Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
File:                     mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json)
Hash identifier:          FM2byTlK9Ohx152tGiKaaFaYrFGRcDIQOiu7fk+4PSI=
Subject key identifier:   F0:57:A6:B9:B7:74:BB:FA:BA:F4:B4:15:81:E8:8A:CF:F4:E6:16:66
Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Certificate issuer:       /CN=9af571316c26288e0ed416b0137a1f648a7d2002
Certificate serial:       01962E6184E4DBB3F7326BFC525D5B12BD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
Manifest number:          2B
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: sTbadR7owN1bcHEvLFtiXwTmjhABXzC62Fq2lO3bblY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:e4:db:b3:f7:32:6b:fc:52:5d:5b:12:bd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=f057a6b9b774bbfabaf4b41581e88acff4e61666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:54:17:a5:39:94:0e:0a:53:8c:9a:46:ec:
                    75:48:b5:64:b4:6f:01:00:b0:7f:2c:69:91:9b:40:
                    b4:06:63:de:3b:c7:0a:2d:47:60:ed:60:a9:b5:54:
                    c0:20:a7:7d:c5:99:ab:6c:5b:16:d2:47:0e:44:18:
                    b2:d9:54:31:9c:46:0a:81:b5:8b:1d:32:8a:21:be:
                    14:8c:81:53:dd:59:0c:ba:cc:ad:f0:b9:83:f8:c8:
                    51:3a:86:d8:c0:53:e2:13:c7:e1:f6:ee:d4:15:10:
                    a0:a6:9f:78:49:8d:2d:c0:d8:34:24:4e:f7:0b:98:
                    d5:c7:1f:b2:9d:2b:8e:a4:0f:45:9d:78:cb:07:42:
                    d6:49:36:9d:71:1e:22:52:d6:84:d6:6f:f1:17:59:
                    7f:53:e8:66:0c:14:c0:98:b9:4f:4f:b0:a6:51:d1:
                    35:6c:fe:72:1f:13:15:b3:29:37:c9:29:76:97:9f:
                    d6:7e:36:87:01:b3:d1:59:3e:ae:fc:28:13:92:4b:
                    54:ec:cb:5f:e3:b9:94:d7:6b:9d:3e:c3:d6:34:55:
                    cd:0b:2d:cd:82:3c:e1:6c:8d:62:d7:b9:da:ab:9d:
                    30:d8:9d:6d:ae:b2:01:af:69:c9:ad:30:c6:6e:42:
                    d6:35:50:ca:4f:03:c5:cd:9d:ca:fb:3b:d1:55:65:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:57:A6:B9:B7:74:BB:FA:BA:F4:B4:15:81:E8:8A:CF:F4:E6:16:66
            X509v3 Authority Key Identifier:
                keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:de:3f:3d:60:20:70:6e:50:98:75:d5:b7:75:4a:56:28:09:
         c6:b9:40:39:c4:c3:6d:4f:39:69:28:06:32:8a:fb:05:74:ee:
         93:83:e9:8f:50:55:8d:5e:18:d7:c0:c8:b9:be:74:e2:1b:5b:
         9a:fe:1a:81:11:f0:5b:40:6c:28:fb:bd:6a:df:95:4e:c2:61:
         4a:40:de:1e:73:3a:57:60:7f:f4:24:59:6b:88:e5:ad:f6:00:
         c1:5a:2a:83:3f:70:18:cc:2d:c4:15:12:02:6c:9a:a3:1c:31:
         99:02:2e:c8:9e:37:b5:a3:7e:3f:74:3c:96:b8:2f:b5:0f:0a:
         e8:e6:17:27:b0:1f:c6:4c:31:cd:db:fb:f2:9e:c5:08:a2:b8:
         71:0b:9b:62:4e:a6:3e:fd:30:ae:72:e0:9d:fd:58:68:1c:3a:
         e3:5b:17:1a:85:5b:b7:1b:7c:6f:2d:10:bd:57:53:7d:a2:6b:
         36:54:7f:d2:4a:70:e6:8f:14:37:a3:1f:83:fb:9b:2d:53:f0:
         2b:ef:bd:7d:53:34:b5:83:65:cc:5b:34:07:23:9a:2c:46:b8:
         c2:a9:97:b9:be:6c:58:b5:6f:26:2b:ca:37:ad:53:72:fc:41:
         0c:88:86:9f:c7:72:4e:e2:5c:45:4e:37:31:4f:81:1c:2c:b4:
         98:24:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----