Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
File:                     ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft (raw, json)
Hash identifier:          shHFFwYrxIYfwixUp17n2ihSP1lthWESb6NLYlrlhiI=
Subject key identifier:   4E:BA:E9:DD:C1:80:05:76:11:13:4F:FC:2A:EA:96:32:1F:22:2E:EF
Authority key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
Certificate issuer:       /CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Certificate serial:       01962E987C08EFCF6F064BA0C533B3A95432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
Manifest number:          10A9
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl (hash: K5l3rlqWxzLXlWX6tieD2QYB/8hykxRnAxGsmXASXk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7c:08:ef:cf:6f:06:4b:a0:c5:33:b3:a9:54:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=4ebae9ddc180057611134ffc2aea96321f222eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:85:ea:a3:cd:74:56:2d:6d:72:88:9f:66:
                    76:fb:5d:b7:ea:b2:61:27:c7:75:9a:b8:9b:93:cb:
                    e5:eb:b1:cd:df:b7:91:53:f4:72:a2:94:0c:f3:89:
                    2f:61:e6:52:32:96:2e:29:4d:f0:78:0b:9e:49:c6:
                    c4:fd:66:1b:24:f4:72:f7:86:55:91:0b:38:78:3c:
                    3d:e2:86:4c:97:ec:b3:6f:84:f3:6a:f9:60:8d:7d:
                    06:69:c6:74:8e:59:0e:f8:07:c2:10:c1:54:95:53:
                    6a:f4:9d:49:24:57:e3:b5:fa:da:74:3c:ca:f9:16:
                    9c:69:2e:41:15:cc:b2:b5:33:7f:8f:14:41:aa:68:
                    67:65:f8:f9:52:17:a4:d8:48:7e:2e:e7:15:f4:76:
                    0d:6b:d4:9e:40:0e:02:13:55:4c:40:dd:de:66:66:
                    29:a0:d9:9d:d3:e3:f5:4c:b9:93:bc:d8:c7:60:50:
                    70:c3:da:d7:41:2f:11:f8:a1:ce:6c:36:08:68:8a:
                    a3:e0:ad:04:6f:de:37:29:9c:a8:19:c9:e6:2f:31:
                    9e:75:76:dd:2e:76:49:d9:8c:c3:76:9b:98:16:34:
                    b8:50:20:91:c3:aa:ee:7c:99:ed:27:62:d5:1d:6b:
                    f7:1d:68:c4:33:cf:31:83:94:9e:83:b5:7c:f9:66:
                    1e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:E9:DD:C1:80:05:76:11:13:4F:FC:2A:EA:96:32:1F:22:2E:EF
            X509v3 Authority Key Identifier:
                keyid:6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7a:e3:04:b0:4e:00:20:1e:ff:b2:2e:f4:c1:a7:c4:3a:06:
         c4:6f:1d:2d:51:4a:04:fc:6f:9f:42:ed:9b:1e:28:50:df:24:
         85:77:b8:b8:38:ba:9d:52:e5:43:05:e1:33:96:da:79:d0:df:
         5f:87:ec:9a:ea:c3:e2:5b:c1:4e:b4:6d:e1:72:ae:46:62:ec:
         14:7c:71:2d:4e:52:84:f3:f3:c2:6a:02:89:3a:f3:8f:49:e7:
         a1:00:22:2b:1a:52:63:29:ca:44:a9:e1:b2:41:8f:e5:23:83:
         e9:c0:cb:da:d7:98:ab:1e:a4:c6:4a:78:cc:c7:b4:42:fc:9a:
         34:68:82:96:72:d0:6a:28:5d:11:e1:99:9b:05:b6:b7:cf:67:
         5d:76:41:39:4d:31:2e:f6:73:bf:51:43:f1:d9:84:f1:3a:06:
         36:2d:9c:0a:70:db:2d:a1:c5:0a:27:77:80:30:47:27:ca:eb:
         87:66:0a:f7:8c:71:64:39:94:fa:4d:e2:e9:a8:2f:20:d1:56:
         28:26:4b:28:e3:70:84:b6:86:35:db:12:b0:86:70:28:d2:05:
         8f:2f:cf:1f:57:9e:08:3c:7c:d0:67:56:3e:d5:c5:81:48:95:
         4d:69:e6:3e:f8:50:39:c2:e9:5b:9b:b4:9f:a5:f0:a0:15:a5:
         77:be:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----