Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File:                     r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier:          oQdJdJixXv9v/Gvz1BCcB5DpwhU4LOJ6wxFURzmolXY=
Subject key identifier:   27:53:EB:F2:DA:ED:A7:0C:16:4C:E9:F7:20:43:E4:B5:22:DB:AE:E7
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer:       /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial:       01962DF45706F506CC047103BC0577D292E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number:          0A3F
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: zwSFFWweQQHjAD3MXNZi9roz5WLWf0SWTOpp7UozhFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:57:06:f5:06:cc:04:71:03:bc:05:77:d2:92:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=2753ebf2daeda70c164ce9f72043e4b522dbaee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:62:0d:ba:06:8c:9f:76:27:4d:93:b3:c7:
                    88:66:a8:7f:9a:58:2b:43:a9:b9:a5:b1:58:17:7e:
                    68:1f:4a:a1:9e:95:04:2c:e8:0a:d8:7c:03:02:03:
                    11:be:ef:d0:c5:02:6f:05:89:73:f3:eb:58:d3:06:
                    1f:ce:e0:38:3b:c1:bb:32:41:61:59:e6:84:05:08:
                    04:9a:b1:55:ce:91:ee:78:a2:e2:56:66:ec:aa:b9:
                    2f:1c:ca:0a:11:48:86:a7:8f:3a:99:bd:8d:ed:41:
                    6a:02:a6:0d:5d:77:bc:33:fb:07:13:0e:f2:2b:16:
                    c9:d9:f7:be:cc:36:3f:36:c4:da:67:cc:82:b7:c7:
                    6b:20:43:c3:f7:e7:a0:32:87:e0:1d:7f:1e:61:e4:
                    04:21:94:d7:e7:61:57:52:a0:65:43:2d:79:ee:69:
                    60:a1:81:7a:34:2e:f3:01:d3:ab:9b:d1:d0:88:ca:
                    d8:ae:bb:98:7c:50:6f:d5:ee:35:ad:a8:13:5c:6e:
                    7e:b7:a6:67:ba:bc:e9:53:25:3e:60:15:1c:d3:b8:
                    8f:dd:f9:f1:71:d9:05:7c:fe:a2:6b:c0:c0:5b:fc:
                    2d:50:04:50:ae:a3:a8:9c:0c:f7:c7:1e:77:19:80:
                    23:57:7f:26:72:65:0f:68:94:41:83:0d:97:40:b6:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:53:EB:F2:DA:ED:A7:0C:16:4C:E9:F7:20:43:E4:B5:22:DB:AE:E7
            X509v3 Authority Key Identifier:
                keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6a:97:98:37:68:9c:b9:5d:84:28:18:95:be:79:7d:cc:0a:
         45:c3:d2:e7:6b:c3:24:90:71:ad:ff:aa:c7:a8:67:eb:39:44:
         9e:75:3b:bb:a5:88:3b:d1:0e:9f:7d:6a:0b:9a:3f:12:3c:a0:
         cb:d8:9f:e4:56:4f:28:61:47:4d:d6:30:d9:53:79:06:c8:3d:
         df:0d:d0:03:37:6b:3e:5e:1f:45:71:3d:c7:89:61:e7:1b:70:
         5a:9e:75:f9:be:ea:60:f4:ff:b2:c6:e9:50:18:9b:a5:67:44:
         26:07:a9:ba:f6:23:3e:3a:8d:93:8d:91:f8:2e:c0:fe:61:ec:
         f8:00:c6:9b:36:91:2a:ca:77:b7:68:4b:91:19:70:0b:21:7b:
         17:f3:9f:91:5f:ef:81:e6:9a:11:cc:21:12:db:78:42:d2:7f:
         ae:48:6e:27:48:b5:f5:a4:63:a7:fe:74:ff:3b:c2:1c:cf:4e:
         7e:71:cd:82:4e:f1:3a:e4:ea:3c:02:2d:d0:61:a5:1d:96:02:
         58:c4:5f:43:77:77:80:c3:88:9a:14:31:c0:a5:05:61:19:24:
         b1:9d:32:13:72:80:e9:79:7e:76:9b:a0:cd:ed:25:8d:74:58:
         54:21:87:9e:30:bf:6e:b1:08:9c:d0:f1:81:c0:0c:a0:4f:70:
         d3:e4:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----