Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File:                     TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier:          dNJIHlmfrgSxUFTlcq1rD2+8M0axGRq0Hoq74vmsTOk=
Subject key identifier:   E6:CB:C9:BE:48:46:2C:39:E4:F1:82:0F:C0:52:03:1E:E1:57:95:94
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer:       /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial:       01962E98DAB1499125379197F61D9B0D1A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: yMR9VUSA9qYL06rAkt6JGsmvsQgWvLX3ss0pTta7u1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:da:b1:49:91:25:37:91:97:f6:1d:9b:0d:1a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=e6cbc9be48462c39e4f1820fc052031ee1579594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:ac:fd:47:ee:de:d3:f8:44:85:24:3f:ed:
                    32:8b:d8:bc:58:ca:5f:83:9e:39:d3:e3:75:eb:da:
                    52:ae:66:e9:a8:03:ba:53:2c:c3:5b:fe:9f:b3:9b:
                    a5:92:ba:89:15:d6:59:40:f6:84:6c:76:bb:04:b8:
                    df:a0:3f:24:2b:aa:4a:f8:52:b5:c4:5d:12:0e:83:
                    3c:f5:8b:32:59:c7:fa:2b:fd:8f:9b:72:90:85:84:
                    9b:aa:aa:ba:08:c0:7a:59:76:70:ad:8b:c5:70:f2:
                    4c:7e:4c:7c:74:89:3e:95:5d:6d:69:8a:dc:68:a6:
                    30:1e:01:03:d1:46:f7:d8:cd:74:9a:b9:9d:41:db:
                    54:f9:7a:db:20:d0:72:28:a1:b3:68:fe:1b:af:7d:
                    5c:72:07:f6:66:03:c0:12:83:3e:f0:ba:0d:c3:ec:
                    3e:83:40:a6:03:ed:84:d7:bf:66:ca:fe:53:69:8f:
                    2e:3d:70:64:86:77:a9:ff:b8:be:cf:b4:6e:d1:b9:
                    a4:e7:bf:7e:ab:0f:54:d5:c2:5e:ec:ad:aa:b4:23:
                    5b:32:61:bd:c1:c6:a2:7a:0c:98:e1:e5:84:94:28:
                    91:3e:76:d8:9e:f6:d1:41:93:0c:53:a9:f9:e9:24:
                    a1:66:f1:06:4c:0b:8f:3e:e0:7c:87:d0:4c:a9:57:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CB:C9:BE:48:46:2C:39:E4:F1:82:0F:C0:52:03:1E:E1:57:95:94
            X509v3 Authority Key Identifier:
                keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:04:3f:56:ed:40:a2:b7:8e:9e:bc:b5:c0:b2:04:13:dc:d2:
         4c:36:e1:0d:75:af:3b:69:51:c3:a4:28:dc:22:09:98:e9:6f:
         16:cc:3d:c9:54:e9:ad:75:4e:24:e2:e9:26:9f:c4:aa:0a:c4:
         38:3e:ec:b9:f4:6d:e3:c1:f4:b0:b2:4c:8a:5f:90:b9:fe:ee:
         3a:2d:67:26:6e:22:0c:a2:b1:0e:19:09:07:38:60:21:6e:fc:
         22:23:47:90:a9:7e:8f:ad:64:f6:4f:f5:e1:e8:92:62:85:80:
         73:f4:ae:92:d3:38:81:7f:d8:eb:83:e7:1b:ad:d3:46:72:5f:
         7a:d5:e7:42:17:02:29:27:be:e9:98:05:d6:b4:85:ec:30:aa:
         eb:b1:df:b9:f8:bf:b2:17:cc:5f:db:0d:60:1a:eb:26:eb:7e:
         6b:55:81:c1:73:84:0f:ba:89:99:34:65:ca:06:ee:9f:0e:43:
         31:d8:4f:d8:17:aa:66:63:d7:cd:01:42:b0:20:bb:e9:b3:e7:
         5d:09:de:c0:c3:cc:fb:16:2c:65:25:f3:3d:60:65:29:e7:c4:
         f0:28:1c:d0:cc:df:5b:b4:5f:58:67:7a:5b:1b:0d:1b:47:7e:
         40:f5:d3:f9:c7:e1:92:76:c5:57:12:0c:0e:d3:13:66:88:8d:
         71:b5:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----