Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
File:                     bIlKsevTD7N84imjdNPjE52QUY8.mft (raw, json)
Hash identifier:          yMJfpcahz2u+6Dy00lQne3wZP91HwzkNGVSvAX29ufY=
Subject key identifier:   AF:BD:CC:40:D6:1D:FC:D4:2C:4C:07:B2:EA:D8:82:E8:B9:93:37:5F
Authority key identifier: 6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F
Certificate issuer:       /CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
Certificate serial:       01962F74956310064DFBA02C17B6732EF366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
Manifest number:          052A
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: bIlKsevTD7N84imjdNPjE52QUY8.crl (hash: aqqSlQOkTjxxKhd+uDQfMnRxyFn5DbsTZVrRbD7cf/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:63:10:06:4d:fb:a0:2c:17:b6:73:2e:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=afbdcc40d61dfcd42c4c07b2ead882e8b993375f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:ec:e7:9b:66:1b:58:1a:45:11:dd:96:bf:
                    66:29:d1:e5:58:48:59:d7:2f:0f:a6:d6:b5:e9:91:
                    d0:1d:0a:c1:6d:0f:22:5d:34:51:af:ee:8d:8a:c1:
                    5e:9a:84:d1:00:dc:d8:ff:09:19:71:0a:d0:8a:be:
                    79:a0:10:cb:f9:94:af:1d:22:95:b5:28:12:f6:4a:
                    a8:53:33:13:aa:90:39:c3:94:e2:2b:ac:07:2a:e4:
                    69:23:47:1c:42:89:d0:b6:24:cc:76:f1:37:f6:76:
                    77:28:24:89:2a:56:98:b5:32:98:6f:1f:24:1b:21:
                    d7:9b:94:53:0f:76:e0:25:38:32:73:ac:29:99:d3:
                    fe:28:e9:6d:ed:8e:67:57:46:e1:e0:9b:ee:90:e0:
                    30:39:c7:86:21:a3:42:7a:62:31:e0:0d:ab:9f:69:
                    2b:34:51:ed:90:0a:b8:28:68:8c:2d:06:12:3f:8f:
                    81:22:71:c9:22:28:b7:4b:46:21:29:73:18:62:d3:
                    8a:db:c0:e1:b3:06:b6:a8:fa:ed:00:f6:78:42:b2:
                    6a:98:5c:24:15:72:2d:fa:ac:71:88:ee:ee:d4:56:
                    41:74:e3:50:bc:b9:1a:98:53:4e:7e:e4:a7:0b:e0:
                    84:6e:30:01:d0:c3:1b:b1:99:3d:14:5b:e7:41:50:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BD:CC:40:D6:1D:FC:D4:2C:4C:07:B2:EA:D8:82:E8:B9:93:37:5F
            X509v3 Authority Key Identifier:
                keyid:6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:fe:f9:ec:01:82:e1:b2:fa:64:85:25:9a:bc:57:35:61:
         a0:79:32:5f:54:31:0b:c2:40:4c:c7:2c:31:50:67:e8:cf:85:
         21:57:d2:de:57:dd:bd:97:ea:29:0d:0e:c7:2c:7c:90:e9:3b:
         8c:cf:80:93:23:74:fc:59:0a:62:80:be:d8:17:e1:0f:ee:b4:
         58:cc:d5:08:05:01:97:de:14:fb:01:5f:cf:40:e7:d6:b2:67:
         04:90:26:18:67:b5:c0:c5:c7:1b:2e:d5:b1:86:e4:ea:eb:57:
         d8:32:6a:f1:9a:78:07:24:56:a4:ad:e8:5d:09:52:aa:01:96:
         55:a3:49:8f:22:73:52:e7:92:f2:4d:4e:63:63:fd:2e:e4:dd:
         b4:9d:0b:10:36:5d:e2:62:31:0f:31:b1:e4:46:1c:9a:07:b4:
         4f:39:02:ca:ad:0c:f1:87:c7:08:fb:32:cf:5c:96:51:eb:b4:
         dc:35:9f:bd:0b:05:18:ca:e1:e6:da:b5:64:79:e5:94:61:7d:
         b6:8a:7d:50:7b:18:7d:04:c4:59:4c:c3:0b:6b:67:6f:e3:3b:
         77:c9:24:fa:50:ca:43:91:6e:e0:b1:9b:75:eb:74:15:71:ac:
         10:eb:1a:72:93:c0:18:2c:fa:bb:2c:ab:92:25:74:ef:50:c6:
         8f:01:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----