Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File:                     ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier:          35/n4G+dk8x2plnY87iCFiaKqCUvh0K4pWJ/UeSh/xc=
Subject key identifier:   83:6E:95:6C:E5:1B:F8:D7:44:1D:D6:21:B1:B1:11:76:41:BF:FB:82
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer:       /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial:       01962DF4095A6DD00777F414181381615F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number:          0FBF
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: 1934jYD/4Ib/2608vxEU6Mjrw3+0OKa0xuHTkBNcOeE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:09:5a:6d:d0:07:77:f4:14:18:13:81:61:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=836e956ce51bf8d7441dd621b1b1117641bffb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:d8:00:b2:45:67:f1:ca:57:97:22:c7:d6:
                    bf:0a:b0:a0:bf:32:03:3f:74:b9:95:56:c2:8c:92:
                    32:85:09:3f:44:d5:e9:0d:e4:93:7f:4f:e9:f5:b5:
                    7d:49:c8:70:5b:9f:1a:5e:0c:18:7d:e1:7e:52:2f:
                    4a:f3:29:0f:c5:36:de:84:4d:12:60:43:74:34:af:
                    9e:03:e1:23:1d:a5:3e:71:40:5a:62:74:7b:16:fa:
                    47:bf:d1:2a:17:cb:c8:1b:9c:4d:0d:31:98:4e:51:
                    e9:aa:9e:7d:7a:89:7c:79:c6:49:1b:59:7d:56:20:
                    21:04:b1:24:e9:01:5e:fc:8f:30:66:e3:35:03:c4:
                    6f:2b:3e:88:f8:50:a6:4c:0f:6a:af:b3:0f:28:65:
                    90:6b:ff:3e:16:79:1b:20:cf:00:17:2e:c2:47:ea:
                    cc:1d:4b:d4:00:b6:3b:bd:2b:b8:34:ac:69:e0:1b:
                    5a:d4:f9:7f:9d:79:e2:2f:7d:f4:37:05:d9:23:62:
                    9c:2f:05:c2:03:d1:a8:3e:02:67:60:bf:2b:19:c0:
                    62:b1:f3:e5:3f:39:96:d5:5b:5c:b6:31:1d:99:36:
                    b0:ca:c2:fd:1d:a8:ff:1b:7c:0f:80:84:4e:0f:32:
                    a0:4e:66:52:e4:bc:9c:cd:a3:f1:f8:c7:73:65:75:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:95:6C:E5:1B:F8:D7:44:1D:D6:21:B1:B1:11:76:41:BF:FB:82
            X509v3 Authority Key Identifier:
                keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:8c:f9:12:d2:11:18:69:92:0d:14:8f:d6:ae:0f:7d:8e:
         33:e7:d3:dd:13:0b:b8:8d:28:b0:93:92:da:07:83:c5:e7:08:
         e1:f4:5b:08:e7:87:f9:87:b9:27:14:65:7f:d8:7a:3c:bd:7c:
         77:80:cd:e4:40:4e:9d:f3:d9:4f:90:47:9d:10:ea:09:a9:1b:
         27:af:b0:31:fc:91:89:f0:0c:00:97:de:f6:f2:71:9f:30:3f:
         e0:e1:cf:78:2b:1a:30:5d:35:c0:3c:e4:c6:7a:c3:75:3c:3c:
         8c:6c:c4:fc:03:68:f5:57:d4:08:e4:2d:db:ae:b4:5f:51:95:
         06:6d:4c:7a:9c:8f:c4:17:2e:6e:00:47:12:04:04:59:9b:8f:
         25:3f:f6:81:5b:dc:61:2c:c9:49:ba:a3:c0:ba:e8:30:5f:b8:
         a2:53:39:7d:12:18:a0:51:91:d9:3e:00:31:9b:e7:31:eb:8b:
         3d:ad:8c:cd:83:86:0d:2a:0b:2b:60:aa:98:da:a2:ad:99:a9:
         a4:11:2d:7f:7b:82:a4:f3:55:36:22:5d:b8:2e:78:a0:a5:3f:
         3c:89:2a:81:52:c6:f1:2c:dd:9f:46:8e:40:95:1e:36:98:bd:
         b6:61:fc:4c:80:c5:66:be:2b:ed:ba:f8:b1:f0:7b:d7:c9:14:
         f3:94:ba:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----