Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
File:                     Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft (raw, json)
Hash identifier:          EZTdrUz8VaAIJVvpE8txsZRaxRtDaKyuTqilqzUHKAY=
Subject key identifier:   05:06:42:55:68:47:01:71:CD:F4:92:83:4D:B4:B0:10:0A:9F:1E:55
Authority key identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
Certificate issuer:       /CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Certificate serial:       01962F3D6E3FF259A01F1D9639C0CB51270C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
Manifest number:          0675
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl (hash: qsc+erwYNa5cZ/mCuDr30aVR6lzupX+q7Uedi+H0CeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:3f:f2:59:a0:1f:1d:96:39:c0:cb:51:27:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=0506425568470171cdf492834db4b0100a9f1e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e5:1c:97:98:ce:17:94:10:b0:d3:2f:72:f5:
                    42:05:b7:51:12:fd:92:56:ab:1c:33:87:32:55:25:
                    c1:87:47:4f:32:03:91:39:ef:b0:37:dd:7d:23:5a:
                    36:63:8e:40:62:bd:6b:fb:df:e1:1f:d1:8c:1a:4e:
                    10:fa:fb:08:0a:df:d2:a8:7c:29:bf:c8:92:98:9c:
                    c6:59:77:c0:de:e8:27:33:bf:d6:ae:2c:a4:89:e9:
                    54:fc:f0:f5:40:f2:2f:3b:08:f0:10:a8:69:9b:11:
                    2c:ec:3f:b4:79:08:de:f9:0f:ec:10:97:cf:95:3f:
                    94:b1:4f:72:7d:ee:93:23:a3:6b:d2:e9:62:86:60:
                    de:c3:cf:a2:ef:e6:33:85:92:30:82:25:05:51:e3:
                    4b:13:d6:e7:93:53:08:59:82:1a:dd:51:fe:90:d3:
                    07:3a:a8:30:5d:75:c9:91:a7:95:e8:e2:d1:ef:e3:
                    7f:50:ee:1a:b9:8a:c2:0c:cf:33:5f:5f:12:6f:aa:
                    7f:c5:9d:94:b5:67:da:45:e8:06:62:da:d7:e9:3d:
                    b2:41:66:f1:20:d1:70:a6:70:d3:44:2c:55:b0:0e:
                    7c:e1:8a:ca:ac:bf:01:d9:a0:9c:d3:96:b0:33:0f:
                    a6:cf:2f:dc:36:41:48:ad:2e:56:be:2d:4b:08:99:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:06:42:55:68:47:01:71:CD:F4:92:83:4D:B4:B0:10:0A:9F:1E:55
            X509v3 Authority Key Identifier:
                keyid:63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:49:c0:7e:9d:71:13:47:09:14:a6:aa:33:42:e5:95:fa:80:
         93:d1:5f:6e:4d:da:ad:83:91:cf:27:04:ae:24:7e:3a:d6:9f:
         bb:88:58:c0:be:22:fa:5f:7e:c2:06:f5:ff:cb:3d:25:e3:cb:
         64:87:df:82:c8:d5:a7:ad:5d:3d:62:68:16:5c:b7:07:2e:03:
         bc:3a:b1:bd:95:59:50:69:fa:ce:f3:37:a3:51:71:cc:08:33:
         f7:e4:a3:26:d9:4b:2f:ce:a1:7a:01:ca:fc:5c:d3:1e:40:07:
         81:c7:bf:b4:88:52:cb:8b:d8:57:38:db:77:8b:32:ac:f5:53:
         76:07:32:5f:76:13:91:3c:06:4b:24:9e:b0:bf:19:c2:29:08:
         8c:00:a6:8e:95:fd:99:35:af:01:5f:0d:da:b8:af:f3:93:20:
         4f:a9:6a:67:71:45:9e:36:fb:16:2e:18:8e:d4:ad:13:38:70:
         6f:7a:76:ab:01:91:f3:e9:04:ae:b3:4d:59:70:5b:2e:e2:8b:
         76:d4:fc:12:6e:1c:1b:1f:a7:a3:c3:6e:62:01:e6:cc:38:3c:
         a3:82:49:1b:54:a2:5a:6a:2d:fb:ba:29:bc:fe:91:5b:67:9d:
         1e:97:27:60:e8:c6:9e:19:92:65:59:01:65:26:76:10:0a:ab:
         72:f1:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----