Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File:                     ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier:          3HKR3j3vtpv+fI0Kf8IDjS2Lz74CAqBmnd7a7z7oC1U=
Subject key identifier:   34:A5:F2:1B:16:21:E5:9E:F6:59:A1:A3:24:AD:73:A4:7D:8D:91:1E
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer:       /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial:       01962E9995BFA9E4863864A7AE3C7E9EFE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number:          01E6
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: 0EPO+hen1bz5/cwEBDjDvzIr3U32LIUqyknZGGFCv5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:bf:a9:e4:86:38:64:a7:ae:3c:7e:9e:fe:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=34a5f21b1621e59ef659a1a324ad73a47d8d911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:51:11:86:4c:82:68:24:e7:1e:7e:ef:66:
                    e1:c0:94:92:03:04:73:83:78:db:47:1b:7d:fb:7a:
                    dc:bf:8a:ad:3c:07:35:ef:62:a6:eb:a5:fb:be:e3:
                    f1:44:a2:1f:18:93:1c:88:98:c3:a0:91:bc:50:be:
                    79:06:d8:03:48:8b:bd:38:cb:73:68:6e:2d:41:6f:
                    8a:b1:cc:b1:b2:30:9f:4d:19:1c:d9:4f:20:25:cd:
                    13:00:54:34:2e:11:25:9f:b9:f4:08:22:30:5f:82:
                    0c:6e:38:ee:98:19:bf:33:db:33:0f:40:68:ae:90:
                    11:55:6f:e5:cd:5e:86:06:68:58:30:43:91:2f:74:
                    58:4b:5e:d0:09:e8:03:de:cf:9b:d2:4c:8f:27:e0:
                    22:20:85:78:7a:98:71:71:03:8a:b3:c4:4c:a9:8a:
                    83:48:57:3e:b5:19:12:c4:42:34:39:64:13:25:c1:
                    f5:2b:3d:2e:da:d8:e3:95:49:f8:2d:11:98:60:e0:
                    86:05:d7:10:0c:8a:f7:d4:e2:86:21:2b:4a:50:1b:
                    4e:8d:6d:da:01:f1:07:11:81:24:e2:d4:0e:23:2c:
                    42:3c:b6:03:44:77:08:45:1e:eb:49:2f:21:3e:82:
                    24:4f:eb:97:89:09:6f:94:cf:8a:25:bb:5f:8b:20:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A5:F2:1B:16:21:E5:9E:F6:59:A1:A3:24:AD:73:A4:7D:8D:91:1E
            X509v3 Authority Key Identifier:
                keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:d5:65:1b:02:c1:16:0d:b5:15:33:a1:5a:be:9c:0f:34:
         1f:4d:68:f7:1d:a3:b7:fe:b1:38:e3:65:09:4d:dd:2f:4c:a2:
         6f:ae:40:41:11:66:c4:25:1e:83:6c:dd:ba:a8:a5:99:b3:5b:
         0f:64:ad:b6:1f:25:b0:4b:25:6a:97:f8:10:9f:20:5f:37:52:
         62:e3:ac:66:80:9d:67:d6:97:26:32:47:3c:27:1a:94:fe:ef:
         15:4e:68:3e:1d:cb:bc:67:f1:e2:4e:c2:12:7e:14:95:45:fc:
         95:f5:97:7b:a7:ed:81:8a:ea:d2:55:05:e2:59:98:16:9a:ec:
         42:eb:ef:76:40:5e:04:28:49:06:83:dc:8a:73:fd:ba:88:e9:
         60:18:e7:f8:6b:eb:b5:cd:eb:43:6e:ed:f4:a5:c2:43:37:fe:
         7e:2c:d3:6f:8a:f3:05:74:38:4f:2f:f2:07:ab:82:a8:13:00:
         4c:5d:69:b6:6d:76:f5:70:62:0b:35:d0:48:60:85:41:e3:67:
         50:09:f3:ea:f5:a5:f1:78:a1:52:49:64:f7:f5:bc:09:65:31:
         06:3e:8d:56:c6:c0:1c:bc:19:8a:cf:85:ae:78:5b:ee:68:ee:
         17:16:f1:ff:6b:a6:cd:23:5e:ed:a3:e3:12:82:c8:8f:87:c0:
         4f:51:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----