Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
File:                     S674BgHHxrBqwfclCB8kLg8GvFE.mft (raw, json)
Hash identifier:          aOT2UGp1SF+YUI+FDdCBqyI+TNnyG5KDPpU3+cJ41Xc=
Subject key identifier:   AA:37:0C:A0:48:BD:9E:D8:30:C2:43:BD:7B:06:E1:4C:AA:A3:01:1F
Authority key identifier: 4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
Certificate issuer:       /CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
Certificate serial:       0195188121D1718A97795A4F32CDD7EBB3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
Manifest number:          069E
Signing time:             Tue 18 Feb 2025 10:01:10 +0000
Manifest this update:     Tue 18 Feb 2025 10:01:10 +0000
Manifest next update:     Wed 19 Feb 2025 10:01:10 +0000
Files and hashes:         1: S674BgHHxrBqwfclCB8kLg8GvFE.crl (hash: jCUClrW8Llp6mZYg0tCbOXZUL/q8w9mnb8Oa/jytQHA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:18:81:21:d1:71:8a:97:79:5a:4f:32:cd:d7:eb:b3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
        Validity
            Not Before: Feb 18 10:01:10 2025 GMT
            Not After : Feb 19 10:01:10 2025 GMT
        Subject: CN=aa370ca048bd9ed830c243bd7b06e14caaa3011f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:fd:12:ef:6c:03:83:a0:e7:ba:0f:1f:7f:
                    f6:3b:1e:44:75:f6:0c:83:bf:31:ed:15:98:c9:eb:
                    20:7b:dc:f4:af:32:22:c2:c3:ff:1b:9b:33:9a:ba:
                    af:3d:73:21:72:4d:d3:e0:c5:54:11:90:b1:4a:29:
                    b1:b2:21:11:8f:6b:9e:7d:37:4c:ae:64:de:9d:ce:
                    ff:d3:b4:e4:f0:b5:17:79:e4:d0:4c:30:5c:73:c4:
                    b6:40:26:fd:7c:14:50:98:d5:e2:06:f8:39:de:4d:
                    57:4b:93:5a:5e:9e:89:18:2f:d5:c1:96:07:db:76:
                    01:8b:63:61:34:ab:11:4b:4f:1c:a5:f6:ad:f9:7e:
                    2b:fa:aa:73:92:f5:a7:6f:7b:da:b6:d5:83:62:c9:
                    0f:e4:ce:9c:3b:75:5f:86:a3:d0:41:b3:67:ac:49:
                    94:fa:ec:83:c3:37:19:19:55:3e:0c:39:e1:a6:cf:
                    7c:6d:72:5c:f1:9b:b4:43:0a:4b:0a:0c:3b:1a:63:
                    21:7c:49:84:4b:db:e6:dc:cd:44:f1:f9:b6:01:1c:
                    31:8f:20:96:cb:27:a7:c6:09:33:85:bd:e0:68:61:
                    6f:35:2d:df:25:4f:cc:7f:e1:72:ba:af:4e:00:bf:
                    e5:ca:51:cb:ae:36:7b:d9:51:6a:17:f9:fd:d9:30:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:37:0C:A0:48:BD:9E:D8:30:C2:43:BD:7B:06:E1:4C:AA:A3:01:1F
            X509v3 Authority Key Identifier:
                keyid:4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:44:98:d8:fe:55:2f:de:61:92:cb:9e:c9:3f:b4:02:5f:fc:
         18:cb:7b:04:2f:c4:9f:5b:5f:bc:a9:7f:cb:8a:58:12:6c:ba:
         65:98:7a:e6:52:39:2a:6a:cb:3b:40:cb:52:50:3e:68:a2:a8:
         78:54:34:e4:2b:c2:3e:23:83:69:78:25:20:6c:82:57:e7:3f:
         e6:ef:45:61:8b:b3:04:e3:d2:e9:09:df:0b:45:0e:e1:9a:f7:
         8e:f9:bb:96:a8:3a:48:d7:57:ad:de:eb:d1:82:14:b0:53:75:
         2a:c9:12:25:8a:15:fb:d4:78:a8:ae:03:ae:cb:63:2e:bb:96:
         c7:93:f3:44:08:ed:77:88:cf:63:76:ef:9d:c7:91:94:30:7b:
         59:e5:7f:ae:c9:0a:e1:e3:53:39:41:06:8a:4d:9a:11:56:fc:
         b5:e5:e1:27:ee:42:0f:af:0a:50:36:12:ea:3a:58:37:f2:c2:
         8b:c6:74:a7:ee:dc:bf:81:7e:ad:0d:9e:c5:a0:2a:f7:de:21:
         f9:aa:b3:d6:06:4c:aa:1e:ea:25:6e:d7:c3:bc:09:08:47:6f:
         35:db:fb:5d:9b:05:d6:ca:7c:8c:1c:f0:ea:d4:cd:85:2b:f1:
         ed:c9:62:00:e4:eb:a3:0a:e8:c3:a9:2c:6a:55:96:33:d5:7c:
         af:43:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----