Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
File:                     0z3ubd_dv6ge6rxEHFPnAvklgWU.mft (raw, json)
Hash identifier:          3XDc30CG0BFa+5EC1dlBEzuIw0b3e/fwuXB3BjozPsk=
Subject key identifier:   6B:F3:66:D6:30:6C:B5:42:92:8B:37:CA:98:0D:2D:E9:70:44:53:D5
Authority key identifier: D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
Certificate issuer:       /CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Certificate serial:       01962F3D8463488B9F3299F737B40FED520F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
Manifest number:          12AC
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: 0z3ubd_dv6ge6rxEHFPnAvklgWU.crl (hash: ApYZp/Qd2LI/RIGZ73j7zS3eN9rpYQWgjViBhznRtN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:84:63:48:8b:9f:32:99:f7:37:b4:0f:ed:52:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=6bf366d6306cb542928b37ca980d2de9704453d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:06:8b:83:19:90:54:52:f6:ac:f1:dd:83:
                    35:26:2f:d8:32:ce:b9:1a:c7:78:04:c1:be:41:1f:
                    1f:97:9a:54:04:b3:c2:a0:51:4c:bd:3a:c8:1e:e7:
                    72:d6:ae:28:f2:fd:3f:30:a5:38:9c:08:d0:57:78:
                    b9:1b:cb:2e:42:8c:b5:b1:57:4b:a9:d6:82:33:f8:
                    d2:03:e1:3e:88:42:dd:11:8e:90:5e:3e:ad:01:3d:
                    84:9a:bc:d0:b1:51:2e:e6:f2:fb:30:83:4f:5e:e1:
                    c4:17:4a:b0:73:a4:58:bc:02:f4:66:08:e8:31:51:
                    c8:1d:70:cd:86:ec:dd:ca:45:fd:3f:e8:99:19:14:
                    f5:90:b1:ec:35:5b:52:63:ed:ab:72:5a:ae:a5:38:
                    7a:01:51:35:14:27:7b:4e:e2:41:62:65:46:b2:54:
                    ed:19:68:7d:7b:98:b3:3c:75:32:33:22:b5:c2:73:
                    db:17:f8:4d:99:9b:eb:33:c1:9e:40:3b:de:53:6c:
                    da:2f:50:6a:19:33:60:17:4a:c6:2d:ff:df:27:90:
                    0f:72:90:5c:8f:a2:3c:c1:af:54:4a:15:44:99:4e:
                    6d:00:65:ad:05:6c:05:e3:45:c8:e6:d1:fe:b4:c1:
                    87:65:b7:2a:ac:fb:52:0c:55:e8:5f:c2:a2:e7:15:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:66:D6:30:6C:B5:42:92:8B:37:CA:98:0D:2D:E9:70:44:53:D5
            X509v3 Authority Key Identifier:
                keyid:D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:78:0f:17:ca:06:e0:5a:cd:5a:8d:50:3c:db:fa:a4:3d:
         6c:26:a4:37:7d:b5:a0:3f:4d:2a:d3:58:29:cc:6e:69:69:bd:
         ab:47:91:b7:fc:90:d5:20:1c:b2:0b:18:25:ee:06:12:58:45:
         59:1a:2c:9e:ca:bc:a8:c5:85:ff:ae:fb:4d:ae:a7:70:83:51:
         d2:5a:f3:d5:46:ee:8a:8b:3f:70:33:40:de:cb:b6:a5:ff:bc:
         9e:f7:d9:0e:77:89:8c:76:b8:94:a5:89:eb:55:69:3c:89:82:
         3b:16:2f:2f:c0:27:49:d5:d0:8b:fa:fc:e0:a8:c6:31:2b:5b:
         af:74:a4:22:83:84:79:96:39:03:2c:28:44:b5:48:25:25:ba:
         c5:c3:da:d6:b7:9f:c0:9e:04:56:92:eb:e3:a1:6b:7c:29:f6:
         a1:0a:a8:57:ff:c2:0c:aa:85:f2:8d:e4:f7:a6:3d:c2:9b:99:
         e0:98:a0:5f:85:f8:31:16:cb:6a:bc:08:a1:08:00:c4:49:ab:
         d9:63:ab:ce:44:c4:94:46:70:c8:5d:7a:79:05:61:9c:51:b4:
         17:9e:19:46:cc:9c:8e:c6:1f:f0:ad:a0:8d:84:d0:20:fd:ec:
         c0:e5:94:86:fa:a0:e4:1d:64:76:7e:5f:4f:f7:5b:71:82:c7:
         c6:63:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----