Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
File:                     fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json)
Hash identifier:          ZSJojdE9PaEtHlJnNYmqQA731BpDwyLWDbrS7Fbmm/4=
Subject key identifier:   B5:1E:98:BA:73:76:2F:9E:4F:D5:14:17:E5:53:90:68:AA:0F:ED:E2
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Certificate issuer:       /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial:       01962F06501F4B94C53BA6D15E31343FE5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: lzGM0YaiFUX4N8ExovBAsIGkmdG9YomsGgwzFEH7JP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:50:1f:4b:94:c5:3b:a6:d1:5e:31:34:3f:e5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=b51e98ba73762f9e4fd51417e5539068aa0fede2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:3d:40:38:4d:42:da:42:07:df:52:c3:13:
                    0a:aa:1a:d6:5e:30:32:72:50:17:43:18:98:0f:40:
                    91:43:82:4d:89:73:52:b6:ca:d0:c1:16:a3:43:3f:
                    42:3a:a0:04:39:2e:8f:0c:9f:05:d9:b2:93:f6:f4:
                    9f:7a:40:3d:a1:7c:a1:b3:4f:df:fe:6b:36:8d:b7:
                    d3:ec:90:2d:4d:e2:24:74:a8:cc:20:41:8b:16:bd:
                    cd:2a:59:d9:1e:0a:0a:dc:6d:5f:d3:d4:d9:9f:2c:
                    a0:48:42:56:cc:0f:8f:1c:15:55:19:61:dd:56:77:
                    32:a2:bf:d4:e3:9d:67:87:45:03:c1:75:a7:f4:c3:
                    92:4c:fe:5d:ef:2e:b3:68:b6:89:0b:d2:d0:5c:21:
                    a4:5e:05:04:33:61:db:f4:b3:94:fe:f8:0d:44:c8:
                    b7:3e:8b:b3:ee:6b:49:60:21:93:2f:28:79:01:67:
                    75:53:06:22:3f:d7:19:28:16:40:84:16:a4:30:fc:
                    f0:35:dc:a3:0c:59:c4:f9:98:ff:a1:28:69:c2:68:
                    9a:69:d1:6d:c2:0e:54:12:04:67:e8:ab:0c:b7:d1:
                    28:a9:a0:cf:11:fc:d0:20:bf:1f:f7:4b:3a:c8:68:
                    bb:28:c5:3b:e3:9b:c2:f4:6e:1e:88:c0:05:d4:a2:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:98:BA:73:76:2F:9E:4F:D5:14:17:E5:53:90:68:AA:0F:ED:E2
            X509v3 Authority Key Identifier:
                keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:26:ba:a6:0b:d6:87:a2:b5:af:cc:67:a0:bb:03:ca:98:0b:
         87:92:e1:7d:51:98:82:c8:38:a7:1a:51:8e:64:a5:c4:73:30:
         5f:45:0d:e7:d7:bc:aa:ae:aa:d1:f2:d5:f4:f8:6a:68:dc:09:
         a0:bf:65:83:4c:18:53:97:c0:b9:b0:a8:36:f5:cb:42:dc:ad:
         4a:95:0b:b2:bb:59:d0:59:f8:92:f4:64:97:6f:94:c6:7f:74:
         ba:6d:86:56:84:06:20:6d:46:01:de:85:91:bd:0b:97:c5:7f:
         44:5c:88:84:61:27:20:20:53:4b:db:51:2a:29:89:41:5f:30:
         20:ce:48:aa:cc:b5:ad:bd:8c:2d:63:77:4d:74:9c:74:d6:1e:
         52:f2:af:da:26:e2:af:e5:c9:ef:6f:21:62:90:f3:ff:92:9f:
         7b:f9:28:2f:58:f4:e9:c8:40:1a:8b:7f:bf:6a:26:39:f5:a5:
         e1:d2:f7:ca:96:cc:c4:2b:53:0a:a5:2e:7b:81:1e:85:c4:24:
         fd:aa:e1:ff:4d:ac:6a:4e:b5:7f:82:53:1a:71:89:0d:24:c4:
         f5:34:75:2c:75:7e:f6:97:56:62:24:d8:61:8a:0e:29:d5:12:
         09:a7:db:11:a1:3b:2b:70:78:90:f3:57:ab:73:98:0d:c6:cd:
         b4:b4:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----