Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File:                     _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier:          yZWSa4F7T6AJeeaXgtfpYBpJUvFrHIIeBQh6rrVncoY=
Subject key identifier:   6F:00:B3:80:00:39:B0:BC:E6:12:30:2A:51:39:75:2C:B2:9F:72:02
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer:       /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial:       01962F74AED0245CDDE78653C721C4C54BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number:          0607
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: sKlVtmqXfJBh1hM0PT+amgB6GcpK/D/znK2boeF/cBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ae:d0:24:5c:dd:e7:86:53:c7:21:c4:c5:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=6f00b3800039b0bce612302a5139752cb29f7202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:9a:a7:a3:ef:92:06:5e:91:92:1e:83:a4:
                    fe:3e:b1:ea:ca:52:15:7b:bf:ec:e0:c6:c3:f7:a2:
                    2a:91:da:b1:7d:c0:8c:61:00:45:95:0a:62:38:fc:
                    49:98:d1:39:92:89:4c:83:bc:c5:3c:fa:94:96:a6:
                    2c:ef:52:d8:b9:04:25:02:c0:0a:ca:5f:92:76:99:
                    3f:dc:e8:6f:62:b3:3c:99:d2:87:bf:4a:53:e6:e8:
                    be:d6:5a:75:24:71:e9:e5:b2:55:9b:98:32:97:65:
                    1b:6a:84:eb:df:1f:45:18:33:85:89:b5:d2:db:ef:
                    0a:6a:24:3d:46:fa:e4:7d:f8:15:c1:c1:87:5f:21:
                    fb:23:e4:9d:c5:c7:60:21:df:07:21:ef:e6:90:5e:
                    2e:56:5b:8a:22:34:48:e8:1f:da:2c:a8:7e:99:83:
                    8c:40:73:1b:ff:c2:47:de:dd:33:f2:0b:80:98:1e:
                    75:35:55:4f:ef:64:1f:9c:ce:0b:8b:9b:74:cf:0c:
                    6b:3c:3d:67:18:30:96:ee:7e:0e:88:30:92:e0:22:
                    b0:12:ec:c5:41:f1:3a:b3:1f:90:e9:26:ce:b6:3e:
                    8e:02:02:6e:f2:42:ad:40:e6:5b:f3:a6:2d:e4:66:
                    5f:a9:11:93:80:11:bc:2b:b4:60:be:4e:3d:1f:c3:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:00:B3:80:00:39:B0:BC:E6:12:30:2A:51:39:75:2C:B2:9F:72:02
            X509v3 Authority Key Identifier:
                keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:fb:43:63:6d:4c:ad:31:a8:54:cb:f4:34:30:d4:eb:0a:
         44:7e:fd:6f:c0:fe:1a:83:52:25:a1:f1:7b:e7:1c:64:0d:e1:
         8d:db:44:c4:81:17:73:b9:14:dc:3d:f6:ff:a0:fc:c9:6f:a5:
         f1:1a:49:a3:fd:cf:a3:1a:68:1c:3c:6f:78:8f:63:74:f3:2c:
         73:ae:f5:ab:25:9a:7a:cb:23:17:21:3e:96:12:44:0b:75:f1:
         75:2d:33:85:d0:79:40:ae:06:d5:d7:e5:6e:92:fd:53:94:67:
         10:43:85:86:9a:c6:37:93:6c:fe:48:7f:b6:29:ca:c1:9f:24:
         ac:ea:6b:61:d4:dd:2c:5a:5a:5c:25:c4:78:11:12:95:01:31:
         37:70:81:fb:45:4f:68:69:0b:1f:47:41:7f:42:6c:82:68:f5:
         34:e9:31:79:7c:cd:7a:66:95:f1:2b:a1:47:c2:01:38:d6:b6:
         8b:27:5f:10:b3:28:ec:5b:8e:46:d5:d4:01:ef:2c:c2:fd:a4:
         22:bc:bc:ef:1a:9e:35:31:9d:6d:19:81:61:20:89:6a:ea:63:
         b3:cb:0d:71:af:b8:d0:d9:5b:f1:dc:75:5a:73:68:75:01:91:
         35:2a:28:d5:ce:76:2a:4b:70:35:b1:47:1d:b2:0a:74:35:f3:
         83:3b:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----