Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.mft
File:                     6m7iTqV6m_7QYMRlZ673EhDg-2I.mft (raw, json)
Hash identifier:          wQqa8kCG5kXDj1x4sUFdVTOqqLLQ8UgbB/wloTGb3WE=
Subject key identifier:   A7:C1:B7:77:E9:A1:7B:74:62:DA:2D:61:72:DE:7B:5A:AF:FB:41:50
Authority key identifier: EA:6E:E2:4E:A5:7A:9B:FE:D0:60:C4:65:67:AE:F7:12:10:E0:FB:62
Certificate issuer:       /CN=ea6ee24ea57a9bfed060c46567aef71210e0fb62
Certificate serial:       01962F065A5AFE5DA67D7D603C39F46CB975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6m7iTqV6m_7QYMRlZ673EhDg-2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.mft
Manifest number:          0666
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 6m7iTqV6m_7QYMRlZ673EhDg-2I.crl (hash: MTVxXVVlQ2TOBTRZmDjhYqcgirF8Lse2j+HqIK7YePs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5a:5a:fe:5d:a6:7d:7d:60:3c:39:f4:6c:b9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea6ee24ea57a9bfed060c46567aef71210e0fb62
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=a7c1b777e9a17b7462da2d6172de7b5aaffb4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:fb:c3:07:20:72:df:86:28:25:86:5b:01:
                    6d:56:76:1b:2f:ba:c4:03:93:b8:78:11:e8:9f:5d:
                    62:72:70:20:2a:9e:8a:b9:84:21:89:10:71:86:7d:
                    02:7c:eb:29:2a:01:fb:14:7b:ec:23:7e:58:1e:30:
                    5c:45:4e:f1:a5:ad:d9:e0:c4:84:fc:b7:94:94:52:
                    88:ce:88:ad:6f:0b:bb:ce:d3:85:11:f9:36:31:c2:
                    63:bb:3b:10:10:9f:66:7c:3d:14:1f:ae:b4:f9:9f:
                    b1:3a:07:5e:ab:6e:63:a7:86:6e:d1:d8:48:c4:c5:
                    61:b1:bc:15:d4:89:03:61:87:93:26:57:d5:79:6d:
                    90:6a:55:62:a9:2c:43:35:69:b7:b7:c4:01:a6:dc:
                    19:6a:4b:57:de:39:b5:6c:db:db:5e:44:91:63:b7:
                    93:f4:a9:ce:7d:74:72:d5:b9:68:78:63:76:60:cf:
                    cf:99:a0:87:bf:1c:ef:1f:8a:94:86:d2:0b:e1:a3:
                    22:73:71:71:69:6d:b3:d1:f7:4b:d5:8a:49:d9:ff:
                    c0:49:fd:10:91:ba:65:86:b5:29:60:8c:fe:a5:c7:
                    24:d3:37:14:6d:54:69:e2:f0:3e:64:4c:7d:8f:d0:
                    0c:dc:8f:ab:e9:d0:67:33:93:0c:57:81:76:00:a4:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C1:B7:77:E9:A1:7B:74:62:DA:2D:61:72:DE:7B:5A:AF:FB:41:50
            X509v3 Authority Key Identifier:
                keyid:EA:6E:E2:4E:A5:7A:9B:FE:D0:60:C4:65:67:AE:F7:12:10:E0:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6m7iTqV6m_7QYMRlZ673EhDg-2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/64fa39-3e6b-49c3-bbb7-b148d8a8687c/1/6m7iTqV6m_7QYMRlZ673EhDg-2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1c:81:4d:ba:0e:a5:9a:b6:f9:47:b5:a9:88:a0:85:eb:8a:
         09:48:d3:19:b5:f7:c6:64:73:8d:f3:64:db:aa:15:29:90:4d:
         86:f6:dd:d2:51:87:11:a8:7e:f5:43:f7:05:08:4c:dc:39:1d:
         b6:a7:b2:a3:be:e8:d3:55:cd:61:78:ea:d7:76:6e:ff:ff:f4:
         c6:13:d9:2f:64:63:14:a5:eb:3b:72:b7:ae:53:1a:8e:49:bb:
         0a:21:6d:31:36:af:09:41:92:54:74:b1:b2:b8:aa:1d:d8:59:
         81:88:dc:5e:f7:60:c9:92:a6:a9:c8:27:0c:44:f8:6b:4f:03:
         3e:9f:ac:ce:74:30:69:96:1a:2d:21:b2:fb:96:6b:27:c9:19:
         b6:ac:61:2c:b7:fe:64:53:42:78:aa:c8:22:f5:b2:40:9b:ac:
         16:66:51:95:1a:48:ba:6d:fe:41:05:fe:de:c5:98:0a:39:23:
         81:5d:26:b6:93:04:3e:e0:c3:aa:dd:4b:9a:4f:10:eb:e4:93:
         cb:73:c2:fd:5e:30:19:26:a5:43:34:c1:8d:09:da:b8:cb:f8:
         53:eb:c7:57:11:a2:dd:1b:55:28:5f:19:2a:3a:fa:a0:9c:25:
         41:1f:88:64:87:de:0a:8c:d6:e7:18:c5:11:7a:7e:ac:b0:f5:
         8c:70:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----