Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          vzBpyHH8qIHJk3tEEJX5jB1EaymME+aAtLVAU61Wu7U=
Subject key identifier:   22:ED:A8:B4:BD:F3:E8:2C:66:EE:CE:BE:48:50:B0:B0:85:89:2A:13
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       01962FAB699F5B889A84A0DCA76BD69D842C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          036B
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: 50Re4rOprkph1CgKAMl1I9BhV7hYXCYQ1cOGrFp8qEQ=)
                          2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:9f:5b:88:9a:84:a0:dc:a7:6b:d6:9d:84:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=22eda8b4bdf3e82c66eecebe4850b0b085892a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:2b:0b:aa:77:99:e6:d4:65:f1:15:d0:5a:
                    df:57:5e:7f:70:f5:d1:48:f6:4d:3d:b6:64:fa:63:
                    f2:b7:1c:96:08:d0:d5:fd:0f:ea:7e:a2:f2:24:8f:
                    c1:18:52:ad:3c:93:fc:df:e6:5d:8d:ac:d5:11:bc:
                    ef:1e:63:4f:4d:6d:c5:39:91:99:98:f3:da:2c:5e:
                    dd:e4:be:00:3c:2b:a5:ca:a5:66:8c:49:ba:47:f5:
                    52:83:ba:6a:70:c4:c8:59:05:9f:e9:5f:f4:0d:75:
                    0c:83:47:6d:09:bf:57:54:b4:33:51:1a:7e:c9:1e:
                    90:19:a5:e7:f6:1b:38:b8:e1:58:19:37:11:e1:dd:
                    9a:3d:a5:e7:b3:e2:59:29:79:d8:d3:c0:e6:11:b7:
                    44:eb:9c:eb:4f:8f:72:3c:2f:3b:01:49:d6:66:29:
                    3b:18:2f:1c:6c:7a:7f:16:70:45:aa:0f:a2:6e:c2:
                    dc:2e:b9:20:bf:b9:a4:f8:c5:83:62:08:98:c9:be:
                    62:8f:45:ad:27:4c:7f:3c:1e:ac:24:1a:6a:11:d1:
                    24:69:72:29:b0:8a:f9:04:84:e2:ed:ca:c3:57:fe:
                    03:cd:43:b2:65:c7:71:10:24:d7:d6:ec:6b:e8:d7:
                    9f:95:68:a7:5a:0f:37:46:ee:01:09:6d:5a:b3:80:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:A8:B4:BD:F3:E8:2C:66:EE:CE:BE:48:50:B0:B0:85:89:2A:13
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:c2:ee:57:41:a9:b8:a2:8c:f0:7c:ca:8c:99:01:43:50:
         4c:8b:56:6e:de:53:77:eb:93:ae:cd:c4:22:6e:53:aa:6b:c4:
         53:6f:81:69:2b:ab:4d:d7:b8:c1:a0:f0:ca:be:56:dd:5a:7a:
         0c:8e:8b:67:69:79:85:52:77:10:23:7f:8b:cb:28:f5:72:4a:
         15:43:fd:e0:db:ff:39:38:13:20:98:83:3d:30:69:3e:cf:ea:
         2d:38:23:30:6d:33:2e:1d:c7:45:21:b7:e1:15:b7:67:c6:a0:
         a1:6a:7e:b2:91:b8:e6:6b:a9:94:1f:e1:5c:70:1b:ef:af:5c:
         cf:38:16:cb:fe:1d:47:04:76:5a:96:7a:35:31:8c:87:42:21:
         8a:c1:96:dc:12:59:f9:2c:cb:e3:bc:d2:7c:83:ec:42:b4:01:
         12:e3:a8:70:5e:6d:21:94:58:ae:b2:c3:4b:70:fc:51:9d:d6:
         84:5f:df:ed:e3:fd:ad:1e:a8:d7:ac:c6:9b:d4:e4:56:e2:5b:
         7c:53:a7:2b:9e:f4:f3:5b:91:00:96:2c:18:d8:e6:06:3c:38:
         7f:8a:82:69:40:ac:53:47:65:f9:1a:f0:86:46:7d:4c:5e:94:
         c5:a4:78:b4:b6:f5:a5:e7:41:70:a1:19:87:93:06:59:8e:54:
         82:06:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----