Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File:                     rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier:          gxsSrArlDKmjlQRwvs3a8N7K7ggMNiN9hwzTp01SaAc=
Subject key identifier:   6E:94:68:5A:6F:57:1C:DD:F4:CB:20:2E:E4:F7:CE:1B:9F:30:C9:5A
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer:       /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial:       01962E99AEEDAB0C868C892F12DF66D4063D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number:          09B8
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: 0aya33gTiBHyBaS4ssnZN93Tn/Wu55msJ9dtzS0hksA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ae:ed:ab:0c:86:8c:89:2f:12:df:66:d4:06:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=6e94685a6f571cddf4cb202ee4f7ce1b9f30c95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:dc:83:4d:ec:c5:9c:80:e5:fa:8e:92:14:
                    76:25:19:79:63:66:a5:19:44:e3:e9:99:ff:0d:53:
                    c6:51:2e:73:a4:14:4e:74:06:da:ae:52:c6:d0:2c:
                    4d:78:51:f9:db:08:f6:9f:69:6d:ea:2f:97:92:2a:
                    83:e7:0a:b8:8b:5d:a6:eb:4f:ec:fa:85:69:98:8f:
                    4d:fb:f3:b0:eb:5c:34:2a:50:0f:0e:6c:f2:9e:2c:
                    5c:1b:79:cc:76:4b:a1:03:f7:c8:84:17:14:b1:50:
                    d8:c0:db:1e:ce:f8:b1:4e:c5:34:56:5a:5a:da:cc:
                    87:f0:a5:29:eb:a6:05:e1:4b:4c:7f:0a:5c:61:ed:
                    98:bd:67:46:26:30:c3:ee:9e:59:e6:8d:db:62:10:
                    18:0c:11:34:d9:1d:73:87:18:9c:15:b4:20:26:62:
                    6a:4c:d0:e8:10:39:46:ad:c8:ae:2d:4d:3c:2e:df:
                    1e:ee:f0:86:7c:b1:a1:cc:35:6f:c8:dc:26:25:38:
                    c6:e5:f6:9e:f2:ff:52:f6:28:7b:56:b0:21:09:b8:
                    6f:70:91:59:0b:1b:4f:bc:30:2a:61:5f:9c:58:7c:
                    39:9b:c3:b4:76:fe:be:4f:2d:e8:97:57:8c:37:92:
                    d4:d3:e2:14:fb:58:75:2c:1f:e4:0b:98:e5:78:9c:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:94:68:5A:6F:57:1C:DD:F4:CB:20:2E:E4:F7:CE:1B:9F:30:C9:5A
            X509v3 Authority Key Identifier:
                keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:93:48:21:92:19:f9:0c:a1:16:90:22:a7:ed:fd:0b:98:
         00:3e:d8:c2:e7:98:91:d2:b1:53:b8:08:ae:68:cb:52:f3:b9:
         57:a9:32:04:e7:9f:79:09:63:37:b3:5a:1c:ac:7f:61:ac:03:
         56:13:7c:84:29:d7:f6:43:e1:2e:d8:a8:b8:18:05:e1:dd:61:
         42:01:da:fb:87:17:42:66:a3:c0:8c:4e:cb:c8:aa:21:d6:0f:
         45:0b:c3:e6:04:3b:3b:78:55:c4:5e:8e:83:2b:e1:2a:1e:2a:
         fe:e6:18:a0:26:57:6c:fa:70:3a:de:ef:58:04:77:d8:d3:98:
         d4:14:f3:dc:e0:4a:39:af:96:1e:09:cf:42:cf:de:f0:97:65:
         36:92:e3:37:30:be:1e:48:0e:d1:2e:a9:d8:a5:55:e3:ee:0e:
         dd:fc:af:f0:43:1c:5a:4e:bf:3e:91:ca:fb:bd:8b:58:6f:91:
         17:3e:7d:35:73:e8:a8:55:fe:f7:be:df:c3:8c:9e:83:7b:cb:
         b8:8b:45:cf:f3:e7:63:b9:b5:ed:d3:14:a8:77:74:ee:e6:84:
         ac:44:d0:4e:6e:1a:25:01:3c:7b:bb:86:14:bb:9a:0b:70:1b:
         37:32:7b:e7:f9:23:24:58:69:08:ac:6b:d9:4c:6a:ff:da:61:
         35:78:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----