Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
File:                     b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft (raw, json)
Hash identifier:          MbNtDga5IeNYb0CpmkGteW5j4u4HBsb2TNArtB8tvSg=
Subject key identifier:   85:5A:17:F2:BA:CA:04:57:29:1A:D6:C6:44:CA:2E:63:E0:93:E0:BD
Authority key identifier: 6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3
Certificate issuer:       /CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
Certificate serial:       01962F3D4B8A78095CCDD2E72CEC9A247760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft
Manifest number:          11E7
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl (hash: JBnfBSjOHcqm87oPXb/j3JIiH2PzplSMxfxKUMlDcB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:8a:78:09:5c:cd:d2:e7:2c:ec:9a:24:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9c9894b113e7d5a3f0b2bc39d63605b8bcacd3
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=855a17f2baca0457291ad6c644ca2e63e093e0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:74:fe:8d:16:b0:a0:a6:82:9e:1e:66:f0:
                    9f:ba:73:66:d8:7d:d2:96:af:04:19:82:46:51:67:
                    5c:d9:dd:ec:52:6e:e5:3b:22:86:71:93:a2:ec:7c:
                    d7:f1:6f:9f:64:5d:aa:56:53:aa:59:59:76:73:2f:
                    63:12:63:8d:c5:79:3b:25:4e:2b:88:2d:8d:9d:e6:
                    55:88:05:81:28:11:7d:66:18:65:78:65:52:87:3b:
                    75:be:01:0a:3b:66:3d:5a:e2:59:17:88:ce:23:e0:
                    f9:f7:17:94:3f:39:1d:95:ad:77:05:e0:2d:91:2e:
                    da:19:32:82:b6:f7:d6:c7:c0:cb:42:b2:67:c2:d0:
                    cc:86:a0:6b:4b:72:86:17:0f:a4:8f:41:1c:b4:68:
                    c4:e1:36:c3:0e:67:a6:64:ba:a6:18:3f:8b:6b:e6:
                    c7:ee:80:4e:65:2a:10:a2:64:d1:df:37:a7:3f:ef:
                    07:b6:36:99:85:24:c7:a5:75:8d:73:ba:bc:c7:4c:
                    31:54:19:bb:36:94:84:da:5a:87:b2:2e:43:70:0f:
                    30:90:b2:31:ca:78:59:2f:da:90:78:33:61:4a:28:
                    05:b1:61:21:34:34:19:5c:8b:a9:bc:c2:a4:ff:41:
                    30:7d:d7:01:bf:69:73:c3:88:62:e0:ca:92:d9:6a:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5A:17:F2:BA:CA:04:57:29:1A:D6:C6:44:CA:2E:63:E0:93:E0:BD
            X509v3 Authority Key Identifier:
                keyid:6F:9C:98:94:B1:13:E7:D5:A3:F0:B2:BC:39:D6:36:05:B8:BC:AC:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5yYlLET59Wj8LK8OdY2Bbi8rNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0fd3cf-4f07-49ad-99b7-676a4c6ebb39/1/b5yYlLET59Wj8LK8OdY2Bbi8rNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:54:ab:6b:dd:f9:a8:3b:a6:21:9e:62:a7:26:db:50:01:
         8a:f5:e1:da:07:72:fb:6e:b8:b9:0d:f7:ee:41:71:eb:6a:b2:
         84:7f:b5:7c:4d:26:b6:d3:8b:b4:00:6f:bf:4a:e1:b9:2b:4b:
         32:f9:fc:23:b3:dd:bd:54:0b:d2:a5:d5:54:b0:ef:b4:26:d4:
         45:a9:f2:86:98:f8:57:58:e9:46:b4:1d:99:0f:ef:68:2b:25:
         12:87:ac:d6:65:54:bb:51:ab:95:8e:00:72:b4:0d:6f:4c:d0:
         69:d7:8c:00:77:5b:78:09:3a:a8:83:54:98:bf:aa:78:ed:81:
         b3:af:2d:04:f8:6d:66:4b:3f:a8:22:66:a7:8e:0d:e3:e6:06:
         ae:5a:02:f7:7f:28:40:2f:44:a7:ed:38:db:ff:b6:ed:04:04:
         69:94:9a:b4:9f:42:3e:6b:e6:74:3c:fb:03:3d:ba:58:6b:58:
         ef:ee:ed:ee:f1:2d:0f:ae:f6:9d:b1:20:0a:0a:35:05:65:b4:
         79:e0:4d:8e:7d:9c:2f:b9:81:c9:c7:3b:31:45:ff:a1:39:6a:
         61:1a:7f:c9:11:b3:e6:9f:9d:bb:52:16:b3:3d:85:f0:b4:80:
         e1:c2:cf:7a:c9:34:f3:7c:28:a4:8c:42:5c:d6:b3:4f:a1:7e:
         77:65:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----