Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
File:                     XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json)
Hash identifier:          X9d1O7utm7AVJRfZEmmKco1ft1OkbpF/BTwQj0lrbok=
Subject key identifier:   EC:F2:00:D6:A1:EB:E8:7E:C5:E0:0B:B8:1E:23:07:5D:56:03:08:E6
Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Certificate issuer:       /CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Certificate serial:       01962F069B486F2C31CA9A399650C5783EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
Manifest number:          91
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: 3ARiRRhhxd7Hp6brGMY7L/ZuSJHk60FRmBlSLXzwcLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9b:48:6f:2c:31:ca:9a:39:96:50:c5:78:3e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=ecf200d6a1ebe87ec5e00bb81e23075d560308e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:87:7f:e0:6f:94:23:b7:1d:fc:b3:77:4c:
                    1e:b1:ab:7c:7a:65:0b:b0:90:69:0f:96:d4:a0:aa:
                    2e:46:eb:c4:c8:3c:56:26:3f:1c:9e:f5:f7:72:53:
                    32:7b:20:53:a7:ca:e4:99:ce:94:69:ea:01:35:df:
                    18:b5:13:d5:01:6e:2d:a8:b8:e6:ff:4f:19:8d:36:
                    58:cd:af:8a:b4:39:51:e6:5f:b1:71:70:87:15:02:
                    1e:e0:86:7a:cd:fe:cf:20:7d:47:7d:ae:c6:38:e8:
                    1d:18:93:a3:7f:04:72:33:41:29:f2:97:7d:19:ce:
                    57:9b:43:95:82:a1:c2:fa:88:f5:2b:9b:73:c1:ef:
                    3b:48:60:04:c1:f0:8c:08:19:d9:09:62:ec:54:c9:
                    b1:21:db:e8:eb:31:6d:4d:e3:a6:01:2f:a2:c0:ac:
                    37:19:c5:a1:4c:87:fc:7f:19:84:b6:3c:91:6c:61:
                    57:4a:59:e0:c8:6c:85:21:5f:56:b8:e0:e0:88:a9:
                    99:30:5d:2d:68:e0:ad:81:39:36:d9:6c:2f:2b:9e:
                    d4:66:d7:06:b8:70:66:58:a2:17:42:ab:32:6d:4f:
                    c3:d9:16:23:89:29:da:1e:69:19:1c:85:39:98:e6:
                    66:04:4d:10:19:a3:c6:2f:d7:2f:9e:3a:08:12:ec:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F2:00:D6:A1:EB:E8:7E:C5:E0:0B:B8:1E:23:07:5D:56:03:08:E6
            X509v3 Authority Key Identifier:
                keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:18:76:c5:fd:82:1b:5d:c2:a5:13:4f:aa:16:1a:4d:25:
         71:c9:4b:8c:bc:ec:cb:c9:f3:9b:c4:47:d9:fc:0f:0a:db:74:
         90:69:4b:38:ab:81:83:60:22:dd:9c:b9:91:ec:8f:e6:2f:b5:
         e6:1f:82:6c:d3:f7:02:03:d5:40:06:a2:a2:9b:22:6b:f6:fa:
         1a:b4:10:d0:e8:4b:7d:37:ab:e1:a3:f5:c2:5f:ac:d0:d9:05:
         63:97:6a:d1:cf:f6:f7:b8:0f:f2:c4:ac:54:78:39:c6:53:09:
         e3:e0:08:44:04:29:71:6b:d1:5c:a4:17:42:09:5e:aa:be:8c:
         cc:8d:96:7a:75:02:32:02:2e:42:af:8d:4a:eb:5b:26:62:94:
         25:77:61:6d:c6:60:db:c4:1f:4c:21:36:10:72:13:a0:b6:94:
         7d:af:88:f8:86:13:65:3c:fa:30:4e:a9:e8:69:28:66:e2:e3:
         c2:29:9d:be:ea:2f:e6:89:98:94:aa:92:f6:19:37:1a:02:bc:
         42:c7:bf:03:9b:54:9f:b8:9f:12:e6:0c:f9:2e:72:1c:9f:0d:
         94:65:68:73:24:d0:b0:e5:19:71:f6:85:ff:3c:3f:b5:24:0d:
         99:03:ca:56:d4:35:c5:80:31:aa:eb:da:ec:41:ec:0f:30:1d:
         c2:d8:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----