Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          Yp1wYyCdr3yOFgNyaxcunDOeJ6VdLXKkbSMjJJ2YlIY=
Subject key identifier:   03:0B:8A:F5:15:59:64:A3:71:DA:AA:6C:CA:CD:AF:94:5A:4A:3B:BD
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       01962E6201B6B577A7DEB6279A524D6D75DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          0224
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: CC/e5NOBgkLxpLMFkyygT9K0NxU5t3JAgVrV1b4Nr7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:01:b6:b5:77:a7:de:b6:27:9a:52:4d:6d:75:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=030b8af5155964a371daaa6ccacdaf945a4a3bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:4f:61:19:57:0f:d6:25:9a:d6:63:19:49:
                    01:83:20:a8:6f:2e:2c:42:47:be:88:b7:c6:07:91:
                    6a:66:83:ea:2b:19:0c:72:e4:11:77:93:de:db:3d:
                    dc:ab:bc:a6:5f:74:cc:3f:b1:90:ff:1d:85:ea:93:
                    51:ab:51:d6:a0:2a:c2:a8:e7:a0:3e:6a:e0:d5:eb:
                    4d:05:ee:f8:22:3c:2d:56:ed:2e:0f:da:46:06:64:
                    c5:09:a8:00:f3:c0:2c:ca:84:cb:c3:b4:3f:99:af:
                    bb:bf:a9:d5:70:df:fb:06:dc:66:06:a4:ed:10:cc:
                    9b:03:80:94:05:82:56:60:9d:4c:73:ae:f6:fb:43:
                    d9:10:09:c8:ca:95:ec:48:33:0a:39:e0:cd:15:b5:
                    b4:67:1f:f0:f9:e8:74:72:bd:bc:a5:c5:27:b4:a4:
                    55:2c:44:a0:62:c9:31:5e:8b:7d:26:3d:9c:48:ef:
                    2f:f0:50:c6:08:e1:ec:0b:d9:ce:2d:33:99:05:db:
                    5b:82:b8:53:13:0f:f3:10:28:cb:d6:d3:57:e9:da:
                    de:e6:13:af:23:98:2f:59:32:74:f7:da:c3:b6:3c:
                    25:d9:74:9f:2f:d2:dc:73:68:6e:48:e1:cc:af:b0:
                    a4:06:87:0b:88:eb:d7:b8:48:7d:29:50:5d:32:37:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:8A:F5:15:59:64:A3:71:DA:AA:6C:CA:CD:AF:94:5A:4A:3B:BD
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d9:3b:7e:84:ea:01:74:6b:8f:6a:5d:80:6d:11:1a:b0:7d:
         d2:0b:83:dd:eb:1e:e6:f9:38:ea:99:90:5c:5b:6d:08:74:99:
         67:6c:92:c2:51:b1:da:b8:0c:21:e8:ac:fe:4d:13:82:17:10:
         e8:c8:aa:e4:79:cc:a5:73:56:88:83:9c:92:f2:92:a7:e2:90:
         23:22:53:07:13:b6:84:cd:1c:5e:43:0f:00:b9:b5:33:45:e3:
         af:77:d5:f6:20:46:7a:c3:54:9d:a4:d0:3c:5a:fd:a0:03:2a:
         0e:f9:52:e0:e7:85:a7:18:8d:93:24:0f:fe:97:4f:c1:58:65:
         88:5d:6a:65:19:80:d5:ee:d8:e8:cf:34:61:d5:ec:8a:1d:b7:
         e1:0c:5b:99:8a:20:51:dc:fc:b0:8f:11:e7:db:dc:6f:8f:b6:
         ba:b0:12:4b:20:72:df:56:a1:53:09:b3:b0:96:16:3f:a4:76:
         7d:22:dc:c3:6e:1d:ce:a3:ee:c0:69:b7:58:eb:b3:dc:49:0b:
         e0:c4:4d:3f:e9:a5:1a:9e:ec:7c:5e:9d:3e:06:ca:cb:84:b4:
         1e:39:f6:c9:f3:2f:e2:53:81:08:0a:56:57:33:c9:9c:ce:3d:
         64:90:1d:c3:78:54:67:03:7c:27:fc:a7:1b:f1:82:01:34:43:
         27:8d:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----