Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File:                     M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier:          ZTPQ9kEH7onoK7tJkIQ7W0WTyzoNVPvTOmDWa9cwsKA=
Subject key identifier:   F6:64:35:7F:98:4E:B6:32:E4:C6:CC:F4:F0:D0:03:01:B3:53:36:7E
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer:       /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial:       01962E9927D16F69E26FCB24DC0E20DD9E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number:          0A6A
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: g6/oS+sEwUrSz3vdhu2KIqk+LyMrvfReulN53wPHUj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:27:d1:6f:69:e2:6f:cb:24:dc:0e:20:dd:9e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=f664357f984eb632e4c6ccf4f0d00301b353367e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:34:a6:cb:04:0e:58:ea:97:fd:1c:5d:05:
                    87:8b:9d:52:e2:46:33:80:0b:7c:9f:9a:a4:4a:ef:
                    1d:51:8a:9b:aa:9a:59:79:40:fa:fd:f3:41:bf:6f:
                    6c:be:c7:d1:f9:1e:b5:3b:2a:b3:5b:bd:0d:c3:5b:
                    30:e3:3a:85:22:64:52:46:4b:08:2c:26:c8:5d:7c:
                    c7:cb:82:60:36:64:67:a9:a3:81:41:7b:d3:e9:05:
                    8d:ad:01:a2:38:63:5a:d7:66:71:71:7c:a0:82:e7:
                    f6:27:cb:2d:cc:b1:26:ea:d1:e7:58:a4:f7:ff:52:
                    5e:84:07:9c:9b:c4:c9:2d:30:d8:e4:84:55:ce:c0:
                    87:68:76:6e:a9:ed:c1:23:31:73:13:8a:87:c2:a6:
                    03:83:a3:20:44:dd:c0:8a:d4:35:f9:c0:87:77:6c:
                    a7:a1:97:6b:dc:e3:15:22:98:84:72:47:3d:0c:73:
                    92:65:c5:0d:ed:1f:4a:31:e4:e0:c9:db:19:3e:c3:
                    99:0c:c6:08:b1:36:59:29:33:8e:81:19:c2:4e:d4:
                    04:6a:1b:60:30:fe:5d:86:a7:6c:b7:94:40:57:e5:
                    aa:65:2b:1c:b2:23:51:76:f0:f3:16:28:5f:13:ef:
                    88:37:c8:34:43:68:59:2d:49:54:a6:58:8d:f9:c3:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:35:7F:98:4E:B6:32:E4:C6:CC:F4:F0:D0:03:01:B3:53:36:7E
            X509v3 Authority Key Identifier:
                keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cc:4e:a2:cb:5e:a1:31:82:06:1d:fd:d7:ac:dc:96:94:35:
         34:6f:2c:64:52:26:e5:e8:ad:57:bb:1d:40:69:2f:5e:9a:63:
         f0:6f:ee:02:7c:13:59:53:22:d7:94:c3:84:ba:b1:53:96:fc:
         de:7f:63:cb:74:c1:7d:75:96:b5:33:6d:54:3e:5d:90:32:8c:
         05:7d:31:74:ca:6c:83:43:d8:fe:27:9f:15:45:7c:4a:39:3b:
         6d:72:b3:39:ea:5d:e5:c7:8f:07:8c:93:59:f0:08:da:7b:42:
         2a:11:39:e9:6d:e2:1f:45:73:09:58:e2:26:b2:fb:58:88:03:
         a3:96:9b:e8:be:94:30:9d:d9:cc:00:b3:82:f6:ca:d5:83:b7:
         5f:e0:fa:f7:0e:16:64:5e:70:f2:c9:9d:30:3e:37:6a:a8:9b:
         ed:cc:c8:7e:89:94:1f:a7:a4:58:ba:71:21:03:2c:0d:57:9e:
         e4:5b:9d:5a:5e:c5:b9:57:3e:fa:9d:21:f4:9f:a9:6b:26:51:
         f6:a7:38:d6:d4:aa:8e:92:9a:82:55:eb:d6:ca:d1:fd:af:de:
         2a:01:07:a7:7a:38:8d:6d:40:c5:6e:64:08:e7:22:24:aa:dd:
         00:9f:01:34:e3:ee:00:d4:70:29:b0:ab:ba:3e:ea:71:17:67:
         97:2e:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----