Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File:                     bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier:          TkDP+9fzsJzUfUcbIwCPEfapciNcrJpqATsaqGJXBJE=
Subject key identifier:   14:7E:E5:44:D9:81:C3:D8:A1:25:52:17:21:9D:EF:F9:68:2C:1E:B4
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer:       /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial:       01962F74980DA8F97154B25A57B0EA7C5057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: vhPBupBTiwnPxSxOT+1hIRxyHYHmnAoaYftptGfBiu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:98:0d:a8:f9:71:54:b2:5a:57:b0:ea:7c:50:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=147ee544d981c3d8a1255217219deff9682c1eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:5b:b3:d9:e9:0d:5d:23:d9:78:fb:d3:f9:
                    61:93:60:01:8f:81:f8:71:cf:e6:f1:93:a0:2d:81:
                    28:fb:6b:65:0a:b8:07:0a:c0:c7:df:18:f4:17:1c:
                    78:62:2d:f1:bd:fb:ae:81:54:b1:99:2f:bd:44:f2:
                    75:ad:e9:8b:7c:fe:b2:ad:29:ff:e2:4c:04:e3:0e:
                    14:00:6b:62:13:42:61:8c:be:c1:32:8a:ed:7a:1e:
                    c9:58:4a:44:7e:24:83:0e:26:9e:c5:75:e7:c8:59:
                    3c:7b:b7:80:12:22:05:1a:1c:2f:5e:ca:6e:63:72:
                    a9:df:82:44:40:27:0b:19:ec:c9:33:27:c9:d6:1c:
                    4a:2b:3d:d5:56:23:00:f3:ba:69:2a:58:c4:47:72:
                    c6:6c:aa:5c:11:07:89:a5:d1:d9:37:e2:b4:f1:c3:
                    e8:6b:f9:31:d8:5e:51:c7:cb:b6:11:ad:32:3b:76:
                    4d:a8:46:fa:1d:39:a6:d1:27:8f:1f:20:de:07:99:
                    1b:ed:d6:0b:85:69:76:eb:48:79:d9:21:c4:54:66:
                    dd:c5:81:d6:19:0d:11:70:93:65:0a:17:cb:7d:5e:
                    7f:3f:7d:72:e5:92:b0:bd:64:17:32:88:c6:6d:9d:
                    15:20:ee:98:65:36:a7:da:e8:af:c7:c0:f2:d8:fd:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7E:E5:44:D9:81:C3:D8:A1:25:52:17:21:9D:EF:F9:68:2C:1E:B4
            X509v3 Authority Key Identifier:
                keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:99:c8:8f:a0:9a:a9:bd:13:bd:97:64:1f:a4:44:5d:dd:
         41:de:a8:3f:91:f9:08:3f:ad:95:7e:4b:ac:4b:05:fb:33:fd:
         a3:35:ca:44:9d:31:84:7e:08:fc:77:ce:11:29:f2:66:b3:48:
         dd:92:2a:66:bc:78:d6:5b:e0:6e:fb:f5:42:c9:66:0d:fd:9b:
         82:65:ef:7d:9f:f3:d4:a1:db:32:64:78:a3:d3:e9:b0:15:24:
         a6:ff:a1:b2:33:d6:6e:ec:7c:ff:7a:7a:fc:42:f5:a1:37:7b:
         5e:9e:62:0c:4f:9a:83:fe:e6:93:39:d2:6b:ed:37:7d:21:b2:
         55:88:7a:66:68:bd:15:39:b4:71:45:b2:04:c9:a0:0c:86:72:
         23:ae:27:3e:80:bc:2a:f3:28:70:3c:6c:f2:a8:fb:9d:80:a8:
         30:2e:e1:f6:a7:a7:3b:7d:64:56:64:85:88:29:70:3b:2c:44:
         ad:d1:ae:7c:46:bd:b9:07:f7:9a:de:03:ef:c9:c5:35:de:f0:
         1f:eb:ed:40:36:e4:0a:b0:88:d7:df:6d:f0:c7:d7:c7:51:44:
         4d:7b:24:cd:9d:93:4f:62:ef:77:e4:c1:4e:9a:10:c3:47:45:
         c4:b1:c9:cb:84:4d:96:f0:66:33:07:b3:3a:a5:60:c5:3a:52:
         f9:8b:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----