Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
File:                     b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json)
Hash identifier:          7u8/AMxMC7tuZ/MFJVKNiCVP4HMRYlWaNmhdlxFHINQ=
Subject key identifier:   D3:4B:E3:33:0F:16:A7:3F:17:21:54:EF:77:C0:A5:DD:66:EA:93:AA
Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
Certificate issuer:       /CN=6ff7891331450dc86283a089bd9470e69c37ed12
Certificate serial:       0195E1223CE7FEEABD873E8C34638647BDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
Manifest number:          91
Signing time:             Sat 29 Mar 2025 09:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:12 +0000
Files and hashes:         1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: JtIlXiFcoB5nJ5BZpmuQVKXzMdz42dvrmg8aD8Oji/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:3c:e7:fe:ea:bd:87:3e:8c:34:63:86:47:bd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12
        Validity
            Not Before: Mar 29 09:01:12 2025 GMT
            Not After : Mar 30 09:01:12 2025 GMT
        Subject: CN=d34be3330f16a73f172154ef77c0a5dd66ea93aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e6:b5:34:70:83:8d:2b:ad:b6:68:8e:c0:c5:
                    14:01:3f:45:95:0b:4b:8c:ee:36:13:0b:a6:9a:a1:
                    cb:ed:ff:5d:44:82:e8:c6:76:60:44:c3:f5:b8:d2:
                    25:49:32:74:ea:f3:16:6c:d6:88:70:ce:8f:51:d6:
                    77:32:c5:36:5a:a0:f3:75:c1:08:af:aa:71:b5:d5:
                    dc:e8:9c:27:12:33:47:c6:96:6c:47:15:b3:9f:e2:
                    b9:00:a5:08:7a:5a:58:d9:17:2d:21:72:02:81:4c:
                    d3:9f:11:74:4b:f6:53:da:fe:23:60:d0:79:ad:77:
                    c8:2c:7f:25:48:d3:95:ed:d4:bf:14:3c:5d:85:a7:
                    96:c1:39:8f:39:31:96:f6:3e:7d:df:2d:0c:bd:3a:
                    d8:66:99:5c:82:5f:d3:df:cd:6b:a9:b2:a6:20:3e:
                    3b:72:c6:13:b0:74:bf:86:33:eb:20:9f:5b:1c:21:
                    c0:be:7a:f4:4b:19:f8:d1:19:4a:79:e5:9c:9f:16:
                    9d:56:28:93:99:30:7b:8a:02:43:f9:e3:bc:8b:c9:
                    c9:43:0b:e5:da:62:8e:99:4e:fd:30:d7:4d:fe:db:
                    04:ba:89:76:3d:28:ea:d1:98:e3:8b:5e:d7:12:a1:
                    f5:22:14:2d:a7:04:b0:97:94:9e:9f:51:31:3a:a6:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4B:E3:33:0F:16:A7:3F:17:21:54:EF:77:C0:A5:DD:66:EA:93:AA
            X509v3 Authority Key Identifier:
                keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:dd:84:59:5f:f2:26:7a:b2:03:75:d7:b3:39:0b:6f:6a:
         9c:41:4e:f6:3f:36:7c:08:cd:73:86:30:60:79:8d:4a:3f:0d:
         ed:2c:97:65:5f:fe:2f:5d:dc:b3:56:f9:1e:a3:aa:c6:fd:d4:
         5d:b6:33:c0:9e:24:90:8e:51:fd:21:b2:42:e3:08:bb:0d:2d:
         a6:3d:34:9e:e7:09:85:29:33:f4:7f:c4:12:e0:d3:87:96:16:
         d6:5a:4b:e7:c6:82:2a:25:4d:0b:2d:e7:8c:bc:ca:52:bd:2e:
         0d:ac:7e:b7:85:0e:4a:3d:1e:0a:3b:fe:fe:81:3e:9f:92:e1:
         8c:09:19:fd:ae:20:3d:5d:05:3a:ee:4c:9a:66:3c:32:f0:37:
         9d:92:9c:af:e9:b5:fa:da:34:2e:3e:54:72:35:45:91:d6:b3:
         4c:3d:29:00:38:a3:53:3b:0e:16:d1:f4:f0:5f:1e:ae:c3:6b:
         e2:a2:39:47:8d:39:5a:44:4c:cc:97:69:2f:77:df:0b:3e:94:
         f3:c2:34:4b:a3:54:43:0a:9e:17:1e:49:90:4e:fa:d7:fa:b3:
         89:eb:64:1c:30:64:f4:4f:68:49:d1:83:47:19:ff:42:13:a6:
         b8:27:38:7d:03:98:a9:d6:fc:dc:8e:da:de:4c:50:cd:77:6d:
         4c:d0:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----