Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          HpqGmUSyOYWqak65ehMa0/GlXgYtajecnPxv7wk1ELM=
Subject key identifier:   30:AB:1B:00:3A:BD:7A:CD:67:96:03:D3:09:3B:E1:39:0E:7B:6F:F0
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       01962F748FD25CBB279D7B8A086BEFF7F5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: /PaAE36EHEsf+CzmZB7I8sYGo2zYxfkjUifO1+MX7vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:d2:5c:bb:27:9d:7b:8a:08:6b:ef:f7:f5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=30ab1b003abd7acd679603d3093be1390e7b6ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:62:00:af:78:e6:07:3f:7e:dd:1f:c3:2f:
                    03:98:ab:96:2a:14:21:7b:bd:aa:b8:87:56:e8:1d:
                    84:97:1d:31:5b:8f:63:f1:bc:8e:ec:c6:94:06:51:
                    30:d1:59:76:3f:cc:29:d1:81:02:92:24:df:73:0f:
                    f1:29:cf:80:5d:bb:12:91:fa:b7:84:44:af:aa:d0:
                    8a:e7:3e:c0:75:9a:1a:7f:36:1c:c7:76:7d:39:62:
                    41:1a:12:f3:47:b5:ba:eb:48:a7:03:2a:03:98:2c:
                    36:3e:c1:f2:6b:46:7f:78:95:5a:8d:ec:d3:e2:b1:
                    d0:7d:f8:0e:8b:c9:d3:df:cb:b1:90:35:4f:f7:a6:
                    75:8b:3e:62:cd:07:21:c7:95:43:f7:85:bc:cd:36:
                    f5:6e:9d:d2:b2:5c:f6:a2:bd:a4:75:f8:7e:d0:52:
                    7b:35:6d:7e:8f:c8:c3:42:f6:28:c4:c4:eb:28:e0:
                    d6:fe:01:27:e3:79:70:34:88:4b:96:ef:a1:cf:4c:
                    30:98:04:97:dc:ea:9f:49:f0:09:46:42:65:26:fc:
                    41:a8:f3:f8:3e:cd:d3:5f:3f:6d:2c:b9:57:92:a6:
                    27:7f:c3:15:bb:20:bc:52:36:39:8a:8d:3d:e9:dc:
                    28:75:6a:b3:cb:29:42:5d:ba:6a:40:78:88:ab:70:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:1B:00:3A:BD:7A:CD:67:96:03:D3:09:3B:E1:39:0E:7B:6F:F0
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:f4:a8:7a:d3:02:79:c9:40:de:8c:cc:e8:36:98:92:f3:
         7e:c6:12:cc:18:f1:a1:0a:6a:4f:6b:ef:83:b5:e7:e1:3b:60:
         12:e1:08:f4:82:d4:59:1a:af:1e:19:2e:80:88:83:17:15:6d:
         da:d7:41:73:c4:d4:05:2f:a5:03:47:7c:4c:59:02:fc:aa:a3:
         be:17:f4:fc:64:e7:c3:1b:7d:62:45:20:02:0c:07:aa:63:32:
         ae:e0:ac:15:b0:9b:a5:fe:81:07:df:23:88:ac:e8:4b:80:bf:
         db:06:90:02:1c:48:c1:18:77:1a:64:53:09:c4:d1:e4:67:fa:
         b6:ee:32:15:f4:bf:0a:1a:72:69:08:72:02:f1:29:d8:8d:fc:
         e8:4b:fd:18:60:24:ed:e0:42:7f:24:31:d0:c4:3d:1f:04:61:
         15:3b:a7:0c:32:45:f4:68:8f:b3:de:de:9d:e0:c6:74:8b:87:
         a7:a7:e9:9f:98:f8:e9:03:db:da:85:f6:7b:cc:56:b5:a7:cd:
         3e:73:34:ff:53:0a:26:c8:b8:d2:a6:69:70:43:2b:cb:d9:c5:
         dd:0f:a3:d3:b3:81:f5:d6:0e:fa:57:60:07:d2:ad:6f:d3:9d:
         39:26:e0:64:42:ec:88:fc:3d:85:64:2c:6e:8a:f7:bc:1b:c9:
         b8:7d:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----