Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File:                     CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier:          T1I0t95kMHf5EJffquHXBbIb/AJ4t3uVwNsp+HAep3o=
Subject key identifier:   C6:8A:EF:1A:84:2E:1A:5B:E1:B9:88:45:09:6C:67:E9:A5:81:C4:B4
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer:       /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial:       01962F06D6F1BB78AB7C2DB6A1FB062011B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number:          066F
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: ANxDbZ2mfE6sBCsatOHoAEXo1ObdFw0WK+OXhiMpGy8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:f1:bb:78:ab:7c:2d:b6:a1:fb:06:20:11:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=c68aef1a842e1a5be1b98845096c67e9a581c4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:22:49:0a:3b:02:bc:57:86:83:75:93:73:
                    7b:53:8a:f5:a6:b4:67:a0:b5:6d:f7:33:e9:30:7f:
                    33:71:31:7c:67:e8:8a:02:94:6d:b2:6b:08:0c:a9:
                    e2:32:b0:6e:b6:f9:db:d9:8b:fa:d5:55:7f:8a:3c:
                    94:eb:eb:18:24:a3:a2:35:05:e0:9d:4d:70:f7:d3:
                    6a:47:cd:4f:97:34:7d:36:d7:d8:9f:75:4d:dc:20:
                    41:a4:7f:1e:ab:08:44:7b:02:fa:7e:92:9f:56:20:
                    1e:aa:06:90:9a:a5:68:cf:c0:67:50:85:2b:97:4b:
                    79:b5:18:5f:dc:8f:86:d0:ea:25:a9:39:cf:76:58:
                    ce:1d:84:15:0a:d2:48:f1:c8:ff:1b:1d:80:b5:e1:
                    27:dc:0e:c7:da:ec:7b:99:89:7b:f9:bd:90:1c:b4:
                    c1:e7:3d:c7:6b:e6:9c:ae:68:82:33:7d:56:62:64:
                    7f:92:d7:63:17:c7:8d:30:72:21:ef:a0:79:f4:75:
                    6f:39:c3:05:fc:bc:1a:fd:f3:94:b0:68:72:af:a1:
                    4e:aa:be:87:50:42:5f:24:57:0e:c5:d4:86:53:a9:
                    cf:8b:e7:8e:5a:a8:72:60:21:79:52:a5:c2:2d:54:
                    88:f0:e0:b7:ae:23:7e:98:1a:53:33:e0:a7:93:00:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:EF:1A:84:2E:1A:5B:E1:B9:88:45:09:6C:67:E9:A5:81:C4:B4
            X509v3 Authority Key Identifier:
                keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:68:c4:a7:f7:f1:eb:9f:7c:32:be:31:21:ca:66:ba:01:ae:
         46:ef:b0:a6:b7:26:f6:09:c5:62:3b:c9:a6:4b:3d:4d:79:78:
         b8:50:1c:10:61:06:ca:1b:38:6c:1d:77:10:80:80:45:fa:b4:
         f3:ec:8f:06:15:9b:e4:78:01:75:cd:ac:36:5f:d7:3c:0b:c0:
         28:ee:0a:8d:1e:b7:1a:8a:c8:85:a8:cb:58:1d:c7:ab:ce:14:
         74:88:72:1c:4c:0b:91:f3:f2:5a:0c:e2:9a:50:e2:71:27:ae:
         3f:66:54:c0:89:ec:9e:60:f2:af:89:b5:10:2b:eb:52:11:76:
         86:47:4b:a3:90:51:dd:66:56:d1:5d:70:75:28:fc:3f:3b:6e:
         fa:2e:e4:6b:55:81:e0:a9:fb:88:4f:9c:2b:c5:1f:be:10:c3:
         1d:1e:79:cf:a2:dd:cf:1a:64:87:1a:6a:56:1c:95:a0:b3:71:
         c2:33:5d:2e:30:7d:cb:08:cb:97:c8:db:38:d2:87:08:98:9e:
         ad:c3:55:42:90:cb:1b:c0:03:d4:41:d2:cb:35:ce:17:ac:c8:
         ba:55:f8:d6:da:dc:e6:94:1f:50:66:ea:95:08:78:13:77:1d:
         6e:93:17:2e:f9:c0:42:32:27:c9:38:f6:c1:c3:49:d8:8f:01:
         6a:30:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----