Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          cLBrTuYs3jkHpWwRmnAKVX3caoW2Evxed2gQzrsXCdQ=
Subject key identifier:   A8:7A:9D:56:18:2C:A8:5D:CE:09:13:5E:7D:F3:6D:EE:6F:D7:67:5B
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       01962E992F61DDBF8CDCEC7E3D86237DA388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0B41
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: vF4+Z1b4QFfH7j/e+3AHAMkuxtq1q83tpKZrmIMBCSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2f:61:dd:bf:8c:dc:ec:7e:3d:86:23:7d:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=a87a9d56182ca85dce09135e7df36dee6fd7675b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:3a:5f:e6:5e:8c:f0:f1:6b:92:39:de:c9:
                    77:5b:ea:ea:a4:35:c0:e3:94:4f:b3:eb:a8:b8:24:
                    55:51:23:34:78:eb:af:43:e5:53:8c:6e:53:57:20:
                    69:8b:e8:93:54:23:ab:b5:ed:3c:5c:d9:a7:b7:7a:
                    aa:fc:50:ea:72:fc:1a:a3:6c:d0:d4:ef:f7:b8:8c:
                    35:0b:ae:84:0e:c1:7f:c6:ef:53:e3:42:d7:9b:74:
                    ea:60:de:d3:6f:45:09:45:d3:10:56:76:47:fe:fe:
                    52:aa:8b:b0:a9:98:ba:15:61:10:fa:e1:42:78:97:
                    6d:65:89:74:44:3f:6b:bc:00:ad:af:88:6c:3b:90:
                    d3:95:f8:18:f6:a1:53:2d:0f:7c:18:ef:10:45:cb:
                    1f:94:c6:d9:20:3a:d3:9d:81:2a:93:52:3b:71:d2:
                    eb:cf:29:7d:ff:28:74:11:04:f4:4c:dc:79:8f:f1:
                    46:53:8c:b0:d2:df:f1:66:1f:3f:4f:dd:57:71:c9:
                    94:41:f2:81:1a:63:3d:0b:4e:01:24:c9:3d:f8:2d:
                    73:4a:1e:1e:38:7f:cc:43:fe:3d:9f:08:43:ef:2a:
                    ff:ba:ef:35:ec:f0:3e:fd:84:82:55:08:01:7b:b6:
                    10:bb:42:23:f1:fe:6c:81:c0:b2:51:86:c4:18:6b:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7A:9D:56:18:2C:A8:5D:CE:09:13:5E:7D:F3:6D:EE:6F:D7:67:5B
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:6f:6b:25:f7:a9:54:5d:2d:3c:9f:2b:d0:f6:ef:67:ed:
         10:cb:59:cd:53:5e:7f:aa:79:ab:93:30:82:dd:d2:f9:f4:d6:
         82:7e:6e:c8:23:1d:a5:c5:25:45:29:e5:41:30:46:21:87:94:
         23:d1:08:bb:e5:f1:0b:ad:83:56:3f:8d:dc:65:27:09:e1:a2:
         d6:44:9c:f3:0e:a4:af:68:a3:2f:26:1a:33:bc:57:9f:b9:56:
         e3:fd:a1:d3:44:d4:9c:9a:d2:db:12:7f:72:03:f6:5f:ab:ab:
         d4:7f:ce:48:76:2c:77:a5:ca:cd:3d:98:82:a7:17:7d:22:a8:
         c3:d5:4c:bd:06:61:12:0b:f9:b9:c8:c8:f0:00:77:aa:d5:8a:
         37:88:a0:7f:fa:53:8b:b3:7c:ce:15:66:a5:37:91:60:21:f7:
         aa:d4:cb:2d:c0:f3:e4:eb:0d:79:40:1e:4c:65:37:c9:b3:ab:
         c4:56:a9:77:73:f5:03:f6:ba:dc:02:94:88:06:32:d7:64:6a:
         24:0d:7a:a7:6f:f6:0c:2d:b4:6d:db:6d:83:ce:0b:aa:5f:de:
         20:ea:1d:3a:6e:b3:84:a2:e0:a4:8a:c0:f8:42:c2:6c:bd:8e:
         4b:37:83:ad:b4:68:8e:5c:a4:0f:6c:c5:e5:5b:78:ec:99:22:
         d9:62:1b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----