Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File:                     YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier:          f9HrBTbF/J9RzhVpjaYLi8YRven9AaaSVLsGKpVPuuQ=
Subject key identifier:   6E:E8:07:B7:05:E5:25:4D:8D:D9:1D:7D:9D:00:E1:2E:8E:1E:42:F7
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer:       /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial:       01962E992F76E6FE3F7C98C287ED3ACC0D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: fASYSQYOOSlnHNMNMYUVCiArpkhVrzyvvx/2EDuGQCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2f:76:e6:fe:3f:7c:98:c2:87:ed:3a:cc:0d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=6ee807b705e5254d8dd91d7d9d00e12e8e1e42f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:ec:bd:d5:7a:e1:90:80:47:59:d4:e8:1d:
                    d0:f4:3c:05:d1:6f:80:10:0b:97:54:79:f8:1b:66:
                    9f:97:6c:74:9a:f1:fd:2c:82:4a:61:70:79:cf:85:
                    2a:53:5b:f7:01:db:56:d5:d5:71:46:37:c8:a8:db:
                    69:e8:1e:1e:fc:7f:39:30:00:d8:f0:91:1c:a7:17:
                    5f:68:93:30:65:5e:dd:8e:a4:2b:94:3c:05:8d:a1:
                    2c:7a:91:3a:0f:fa:9d:f2:2f:d2:26:9d:09:08:dc:
                    3b:28:0a:87:32:49:31:b6:e9:b2:76:55:a9:b7:7a:
                    6b:04:31:e4:71:99:70:cc:a1:5d:9f:be:7d:2c:fd:
                    10:44:5e:c2:8e:3e:2f:ca:7f:c9:70:e6:cb:e8:c0:
                    14:ce:ff:25:cd:38:8d:3b:70:61:fd:f9:d9:e5:de:
                    d0:89:3f:7d:9c:be:8e:d2:f3:3e:7a:10:19:a9:ab:
                    0b:61:ab:4e:e2:e0:a0:4c:67:d2:2d:3d:fe:67:c9:
                    3b:f6:02:07:4b:03:1e:5f:56:96:bd:db:40:04:d7:
                    91:23:31:76:40:f7:a9:ed:09:be:30:a9:29:76:2a:
                    8e:61:2d:e9:5b:b6:50:44:48:d8:c0:62:b5:c9:19:
                    51:35:59:aa:08:29:c1:7e:ec:d3:6b:32:5d:61:01:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E8:07:B7:05:E5:25:4D:8D:D9:1D:7D:9D:00:E1:2E:8E:1E:42:F7
            X509v3 Authority Key Identifier:
                keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:db:7e:dd:e7:c7:a1:8e:3b:2a:ed:c5:09:83:fd:b2:2f:00:
         69:a6:9c:f7:36:73:a4:d0:f2:94:f7:b6:ad:18:f0:d3:46:8a:
         6e:ee:82:b9:21:10:9b:88:3d:28:cd:32:6c:5c:54:10:2d:23:
         b7:61:27:1a:3f:35:f6:e6:92:5a:86:7e:0a:7e:aa:71:ea:b7:
         d6:12:7e:95:7d:27:07:3e:42:23:85:88:ca:04:09:05:3b:37:
         06:f9:c4:1e:08:a4:2c:4e:b6:8e:c5:d3:02:d4:83:66:70:66:
         ad:c4:a7:bd:86:cd:82:14:1c:de:81:0e:bf:39:e6:13:43:2a:
         01:b4:b4:91:c9:3c:2b:75:12:93:5c:b2:18:d5:2a:ba:0f:24:
         3b:8e:5d:f8:cb:df:1d:9e:8d:09:7c:fd:98:62:ff:99:02:7d:
         e4:3c:aa:9a:3a:c0:61:00:fb:c9:b6:a1:18:02:16:df:3d:0b:
         51:93:c5:6a:93:f0:f1:b5:e4:6f:05:b0:e2:7a:ba:5b:74:3e:
         6b:5d:00:01:97:b0:2a:36:f7:14:9a:ae:4e:09:2f:38:64:99:
         5e:8e:d2:15:ed:54:8a:e5:f4:17:b8:04:5a:1f:10:18:3f:52:
         8c:05:d0:81:84:f7:f8:10:59:03:da:b9:76:61:be:b2:2b:15:
         72:ac:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----