Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File:                     aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier:          8ezLxtMfDKnXy6QlSEGD8lVI5Z6MJ942tu6UQQOPE9w=
Subject key identifier:   D5:6B:EB:38:E5:C6:46:88:1C:B3:09:A1:26:7F:34:5B:E5:21:E5:65
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer:       /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial:       01962E61B7485CF3ABFEE773EB4DE3DA9595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
                          2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: 84MEkFzgctlII/OkoZPr3GTJNRVkx1Ap/hDu4p9Z40Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b7:48:5c:f3:ab:fe:e7:73:eb:4d:e3:da:95:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=d56beb38e5c646881cb309a1267f345be521e565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:d1:72:c8:18:50:d6:81:58:c4:31:5b:41:
                    d8:7f:3a:df:ff:42:f3:74:6c:f5:8d:62:ee:00:37:
                    b7:46:d6:cb:10:44:b6:40:b5:cb:88:a1:4e:a3:80:
                    b2:c0:0f:fc:68:e8:2f:19:26:32:46:8e:a0:9b:7b:
                    47:8c:66:4c:ea:5b:ec:0e:fe:f9:e5:22:4e:b8:b2:
                    99:dc:c6:0a:e7:a4:23:d2:2a:59:36:0c:9f:0b:69:
                    2a:ec:ff:26:ff:ec:6a:45:ec:69:ee:45:8c:f9:65:
                    94:4a:98:c8:77:b1:94:47:77:00:1f:69:67:33:6b:
                    6a:41:f4:d6:05:bb:d5:09:62:a3:e8:c3:bc:63:92:
                    1f:e5:ff:af:df:0c:a2:0d:69:5c:66:93:7c:60:9e:
                    be:8b:c1:29:e5:dc:ab:7f:e6:f3:ff:3b:af:19:0a:
                    c7:20:a3:f0:a8:cd:eb:72:92:50:81:df:9c:72:88:
                    9c:a3:2a:9f:75:27:77:4a:7e:02:8d:9a:e6:6b:9c:
                    4b:95:c7:8e:26:14:4a:c1:8f:a2:a2:69:53:ad:a8:
                    83:48:41:b1:e0:7c:64:88:84:a9:52:20:66:70:04:
                    91:d7:38:17:3c:c3:01:95:62:ca:8c:75:c8:e7:0c:
                    38:93:29:e4:11:f1:f8:76:74:6a:5b:32:1c:d0:83:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6B:EB:38:E5:C6:46:88:1C:B3:09:A1:26:7F:34:5B:E5:21:E5:65
            X509v3 Authority Key Identifier:
                keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c6:cc:c9:a2:98:15:e8:60:75:d7:6d:10:7c:05:ec:55:72:
         75:00:a5:a9:41:65:80:a5:f4:ef:fe:2a:9c:fa:69:f2:66:91:
         ee:b9:67:e0:06:ce:91:3e:68:cc:a7:56:57:de:ba:e8:2d:f4:
         ca:40:b8:89:02:d6:89:9c:8f:ca:6c:c9:ab:a4:dc:e3:6f:99:
         84:20:3f:6b:33:b2:be:11:ee:c5:48:b5:14:47:9b:64:7d:02:
         b5:e7:1f:1b:53:c5:30:e8:f6:7d:5f:c9:b3:c9:11:de:5b:06:
         f2:79:90:2a:7d:5c:e1:64:a2:4d:79:20:34:e3:6e:80:c7:0d:
         17:89:18:0c:40:db:58:ba:5f:08:f3:2f:35:0d:36:d6:8f:83:
         8c:fa:55:b7:05:f0:c3:70:01:0d:ff:3d:e8:01:db:c4:37:c5:
         2d:a5:a6:c2:73:c0:e0:1a:80:cf:88:10:d9:3d:87:fd:d1:c5:
         2f:96:ca:33:fe:f9:c8:87:a1:fe:bc:45:e6:62:e1:8c:af:ca:
         c3:8f:fb:bc:c2:32:23:5b:84:f7:87:9b:ee:44:99:dd:4b:2d:
         25:63:d1:3d:f4:f3:12:0c:61:5e:72:5e:bd:56:16:b3:87:46:
         5d:5c:06:7e:05:f7:0c:c3:92:cf:98:91:e5:d6:f2:41:8e:9d:
         9f:85:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----