Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File:                     DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier:          vAXMpK2I3oLXngagNEVv6cyO8mNiraW1wJg7FMuOMf8=
Subject key identifier:   3D:6F:9F:83:F2:65:50:84:EA:5A:25:01:D5:BC:CF:C7:19:2E:DF:51
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer:       /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial:       01962F06DD1B157127787C3B74F8BC39A252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: ZDU0KJ2nVVnc9etF9U+2GOB9v95ZvV+rAw4R8FH2R4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:1b:15:71:27:78:7c:3b:74:f8:bc:39:a2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=3d6f9f83f2655084ea5a2501d5bccfc7192edf51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:37:0d:7b:33:5a:e1:6d:68:a3:db:d6:56:
                    96:1e:17:1f:4d:c6:d0:d4:32:ca:52:70:26:f0:b3:
                    f4:2e:e7:34:0c:5f:9f:0b:7c:17:0e:af:e1:0d:c3:
                    93:a1:b4:5e:61:b7:ae:1f:78:1a:fb:9b:84:74:db:
                    39:52:57:b9:fe:73:d6:ea:6f:85:90:62:6c:4b:c9:
                    79:ed:ac:22:e1:7b:6b:31:f2:19:de:68:e5:7c:73:
                    5f:58:dd:26:f6:d5:e5:c2:02:ed:8f:b4:ab:bc:3f:
                    6e:01:16:8a:cf:d6:c3:cc:2e:12:9d:29:94:fe:7f:
                    06:2e:49:4e:97:86:c4:e2:c0:4b:0f:f6:8a:42:99:
                    b1:a7:e8:a8:89:ed:48:4e:c9:6e:fb:67:99:ff:4f:
                    a9:51:62:68:36:65:37:ce:b3:68:98:e5:af:b9:12:
                    da:9b:80:b8:e8:07:da:82:a0:87:54:07:62:46:71:
                    f3:69:a0:46:95:42:f8:5d:fd:a5:02:d7:7b:64:24:
                    2f:d2:33:0d:05:4b:f3:71:9f:2d:e5:e7:9a:16:e2:
                    fd:65:6e:f8:3d:46:65:c1:89:79:65:09:bf:c3:98:
                    f1:5f:b2:be:ad:8e:02:c0:87:29:1e:aa:9e:49:44:
                    83:f0:48:49:28:ae:93:35:7e:ca:dd:34:e6:a1:13:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6F:9F:83:F2:65:50:84:EA:5A:25:01:D5:BC:CF:C7:19:2E:DF:51
            X509v3 Authority Key Identifier:
                keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:13:5e:3a:db:c0:02:d6:64:00:14:96:c0:8d:f7:ca:9c:
         bd:40:b6:04:17:85:79:1f:11:48:81:aa:6c:e0:25:e6:87:ce:
         a4:06:b3:6b:8f:93:1a:68:98:9c:e7:10:50:fb:32:35:cf:81:
         fa:b2:95:29:c7:b9:52:ac:da:4c:af:51:04:e9:2e:02:dd:01:
         f5:31:e3:c6:a8:43:cb:d3:aa:f5:4a:54:35:61:8f:06:a3:df:
         b6:9a:ee:7b:4f:41:e3:fb:ac:d2:09:d7:c0:7b:eb:4a:d0:e0:
         2c:f8:95:f3:47:34:80:5f:f7:92:b3:8a:dc:74:ba:0f:7e:d9:
         14:6a:94:4a:70:a3:bb:68:24:06:ff:d2:d8:d6:ba:eb:71:90:
         64:38:c6:e6:c0:75:cf:d4:c0:45:c4:8d:c7:01:a0:15:14:1a:
         da:b5:5a:be:f0:42:d8:15:9a:8f:36:4d:98:f7:23:da:45:ba:
         a6:4c:bc:4c:87:91:44:08:d8:8f:ff:c5:ac:3b:85:ad:bd:18:
         79:b2:64:9c:b9:3b:6f:6f:f2:41:4e:46:7f:3e:55:91:c8:2d:
         73:f9:10:41:05:79:1c:a5:38:87:1b:35:c4:c3:1d:ac:8e:ec:
         9f:c1:07:a1:6b:ed:78:68:fb:ac:7a:93:ea:48:96:21:1c:09:
         35:c3:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----