Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File:                     a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier:          me6lAuM9mCgHwGBSJRNarkRMKD/6hMdl3hr8RsZFpI8=
Subject key identifier:   C8:65:75:83:ED:47:E4:99:FD:94:99:7C:EC:8E:5D:E2:87:A5:7B:51
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer:       /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial:       01962FAB1D04F19F5F4186725B071B7F82EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
                          2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: 6YchNIvi/w3bujN1LJ2EtxcmAXf97iUSgADsRCLhmlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1d:04:f1:9f:5f:41:86:72:5b:07:1b:7f:82:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=c8657583ed47e499fd94997cec8e5de287a57b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:e0:cb:7c:68:15:14:bf:9e:5d:62:64:cc:
                    22:53:b9:f8:d8:5e:d8:e1:84:d0:0b:f9:7d:47:70:
                    8b:95:c0:77:60:43:af:47:9f:94:1d:1e:cf:95:2f:
                    3e:56:7c:60:a8:7e:72:22:d9:84:11:89:7f:0d:14:
                    c0:bb:b0:72:2f:45:44:3f:fb:83:66:18:8d:60:06:
                    82:e8:95:cd:09:0e:7d:e1:2d:aa:8d:18:44:63:42:
                    f8:a6:8c:d0:77:aa:0b:b6:63:ce:1f:ac:c6:e7:4e:
                    7f:51:98:62:7c:b0:8e:2d:e1:64:ce:10:85:36:5f:
                    d2:ac:ec:ae:50:41:52:b6:7c:55:1f:12:d7:2d:6a:
                    41:ab:e2:e4:f4:76:04:3d:98:1f:36:18:08:dc:69:
                    2a:ed:00:d6:0a:7c:89:a6:e2:72:00:ca:13:d1:e0:
                    37:65:7e:dc:27:1f:4f:3e:46:4c:db:6d:f3:3b:f1:
                    ae:43:f1:9f:2d:e8:88:35:fe:49:4c:b2:b3:5a:53:
                    0f:e0:c8:f4:5c:26:8e:bd:97:c2:80:47:66:8e:67:
                    12:46:b1:00:ca:57:4d:f3:20:3f:17:92:f7:41:cf:
                    e4:f5:26:88:e6:ac:8d:ff:30:95:89:4d:3d:fe:7f:
                    c0:5b:05:a1:20:51:90:91:9f:3c:f4:13:a3:fe:75:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:75:83:ED:47:E4:99:FD:94:99:7C:EC:8E:5D:E2:87:A5:7B:51
            X509v3 Authority Key Identifier:
                keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:31:78:47:d6:2b:56:0b:77:2b:7c:51:60:48:59:a8:dc:e8:
         f9:2f:95:a2:0d:39:b0:e2:26:5a:25:4e:d9:aa:09:a4:bc:2f:
         f3:5c:51:a3:d1:8d:13:c9:71:a2:3f:47:fb:96:69:df:49:3b:
         f3:e1:0d:2a:c0:de:92:f0:76:9f:56:ae:54:21:76:60:83:f4:
         53:fd:62:9a:11:d4:59:b5:90:69:02:6a:ea:c9:cf:f1:6a:45:
         19:3a:e8:dd:3a:88:5c:d3:b0:4b:1f:bf:27:53:27:b6:35:1e:
         70:f2:ba:a4:ee:5f:26:e0:e6:e2:9d:14:31:87:5e:39:a9:d3:
         9e:cc:66:11:6a:57:e2:0a:67:74:b2:a6:85:d6:c3:97:7e:e4:
         ad:80:6d:a7:f9:40:e1:2e:90:00:9f:77:26:3b:3a:6d:67:e1:
         89:92:00:f5:79:03:97:a2:f1:1b:7b:de:bc:e6:ba:a0:55:3c:
         83:5b:12:64:68:59:ba:3f:96:5e:22:ed:21:89:ea:fd:86:a4:
         7d:bd:87:e2:2e:69:79:86:9b:90:55:d9:53:e8:28:ef:9b:7e:
         de:6b:71:1d:c0:17:da:3a:00:d4:f0:f0:03:1d:fe:b9:e7:c0:
         ec:f8:2a:ca:ae:be:db:a1:2c:27:2a:47:4b:57:d2:1e:8b:a9:
         d7:d5:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----