Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File:                     RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier:          3KOWz37RADFRBkreo28xYGzbLaofYAw9cutpIUBicQ0=
Subject key identifier:   A5:5B:C3:69:14:A0:6A:D3:1F:A3:4E:61:7F:D9:68:69:A2:55:D9:4A
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer:       /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial:       01962E994FF490704C7804A33C7DCE46339D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: r2M90aHkkjOlQWNkyh4Ofp3b6YYMTsRZCtp9vEgG4i4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4f:f4:90:70:4c:78:04:a3:3c:7d:ce:46:33:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=a55bc36914a06ad31fa34e617fd96869a255d94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:f6:a6:bf:08:9e:b3:72:17:56:4c:2f:a2:
                    92:a1:5a:02:7f:16:08:2b:81:50:b3:45:20:ea:56:
                    ab:20:7c:0d:0e:7b:6a:7e:02:3b:8b:7d:a4:d3:99:
                    a0:53:cc:fa:d5:ab:ea:84:ad:f9:2a:50:9c:f9:83:
                    a8:52:fc:b8:7e:7d:e7:6b:35:66:ca:00:68:a7:30:
                    f5:f1:89:22:56:51:15:bf:7e:ad:36:dc:2a:7e:38:
                    69:03:d9:10:72:f7:d0:0d:10:a4:dc:5b:23:5c:07:
                    22:cf:9d:05:77:53:be:f6:1f:5c:22:a6:4a:b8:13:
                    18:1f:01:76:e1:75:35:c4:08:bf:fe:cb:53:7c:a0:
                    de:a2:23:8b:18:56:1c:76:44:df:98:09:83:af:1d:
                    68:e9:45:f3:79:fa:5e:17:05:04:0e:14:30:1c:5b:
                    37:95:10:e2:22:a9:c2:c6:78:c9:b7:ea:fc:29:f8:
                    9b:02:f9:a6:e0:6a:c8:1d:60:09:80:30:c2:6d:91:
                    95:a3:77:d6:9c:3e:71:ae:e3:a5:62:1e:eb:0c:d4:
                    bb:f0:13:a2:cd:41:a7:62:55:ab:89:16:7a:75:05:
                    5b:31:a4:51:83:59:ce:6f:d4:01:62:6c:45:1e:32:
                    02:3c:56:50:69:05:dc:35:2a:46:63:ec:b6:02:b5:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5B:C3:69:14:A0:6A:D3:1F:A3:4E:61:7F:D9:68:69:A2:55:D9:4A
            X509v3 Authority Key Identifier:
                keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:7b:55:b3:d2:77:2d:25:1f:ad:ec:fb:1f:36:1b:4b:9a:
         50:ad:0e:66:ee:15:a8:59:0b:08:07:74:97:52:e9:c0:68:19:
         51:ac:64:55:13:d4:fd:96:80:6a:a9:a2:8c:d9:1f:23:60:5a:
         2b:c9:36:20:87:29:2b:fb:d1:5e:be:0f:b9:c6:84:44:1b:0f:
         e4:f8:6e:db:d0:2e:00:06:47:06:a7:ea:ca:bc:f1:43:c2:d3:
         ad:c9:8e:fc:66:71:59:7d:97:a3:26:2d:7e:6b:c4:d1:d5:79:
         58:3d:e7:1a:b5:96:3b:22:bb:93:5d:17:c5:25:25:7a:ec:bb:
         8b:82:1e:15:d6:cc:10:80:56:3e:c2:22:98:51:a0:4c:44:cf:
         e2:6f:e9:01:97:df:14:01:f4:c8:be:d7:3a:60:f8:4a:1d:cf:
         9a:f0:8d:66:4f:88:91:3e:8a:45:36:53:dd:cc:32:8f:f0:49:
         59:2b:71:d8:b1:3d:7d:ac:22:09:89:21:2e:12:25:7e:de:52:
         7d:44:31:1b:e4:20:08:85:a7:04:c9:60:38:c2:77:48:cd:fd:
         fd:bb:c3:ea:3b:a6:25:7f:42:f4:88:85:00:af:37:64:f9:b4:
         df:d6:ea:06:7f:34:e0:4c:14:75:92:ed:9d:37:6a:94:9d:ea:
         0c:99:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----