:ba:84:5b:77:ed:12:ce:94:
                    df:d4:0b:1c:b9:20:4b:93:c2:a8:97:71:e6:bf:b8:
                    75:33:3e:d0:38:e6:b9:83:5c:b1:9b:9f:3b:81:59:
                    43:1e:33:79:94:c3:6b:2f:fc:4c:79:69:9c:8b:e8:
                    f6:d0:4a:35:a3:9a:25:cb:e6:08:45:63:ea:f5:1f:
                    35:d5:54:d7:e7:9b:bd:bd:0f:c7:97:e0:43:22:c9:
                    b8:e3:6e:03:28:de:e9:33:2a:42:03:b9:03:48:19:
                    63:4f:5d:b9:11:7a:40:c8:c5:7b:d7:33:7e:8f:35:
                    2f:d0:c7:b9:ba:48:f3:f8:86:ae:33:df:7c:94:45:
                    d0:f2:76:9e:65:b6:8e:f9:3c:18:dc:23:cb:ab:8d:
                    3b:d6:c1:db:e1:f7:17:ce:e2:2a:fa:b6:e0:a4:43:
                    f9:45:f0:9f:bd:ae:d7:42:c9:3d:96:36:6a:78:25:
                    06:24:5a:ba:f8:4b:0f:b9:7d:ba:66:dc:c1:9b:da:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:72:D5:15:A7:37:29:9F:5E:61:F1:99:DD:20:93:C7:7B:4D:1B:AC
            X509v3 Authority Key Identifier:
                keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:26:53:8c:17:41:df:23:6d:f2:89:17:f3:44:48:ea:c5:
         7a:aa:f5:f3:83:f3:55:4f:0a:da:82:4f:2c:dd:56:a8:cf:b9:
         67:bb:56:83:1b:09:0f:79:33:18:f4:08:12:33:dc:2c:25:5b:
         9e:63:6e:9d:da:46:55:69:00:26:e4:60:56:d6:80:85:5b:88:
         29:d3:91:86:27:61:28:01:a3:ba:bc:83:be:4f:44:a5:57:ad:
         42:6d:18:af:ae:d8:98:54:0c:4d:31:b3:1d:3f:c7:9c:74:2f:
         f9:02:8e:3b:d8:fb:8f:fb:82:95:4b:a7:02:f4:37:bb:dd:ad:
         36:13:2c:7d:a4:34:52:35:5e:34:69:bd:ea:a1:1d:e1:0c:f7:
         72:ee:08:00:37:cb:ba:b4:97:52:79:40:f8:5f:91:c6:ea:8c:
         a5:cc:66:9f:b8:fa:93:a8:a7:a2:d7:cb:2c:9d:1e:27:25:ae:
         e3:ff:58:06:8f:a8:50:74:ca:21:a7:85:2e:e3:ea:b6:f3:7d:
         df:37:86:6e:6a:8b:c3:0d:5c:7c:33:93:3b:38:7f:49:ca:2f:
         7f:44:c4:89:eb:c4:98:15:1a:69:a7:e4:54:6e:33:1b:3e:ec:
         78:b4:10:fc:6f:50:40:b8:71:c3:bc:48:a8:30:c4:16:ce:8c:
         23:a0:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----