Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e9cbb7-c74b-4258-b46b-872d03291f7c/1/At0S_eNioF-23ZN5mYICnAE8Qcs.mft
File:                     At0S_eNioF-23ZN5mYICnAE8Qcs.mft (raw, json)
Hash identifier:          4GD+W2roLGNHEv4QONcfbQdQrGMGKvl+VzNjSBtwIiU=
Subject key identifier:   93:A9:67:5F:47:C7:33:A8:C6:2E:60:E5:FC:FD:A3:49:7F:B7:88:42
Authority key identifier: 02:DD:12:FD:E3:62:A0:5F:B6:DD:93:79:99:82:02:9C:01:3C:41:CB
Certificate issuer:       /CN=02dd12fde362a05fb6dd93799982029c013c41cb
Certificate serial:       019547B5CA5395E2AB3AC830FE3D4A0BFEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/At0S_eNioF-23ZN5mYICnAE8Qcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e9cbb7-c74b-4258-b46b-872d03291f7c/1/At0S_eNioF-23ZN5mYICnAE8Qcs.mft
Manifest number:          04D7
Signing time:             Thu 27 Feb 2025 14:00:50 +0000
Manifest this update:     Thu 27 Feb 2025 14:00:50 +0000
Manifest next update:     Fri 28 Feb 2025 14:00:50 +0000
Files and hashes:         1: At0S_eNioF-23ZN5mYICnAE8Qcs.crl (hash: yKbREtN9tF56HuPxLaE8AlVSZe1aLWbLYQRZMHibdHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:b5:ca:53:95:e2:ab:3a:c8:30:fe:3d:4a:0b:fe:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02dd12fde362a05fb6dd93799982029c013c41cb
        Validity
            Not Before: Feb 27 14:00:50 2025 GMT
            Not After : Feb 28 14:00:50 2025 GMT
        Subject: CN=93a9675f47c733a8c62e60e5fcfda3497fb78842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:15:5a:b9:06:d5:e8:34:39:5b:72:c9:de:
                    10:a8:77:64:de:04:c6:70:a5:82:79:fa:64:51:c3:
                    c0:00:19:2b:00:88:91:05:16:2c:d0:8e:6f:c1:27:
                    cf:e0:2f:f6:71:8c:28:de:c6:fd:f0:8a:9f:4e:48:
                    5c:78:f0:5f:7d:05:c3:cd:50:24:58:25:0d:87:9e:
                    62:a6:16:6b:e9:e0:36:25:5f:7a:67:ba:4b:04:75:
                    83:8a:93:40:5b:6f:54:a0:f9:b4:1f:20:08:7a:cd:
                    cf:dc:91:27:73:2f:c2:55:36:e7:50:9a:77:bf:cf:
                    75:b0:9c:d1:65:0a:c4:15:c6:b7:f0:59:f5:87:dd:
                    69:fa:cd:f8:8b:08:bd:f2:7e:53:99:28:72:14:55:
                    4d:56:f1:15:e2:e1:98:d2:ec:73:a6:b6:fc:8f:db:
                    e1:af:4c:98:ff:f7:a0:b9:66:86:2f:dd:03:9a:86:
                    00:41:63:8a:8a:62:1c:23:f7:1e:df:a6:2e:01:0f:
                    42:69:3c:ae:a5:09:a7:33:b8:11:fb:3b:ef:2f:9b:
                    d5:63:53:d1:79:16:a9:bf:04:c4:9d:4d:04:dd:71:
                    aa:50:08:52:e1:7e:a6:53:27:18:2a:76:e8:6e:cb:
                    dc:b1:69:8d:f3:e0:75:2c:55:70:9d:02:92:eb:6f:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:67:5F:47:C7:33:A8:C6:2E:60:E5:FC:FD:A3:49:7F:B7:88:42
            X509v3 Authority Key Identifier:
                keyid:02:DD:12:FD:E3:62:A0:5F:B6:DD:93:79:99:82:02:9C:01:3C:41:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At0S_eNioF-23ZN5mYICnAE8Qcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e9cbb7-c74b-4258-b46b-872d03291f7c/1/At0S_eNioF-23ZN5mYICnAE8Qcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e9cbb7-c74b-4258-b46b-872d03291f7c/1/At0S_eNioF-23ZN5mYICnAE8Qcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:a3:0d:9a:22:30:17:82:44:ac:cf:db:dc:24:3f:30:51:
         a0:3e:1c:d3:d3:21:01:5a:ad:d0:dc:b6:83:2b:0e:34:9e:80:
         0a:45:19:cd:1d:88:f4:78:50:85:11:42:f7:56:da:cf:6d:3c:
         ca:50:4d:86:93:97:44:3c:a0:bd:aa:6f:75:8e:b0:87:19:ce:
         ac:a1:7a:ae:d7:8f:c0:bc:e7:25:da:c6:e8:32:32:bf:fc:d3:
         2d:6f:85:ef:87:bc:d4:40:85:41:63:8c:84:03:03:72:0b:2c:
         67:08:bf:f2:9b:e8:72:c7:b5:85:f0:45:ef:ed:7b:8c:d0:05:
         1d:4a:64:20:b0:20:dd:4a:0c:0b:97:81:29:c9:2e:99:72:e3:
         ed:8b:94:c9:10:63:36:06:99:ac:6e:5f:c4:ee:f6:a3:10:d8:
         e3:af:ed:d0:5d:7b:2b:cf:6b:20:9a:ba:3e:d7:5a:3c:20:7e:
         fb:f9:39:ad:9b:ba:00:ee:0b:88:da:29:7f:45:53:38:a9:6a:
         09:98:61:0f:6e:db:c9:77:d4:87:b9:a2:36:3d:33:58:ad:b6:
         03:9f:f9:42:27:43:fb:49:19:25:48:74:87:ec:d4:12:d9:4f:
         52:4c:40:1b:e8:28:25:1c:51:49:a8:9f:26:d1:d2:89:a6:ae:
         9a:74:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----