Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File:                     U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier:          duJ1uhTIV6TXtDfPcp9ENT5UP/PYGLthae8MFYOhNkQ=
Subject key identifier:   A6:D7:58:22:F0:69:9F:9E:CC:1F:9C:A5:58:E1:8F:19:02:CD:70:9F
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer:       /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial:       01962E2B43E0E7D1A5D1412BAD4540957C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number:          03AB
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: 6N3wcp+/yNaiiW8H1YOkPxDcFttAowBfK1ucCpPuk+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:43:e0:e7:d1:a5:d1:41:2b:ad:45:40:95:7c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=a6d75822f0699f9ecc1f9ca558e18f1902cd709f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:4f:c4:86:1b:20:90:be:f2:73:d3:cb:d0:
                    e9:3c:a6:a4:19:ee:bb:b6:6e:5d:f5:01:9f:b7:b8:
                    9c:d7:8f:ba:72:e7:5d:be:37:d2:ce:47:bf:68:ab:
                    c7:83:4b:df:4f:ef:5d:a0:e4:76:c4:d9:2e:24:86:
                    82:7b:3b:df:09:ca:ea:84:d9:4d:21:1a:92:77:49:
                    92:7f:eb:49:c6:b3:d0:ad:87:ec:5b:3e:8b:11:56:
                    73:27:71:61:0d:70:2b:85:d6:5e:43:70:1b:03:26:
                    88:d5:8f:53:05:50:63:ee:91:d8:51:86:fb:7b:93:
                    02:b3:7f:32:38:5e:cc:6f:de:f3:93:de:bd:58:d3:
                    99:b2:03:37:53:d0:03:81:40:2d:94:80:fa:b8:79:
                    49:99:c9:dc:15:4d:e7:bc:2d:8c:59:fe:ef:b2:85:
                    62:dd:f6:af:2c:03:14:1c:39:e2:d1:74:e9:24:3c:
                    aa:d3:53:d8:c1:52:58:a6:ab:d0:7a:59:c2:2a:13:
                    3c:fe:ea:d6:9a:d6:02:a8:2f:99:26:6b:97:d6:18:
                    df:03:78:23:e8:cf:dd:a6:fb:8d:99:25:43:49:26:
                    3d:37:d5:9c:ae:1b:2f:3f:8a:91:64:5f:aa:01:f1:
                    93:a8:08:b3:fa:3a:9b:01:b1:6f:52:0c:15:60:b8:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:58:22:F0:69:9F:9E:CC:1F:9C:A5:58:E1:8F:19:02:CD:70:9F
            X509v3 Authority Key Identifier:
                keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:91:02:43:c6:1f:e2:34:8f:4e:aa:54:75:56:26:84:f2:c8:
         69:99:31:1d:f7:91:e1:69:cc:93:d9:63:49:d8:4f:5b:14:7f:
         a3:bc:96:9c:9f:23:73:c1:d0:13:86:d7:b3:ca:d8:cd:24:f1:
         ba:67:e1:06:f4:82:34:6b:9d:2c:12:9d:54:01:4e:34:15:92:
         c7:9a:a9:e6:41:17:a1:29:cf:9c:c8:1f:97:a3:ac:88:b9:d9:
         9c:49:c8:5b:02:90:93:88:4d:25:97:c6:5c:25:97:5a:ab:5b:
         20:4d:ee:60:1d:42:ad:a5:9f:88:af:3a:d4:dd:e3:6e:a8:b6:
         c0:89:b3:37:07:2a:15:74:67:05:14:cb:db:16:ff:25:5f:84:
         f1:13:bd:ac:0d:73:11:10:a5:e3:da:e2:f2:f6:ca:f6:69:e0:
         50:b2:05:55:57:c0:a9:da:1f:25:f0:4c:ce:a9:9e:c9:bd:77:
         ff:b6:ea:e2:87:b7:68:18:db:66:3a:b6:aa:8a:2d:26:6f:76:
         e5:54:e8:f0:40:31:cc:89:c3:99:d6:9b:45:8d:d9:6a:8b:9f:
         32:8f:57:bc:44:88:aa:c9:91:c1:3e:f7:44:ae:fa:75:f7:0b:
         ab:24:95:cc:4f:1e:eb:7d:66:84:dd:a6:bc:eb:5b:6f:4d:3d:
         8e:98:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----