Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File:                     67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier:          TyhMkry+6jEHbXOy+EcA251SExVELWyheeTAKa5H5ZA=
Subject key identifier:   0A:B0:CB:77:42:72:8A:7A:75:7E:58:5E:CF:6D:A5:A4:FE:0C:00:3B
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer:       /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial:       01962E61F9653B33D1920B0C204335208551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number:          6D
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: UImYNu2Xgfy4Jjxc1AO2IxPdO/8vYvAMGu/Vw/OYXEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:65:3b:33:d1:92:0b:0c:20:43:35:20:85:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=0ab0cb7742728a7a757e585ecf6da5a4fe0c003b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:89:64:63:84:eb:7d:de:ac:39:99:1d:89:
                    76:c0:ed:f9:ba:79:47:ed:46:66:97:c8:d8:81:ee:
                    c0:e9:10:d9:c5:ca:2a:af:07:d9:b2:41:b6:43:47:
                    2d:7c:5a:00:ea:b1:60:f1:6f:ba:e9:2b:3a:6f:07:
                    39:f2:61:7e:50:45:04:24:43:39:1a:3a:ef:19:26:
                    78:11:a9:96:14:fd:82:8b:1f:9e:49:82:57:4f:f3:
                    07:64:87:8f:18:5a:e7:15:2f:35:58:ad:c2:91:00:
                    10:fc:2c:f6:d6:95:dc:61:36:53:d7:90:7e:60:26:
                    fa:5c:10:96:b9:95:d6:07:23:44:8a:b3:2a:42:19:
                    9f:74:82:a0:a2:d9:fa:9f:10:91:ac:ef:45:d3:05:
                    87:e8:e5:2f:96:9e:9b:af:08:b2:62:7d:5b:1f:12:
                    4f:83:a1:7d:ff:c4:cb:61:76:f5:e6:f4:0a:e1:68:
                    bd:0e:51:b5:d3:29:3f:3e:ac:8e:4c:37:3e:85:b5:
                    e8:04:dc:be:8f:2c:49:70:21:74:9b:83:f9:50:40:
                    25:82:08:59:31:ea:6b:44:41:dc:ee:a2:c9:12:a4:
                    3c:b0:44:57:43:1f:8c:91:53:37:10:3d:c1:00:70:
                    f1:50:d1:c9:95:28:f8:62:28:bb:89:45:f5:00:e2:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B0:CB:77:42:72:8A:7A:75:7E:58:5E:CF:6D:A5:A4:FE:0C:00:3B
            X509v3 Authority Key Identifier:
                keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:0a:01:5b:34:60:f8:f5:bf:58:5e:c9:ab:4f:28:ef:ba:
         a3:28:d4:57:e7:e8:9c:e8:18:17:e2:bc:b3:76:45:06:58:91:
         c2:e9:91:9b:67:ef:9a:b3:cf:73:7e:75:8b:5b:07:77:eb:85:
         e3:fb:3f:dc:58:91:5c:64:0f:13:50:ff:2b:80:27:65:5b:87:
         e4:81:12:20:bf:22:27:98:20:33:58:02:88:83:91:58:16:89:
         24:7b:e2:9f:a0:d8:4e:5b:34:34:2d:9b:3a:8c:c7:ce:18:ed:
         7f:9e:43:44:01:33:79:ae:b0:e9:7e:9d:3d:4c:b1:d7:14:90:
         84:bb:41:40:eb:48:26:51:b9:51:7d:28:a2:66:6a:79:24:53:
         ab:ed:e3:74:89:da:26:ac:44:c7:21:f1:40:c3:62:6e:ee:06:
         1e:1d:f0:37:bf:bb:aa:cd:23:0e:e5:5c:30:97:74:e5:e0:28:
         6f:14:c5:cd:60:d2:f3:20:29:89:6e:28:6c:b6:c4:e6:90:d5:
         37:a2:5f:29:27:72:bd:01:e8:56:43:19:ba:3a:4f:21:67:65:
         40:42:ea:5d:ce:a6:a4:b6:fc:eb:e8:8f:88:93:21:f6:12:c4:
         fe:b4:ae:aa:3c:fd:17:b2:53:e0:02:19:d7:a7:56:19:54:00:
         6e:d1:48:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----