Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File:                     02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier:          OqeyJct+Yon8P5Li9xu/KAzQT5yk14/UKPzTkDaIrMU=
Subject key identifier:   33:C9:BD:01:40:B0:8D:AC:51:68:C0:73:0C:B7:97:D8:54:A0:14:EA
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer:       /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial:       01962DF3AE2B9BF49C2E84D1D15DE91DDEDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: sE4jkqVFUOhynF0RngzU3jHb4iSou0cGEP+twPIogrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ae:2b:9b:f4:9c:2e:84:d1:d1:5d:e9:1d:de:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=33c9bd0140b08dac5168c0730cb797d854a014ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:ca:8e:df:52:0a:67:e5:ba:77:42:56:c0:
                    c1:3c:f2:a2:96:3d:ec:3b:dd:42:01:6c:2b:f4:1a:
                    cd:70:a0:93:ee:ae:8c:7a:bc:53:29:2e:79:18:0c:
                    e3:02:3c:f7:8b:6e:98:9e:0e:ce:3a:15:eb:42:0c:
                    3a:4a:96:bf:3b:0e:40:01:f8:ae:7e:2e:cb:d2:f7:
                    7b:19:a8:1f:0e:29:7e:54:13:4f:86:b4:6d:91:87:
                    16:71:dc:b2:d5:9e:ae:97:f1:9f:4c:28:93:b5:90:
                    99:f4:67:53:a0:32:6d:ca:19:0e:4a:40:65:14:e8:
                    18:ac:3c:53:91:25:8e:db:82:e9:61:60:f2:74:23:
                    71:2d:ea:fb:fe:81:55:3c:b1:99:2f:da:b0:a1:22:
                    b9:92:82:4c:64:c2:b0:9a:e1:32:36:42:a8:6a:1d:
                    4f:61:45:2c:e5:86:93:90:c1:f2:bb:e0:5f:5e:07:
                    67:47:44:f1:2b:45:9c:23:ad:1e:d0:e1:d2:18:ac:
                    47:b2:07:17:20:2b:6d:34:d2:45:c9:24:54:14:40:
                    6c:26:cc:a9:31:37:6f:09:c6:42:ea:7f:d1:42:03:
                    7b:e6:d8:1d:26:d8:31:c2:7d:4a:36:67:2e:c3:48:
                    80:d4:db:34:7d:94:bd:2c:fa:7b:ce:e7:61:82:d6:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C9:BD:01:40:B0:8D:AC:51:68:C0:73:0C:B7:97:D8:54:A0:14:EA
            X509v3 Authority Key Identifier:
                keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:37:28:ee:1c:8e:9c:07:51:85:31:b0:cc:b7:c0:a2:8a:
         65:0b:c6:78:a9:63:d1:af:5d:0b:3c:d0:15:74:10:33:f5:5c:
         5e:63:3e:12:1b:06:36:2a:ec:b4:5f:15:43:fe:e7:9d:0d:86:
         c5:f3:86:64:c8:5c:2e:9e:d8:ff:81:2f:08:e6:47:fb:ad:e2:
         be:94:c2:a9:3a:aa:7e:df:44:1e:14:cd:9b:c5:33:25:ad:e7:
         04:a4:85:6f:4c:e2:b6:10:e7:4b:49:9a:13:c7:70:91:6a:98:
         30:cb:e5:99:87:d4:ea:40:5e:41:a8:0a:12:de:4d:21:96:e2:
         9b:77:b2:6b:6e:c7:45:71:b7:a6:aa:a7:73:ae:0c:e3:1a:73:
         74:fc:96:c9:ce:95:d7:bf:8c:b1:a8:2c:1a:e0:51:72:82:19:
         f0:19:f0:00:46:57:75:74:bb:02:c4:2f:c4:2c:70:a5:cd:52:
         02:6e:16:db:8c:55:9c:74:7c:b8:44:cb:92:4d:26:7e:69:90:
         89:96:97:b5:b5:af:a1:2a:17:2c:bb:5e:a7:ad:19:5c:d3:b1:
         51:6b:e3:97:35:a7:91:cd:e2:2b:30:af:79:79:94:fb:98:5d:
         79:86:da:ce:7c:18:6a:4c:68:29:be:48:3c:c0:02:1f:2d:84:
         5f:4c:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----