Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File:                     dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier:          1zY2GELQqYJSXz0oaS4mLQhixBMgfDoBwEJc8na0MLk=
Subject key identifier:   33:1B:F2:93:D2:BB:CC:D2:07:4D:30:7B:46:E8:DC:51:48:6C:C1:10
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer:       /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial:       01962E9899F131B7C9D0442B674EDF2D12DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: OW6eT430ye06uLS1lxO258t/nuRPnUlQPkGQieh2P2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:99:f1:31:b7:c9:d0:44:2b:67:4e:df:2d:12:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=331bf293d2bbccd2074d307b46e8dc51486cc110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:a4:db:18:72:9c:d7:02:13:68:e4:e1:15:
                    0e:33:9e:a2:46:53:b2:96:8c:25:b1:61:e9:25:82:
                    69:32:5a:5f:cc:fd:82:f3:b5:36:ec:57:bb:36:98:
                    3e:88:03:3d:e2:2e:a8:56:e7:37:9f:88:9d:cd:7f:
                    01:8d:55:c2:f5:44:90:b9:18:9b:ec:ec:3e:37:49:
                    0b:88:90:a1:37:b6:ad:bf:6e:ba:c3:26:18:fc:c2:
                    08:52:e9:ee:a9:74:ba:5e:43:d8:ad:64:17:de:04:
                    47:2c:5d:3e:f7:a2:40:d7:f7:3b:67:fd:49:51:95:
                    c4:b2:64:95:29:9d:8c:bb:db:03:62:5f:18:a9:e9:
                    ce:cf:f8:83:26:bc:29:9e:9d:98:6b:2e:6f:2c:38:
                    db:1b:3e:19:8a:d9:31:4d:8d:6b:ed:66:f7:77:99:
                    3a:68:49:59:c6:1d:12:bf:22:a6:f5:e7:24:ee:d4:
                    81:34:d5:42:ec:5c:77:c9:e1:73:5b:4d:6e:0a:80:
                    10:cf:48:58:1e:b2:c0:cf:25:d2:61:a6:e9:04:28:
                    b3:3f:b7:e9:58:c0:0e:10:c3:8c:5e:f7:9c:ac:2f:
                    07:2c:d7:42:af:a5:fa:65:b5:fc:56:fc:e5:1a:52:
                    4e:be:c2:80:72:c4:ea:3c:a5:40:26:64:33:cb:a8:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:F2:93:D2:BB:CC:D2:07:4D:30:7B:46:E8:DC:51:48:6C:C1:10
            X509v3 Authority Key Identifier:
                keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0d:73:eb:f3:bb:e1:fb:b6:60:ce:9f:17:0c:23:99:bf:3a:
         49:25:56:36:f2:28:36:b6:aa:ac:62:ab:0e:a3:d5:9a:92:de:
         53:e3:30:1e:45:ea:a1:5c:ea:83:2a:d4:57:32:a9:66:4e:d4:
         27:88:8e:c9:26:16:c9:0b:e9:1f:b2:68:bc:c7:55:ad:72:9d:
         02:20:bb:93:0a:10:9a:90:0f:9c:9c:63:ca:14:0b:e6:04:a3:
         62:b3:33:d2:f3:cb:6f:55:c6:3d:25:94:fb:89:ad:91:a5:78:
         4b:96:ac:7d:07:f0:c4:df:5e:6c:52:d3:79:4d:5c:5e:39:bd:
         04:cf:ce:79:99:83:f4:b1:52:a9:d7:b2:0f:be:a5:76:c1:03:
         22:59:31:c8:5e:25:cc:1d:42:93:b8:de:9c:11:f1:06:4a:28:
         03:63:4e:ee:32:16:dc:eb:91:17:d9:92:0a:c2:8c:90:9a:1a:
         a5:a0:a3:43:b5:39:cf:96:41:a5:83:47:bb:81:34:ac:d2:33:
         65:ea:e4:39:34:f4:1d:3e:a4:ac:d3:a3:e4:23:dc:01:d2:b3:
         90:90:9d:41:b9:9b:2f:db:64:93:c4:8e:bf:a3:81:3d:b9:45:
         13:b7:3e:8b:ec:0b:3c:89:04:43:51:5a:12:78:de:09:af:87:
         98:e0:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----