Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File:                     C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier:          ZIECRwjI+hga3Jq1k2lK3CL8FpvjhSpxgZMWdLVlQBw=
Subject key identifier:   C6:F9:49:8F:01:60:40:0B:AF:DA:B9:C2:2E:83:33:FE:F9:57:BB:C0
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer:       /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial:       01962E99ADEA413589E10BC03C1B8B3C616A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: 4MmN3DAFXcjCaNf0j92iesNK9EFjZWfCyQl8sHcM83U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ad:ea:41:35:89:e1:0b:c0:3c:1b:8b:3c:61:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=c6f9498f0160400bafdab9c22e8333fef957bbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:c2:85:82:ad:7e:ba:8f:e1:a6:59:0d:48:
                    7e:44:d3:fd:24:2d:1e:53:d7:1f:11:56:5d:c8:11:
                    e9:5a:d0:00:9e:9c:56:7d:58:56:47:73:7a:1c:88:
                    ce:e2:8f:54:65:fa:d4:34:43:76:93:8d:59:84:b5:
                    98:b5:9b:3f:9a:83:02:e2:59:55:7b:d7:bd:83:39:
                    00:74:5b:ec:a5:ab:f8:9e:5a:11:08:bd:7f:c5:19:
                    33:2b:55:57:6f:c4:02:dd:98:8e:99:ca:33:a4:de:
                    4a:a3:0c:97:c6:2e:c9:e4:ce:40:87:de:f9:f7:76:
                    6e:ad:7a:99:41:0b:59:a0:5d:52:48:03:53:c2:cc:
                    46:07:fc:2b:f9:dd:5d:67:5c:31:4a:ec:62:99:4a:
                    36:51:6c:a3:9a:77:9a:73:95:15:52:fe:9e:9d:be:
                    a3:b5:ef:76:90:be:37:49:87:21:55:13:2d:86:2c:
                    6f:db:a4:de:53:aa:39:39:c0:87:96:66:79:c1:2b:
                    df:a3:e6:5f:2c:e5:5c:5b:6a:79:6a:30:f9:67:58:
                    2a:9c:1b:75:fe:d1:d6:22:b5:35:f2:66:fd:74:eb:
                    24:3b:b3:43:6b:61:6a:6d:48:90:5e:c0:68:57:63:
                    a7:05:c2:b3:64:61:1c:d5:4c:15:f4:d3:b0:cb:20:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:49:8F:01:60:40:0B:AF:DA:B9:C2:2E:83:33:FE:F9:57:BB:C0
            X509v3 Authority Key Identifier:
                keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:86:67:f1:dc:60:1d:7f:c6:37:28:98:bf:76:e1:af:5e:f9:
         1b:00:17:60:61:f5:f2:8e:f1:21:26:97:4b:a9:49:ef:05:50:
         74:d2:54:3e:5a:fa:f6:d6:c0:91:ba:c7:ed:e5:a2:66:22:b9:
         1f:d8:cd:bf:cf:23:9f:5c:55:13:fe:a8:4b:4e:ca:bd:d1:9d:
         c7:2b:a5:f3:fc:57:65:19:49:97:29:f5:5f:fa:fb:e3:df:4d:
         df:6f:a0:83:33:0e:75:54:d6:85:ac:1d:54:e6:94:c8:0f:84:
         05:de:1b:34:40:d9:9f:97:63:ad:d9:da:28:c1:68:f9:d9:bd:
         35:5c:d1:e0:6c:88:d7:d4:59:46:72:6a:1e:46:6b:c6:0b:49:
         24:da:c6:9f:d9:d0:de:44:66:53:e9:36:b4:df:82:7e:de:d7:
         4e:d1:67:fc:aa:29:e4:48:cd:e9:0e:c6:f9:4f:69:3f:e4:0f:
         cf:33:34:03:cf:f4:1d:05:46:88:9e:11:a6:f7:25:0d:99:03:
         74:51:a5:da:5a:4a:68:2a:6c:63:d4:6d:7c:d0:d6:a2:29:e4:
         a1:f4:29:cf:c7:d7:93:0d:1b:30:24:81:75:7a:6e:8e:40:d0:
         2d:ba:c9:b1:27:1b:2d:51:38:81:a5:fc:8a:4c:97:f8:ae:b0:
         a3:7a:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----