Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File:                     6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier:          skH9E+doxbDjbaIv3iTqND7xr7lOOiEvbvmOG49kU1w=
Subject key identifier:   C3:9A:49:1F:C6:77:09:CE:B0:84:11:1C:2D:53:68:EE:AD:79:9D:32
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer:       /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial:       01962F063E7E2A3A6FB4270F9D83450D5C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: IIDNUlbvw/gXuP5GVRUQuvJBkl/+4agvyc7a2GkmJdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:7e:2a:3a:6f:b4:27:0f:9d:83:45:0d:5c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=c39a491fc67709ceb084111c2d5368eead799d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:f6:0d:9f:b6:5a:ae:d4:07:7a:ab:56:aa:
                    9d:48:72:4e:dd:64:b6:2f:6a:c2:e7:a3:ce:ed:80:
                    df:ee:72:e0:91:f0:3f:5a:21:14:13:94:b5:05:04:
                    0d:a9:35:78:68:20:09:2f:8f:f9:8a:7d:c8:b3:df:
                    1c:48:ee:b4:91:10:86:cc:8c:f2:93:dd:35:fa:ca:
                    88:e0:5d:52:8c:8e:53:61:fd:96:d4:2f:2c:35:b5:
                    bf:a0:8c:b9:83:3f:6f:bb:5d:9b:6e:f4:f9:28:e3:
                    3f:ce:34:a7:5d:54:28:6a:2b:9d:a0:53:df:47:13:
                    3c:3d:10:9d:2d:c4:29:8f:13:38:1f:d1:fd:52:7f:
                    d2:da:76:53:fc:d3:54:d5:44:b9:32:03:a8:54:7b:
                    65:79:4a:9f:00:15:aa:a8:7a:47:2b:a2:10:4d:47:
                    32:e2:0f:e6:91:9a:ce:59:3f:7f:fa:22:13:84:28:
                    24:69:46:c9:1e:c6:91:98:ac:3a:94:14:52:ff:05:
                    bf:8e:c9:2c:01:25:53:1c:c8:05:fd:77:f5:3c:53:
                    36:df:20:c3:d5:ca:c5:5a:fe:3a:1a:9a:0c:f0:ea:
                    18:de:73:64:6e:33:7b:55:7c:c4:c9:65:eb:38:24:
                    ba:d2:fe:e7:ad:67:9c:ad:da:7a:78:2e:2e:8c:f5:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:49:1F:C6:77:09:CE:B0:84:11:1C:2D:53:68:EE:AD:79:9D:32
            X509v3 Authority Key Identifier:
                keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:c8:54:32:e8:ba:44:33:0e:05:39:4b:c5:1d:c9:5a:81:
         99:d8:28:99:d9:30:01:35:dd:eb:b8:42:1a:e6:3f:cd:d6:72:
         0f:57:24:ea:d1:b5:9e:86:29:ee:f9:a7:ff:23:de:5c:95:97:
         90:6c:98:4c:9e:37:f0:43:a0:6e:b6:50:b2:0e:34:8b:57:17:
         bb:5f:da:72:45:1b:ca:c7:74:47:c7:21:0e:1c:f7:01:3a:bc:
         4a:5f:0e:b9:05:ac:5e:28:21:c2:61:1e:b9:55:88:49:1d:93:
         7b:c3:b2:d7:4b:66:d2:3e:ae:6d:a8:96:4e:f6:18:0c:6b:f4:
         70:a8:25:6a:e3:ab:aa:69:ee:46:0a:18:01:43:c1:c4:89:77:
         5b:8a:16:ca:69:d7:6f:2c:a7:c1:59:14:c0:c6:9e:83:d1:af:
         1a:81:80:4c:56:0d:50:27:72:51:70:4b:ec:45:89:e9:eb:9f:
         06:48:9c:69:ba:fe:80:9d:7e:ec:54:bb:ad:57:1b:3f:fb:27:
         8f:45:99:4f:ba:3a:94:42:67:72:09:6e:20:44:4d:28:20:f0:
         68:e2:bf:e5:0d:24:6e:57:23:30:f0:f7:bb:94:64:f1:83:ba:
         cf:9d:7e:25:36:bc:c6:41:44:1b:c8:9c:69:c8:b9:5a:aa:e4:
         4d:4a:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----