Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File:                     d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier:          8PdAQH0Xo5hsi7gQsS+jKwNYkCnkUMRZJYHPlYU/L6c=
Subject key identifier:   E2:72:C0:48:3D:F5:23:42:61:DB:68:92:C0:9B:8E:B4:39:AA:4B:CE
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer:       /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial:       01962E61F7B5B00E3C515BFB77EC5A9CA8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: klEg00GbMLN5nXrB/ZAS1EjP2JMTaLFTYW0rt+caSis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:b5:b0:0e:3c:51:5b:fb:77:ec:5a:9c:a8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=e272c0483df5234261db6892c09b8eb439aa4bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:a3:a9:0c:bc:30:65:54:c6:98:0f:5a:7b:
                    4b:20:93:6f:34:2d:d7:62:ca:c8:41:a6:e5:e6:32:
                    d5:96:e0:5b:22:a5:0b:32:4f:e8:4b:6a:be:a7:d7:
                    5b:d7:b6:8a:05:2f:55:9d:35:49:59:97:a4:c2:56:
                    d3:3f:bf:47:cf:98:e1:48:ff:09:63:bc:15:07:8a:
                    6b:98:39:c7:91:ed:e8:9a:c8:5a:73:ce:ae:52:14:
                    9f:f6:b8:16:69:2e:a4:66:5f:fa:3b:42:0e:17:38:
                    9f:d5:8f:b4:50:3d:d0:5d:94:85:2c:18:8d:be:f5:
                    57:bb:76:61:7c:e4:8a:8e:6f:cd:47:f1:0e:e1:91:
                    f9:fd:2f:52:a4:8c:3d:58:a2:1d:72:c5:85:e0:aa:
                    ca:25:1d:bc:b6:3e:95:d8:1f:39:2b:59:50:75:7f:
                    69:5f:fa:64:9e:4d:d2:9f:ae:ae:f1:36:c0:9d:84:
                    92:69:90:8b:47:ae:c3:d8:81:16:07:88:fc:c7:dd:
                    ae:60:ff:62:d4:40:d5:2a:ba:be:da:de:55:b6:36:
                    cc:5d:48:6a:c4:55:bd:e3:ef:cd:1d:a5:44:f6:11:
                    2b:33:57:47:eb:b5:22:cd:07:52:02:d2:07:54:92:
                    17:18:57:60:ff:5a:3b:5e:f0:0e:44:59:c4:29:de:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:72:C0:48:3D:F5:23:42:61:DB:68:92:C0:9B:8E:B4:39:AA:4B:CE
            X509v3 Authority Key Identifier:
                keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:35:63:54:2c:1a:23:bb:0f:26:03:54:a3:06:b3:bf:23:a1:
         83:ad:6d:7b:26:cd:b2:3c:98:ce:d1:22:c9:e2:80:1e:a5:fd:
         b1:8e:9b:47:e8:fb:f3:07:c0:d2:5d:e8:ef:75:d2:c0:9e:6a:
         ef:84:29:b7:48:b9:9c:c1:af:7e:06:2c:89:2c:53:6c:3b:6c:
         ba:76:d0:21:d8:dc:6d:87:85:58:e1:dd:73:c4:8a:20:22:4b:
         35:99:1c:11:ef:5f:69:93:fe:6c:91:66:9c:e6:78:f3:5c:8f:
         87:96:28:46:6f:be:f0:c5:80:7b:f1:c2:d2:d7:db:84:9d:2c:
         fc:14:1c:c4:2e:df:53:54:22:5b:b3:0d:d8:e9:1b:dc:e0:18:
         ca:35:bc:5d:6c:18:48:f9:6d:4a:a7:6f:16:fa:e9:f8:bb:47:
         72:e2:4c:09:6a:70:1e:87:fe:8a:86:58:27:09:04:7c:7f:47:
         80:e5:ce:5e:5d:ba:1c:e7:a6:da:0f:57:fb:45:a1:7e:79:72:
         3a:02:fc:8d:e8:64:4b:a2:d2:47:33:92:64:98:1a:92:cb:d0:
         45:3d:98:a8:ef:59:81:f1:45:04:5e:75:aa:b0:14:24:a1:29:
         33:ce:8d:42:fb:06:d6:c1:02:70:3e:d3:b0:31:ff:00:11:da:
         e7:70:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----