Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File:                     aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier:          cJ9Y/AvP58Xb8XR6fuDnBLxYmcZT1iBTZ0d433GTCJs=
Subject key identifier:   56:3A:20:F7:CF:38:66:BA:24:C2:16:6D:11:4B:85:46:54:53:CE:DE
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer:       /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial:       01962E987FDD5A5DE586C76EFC666D0B21F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: nWVWJ5UEmEbV6loQwH1sr72nhg9FTJiM4yUb3hCHtWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:dd:5a:5d:e5:86:c7:6e:fc:66:6d:0b:21:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=563a20f7cf3866ba24c2166d114b85465453cede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:46:63:71:37:d6:d7:48:7e:c7:bb:84:cf:
                    38:42:e7:80:6a:09:fd:7b:2a:68:fc:d9:eb:d2:40:
                    04:59:ac:7d:60:a2:ea:c6:6f:96:71:60:1f:ed:98:
                    0c:c8:41:54:5a:bc:71:28:a9:53:0e:c2:a6:1b:ae:
                    7b:75:df:01:46:46:82:fe:38:cc:df:34:b7:63:06:
                    2d:b7:12:69:2d:da:ae:cc:60:4f:1a:ec:00:aa:08:
                    80:d1:54:cd:56:18:8d:34:c9:02:72:f5:e9:d1:9c:
                    6f:16:12:7e:d3:dc:bb:09:17:99:eb:c2:03:f5:11:
                    f8:93:85:ff:61:c5:82:4e:0b:4a:04:b2:7b:56:7d:
                    ef:3e:17:fb:80:e3:af:b9:99:a9:19:c9:9e:f9:81:
                    44:4c:82:29:13:1b:3e:1c:2f:13:cb:c4:68:c1:f3:
                    74:ed:64:1f:68:0b:d9:fe:bd:71:3f:47:53:de:72:
                    0e:f4:7b:b5:01:a4:32:25:b2:e3:f7:51:88:2f:ba:
                    aa:a2:6e:8f:5c:a2:16:bb:fc:bd:c0:bf:22:a5:d2:
                    91:6a:c0:8d:f2:43:80:ed:9c:7e:ab:39:58:4a:31:
                    e3:8b:4b:6d:d2:43:49:aa:85:fc:e8:83:36:28:76:
                    eb:fd:ae:88:41:1c:ae:0a:55:ec:c0:0b:7c:84:dc:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3A:20:F7:CF:38:66:BA:24:C2:16:6D:11:4B:85:46:54:53:CE:DE
            X509v3 Authority Key Identifier:
                keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4c:68:b0:a8:83:d8:78:23:fc:e4:27:60:9c:41:2c:c3:89:
         2e:9c:d3:99:2c:05:a6:d2:92:9b:84:00:36:88:bf:83:b9:f3:
         1e:5a:69:c4:ea:e6:bc:3d:78:3e:83:c8:26:bd:12:5b:0f:25:
         a4:71:e2:9e:89:19:0c:14:da:bb:e6:68:43:83:84:3d:14:c2:
         ce:76:7d:c6:4d:5d:c7:65:a9:d9:c1:de:e0:fb:0c:33:b0:26:
         99:55:92:c4:a7:89:76:29:11:c0:bd:60:2b:f9:80:a1:ea:0e:
         41:8a:e0:0e:8b:e9:de:61:aa:f9:80:5a:71:b7:ed:29:48:d0:
         68:9c:b7:0c:97:60:ec:a2:ba:b7:c2:5e:ac:67:69:1b:9d:8b:
         69:6b:d4:a1:01:99:c9:c0:73:9a:5b:ca:12:7e:59:f5:d1:43:
         d2:5c:a6:00:05:31:6a:e5:73:0a:88:b6:4c:59:18:44:34:95:
         f6:44:59:64:99:ab:41:1e:48:01:39:3a:67:d4:c7:c3:4c:59:
         34:fd:12:10:a4:cf:6d:f0:18:af:47:02:ae:b4:76:00:b0:a2:
         ac:13:b1:4c:cd:dd:ae:ec:bd:09:8b:94:db:ee:66:ea:e7:a7:
         db:e6:00:25:c2:ac:55:6c:16:e2:46:85:f4:56:5f:8a:80:9e:
         3a:e0:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----