Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File:                     6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier:          SkVJobnEaq6tcvTXh2Og2cxT/MzmzpNTY1Vcv/TdZA4=
Subject key identifier:   CC:00:DB:3E:A3:00:73:11:E3:A2:AF:6D:5A:C9:10:28:02:0C:15:B7
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer:       /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial:       01962F3D4AF6509E4B1DC05FB13640284AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number:          082C
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: PjY/F1b99lbF/knldMFPQ/nWqKJdjlNMzcXhFm+prYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4a:f6:50:9e:4b:1d:c0:5f:b1:36:40:28:4a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=cc00db3ea3007311e3a2af6d5ac91028020c15b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:00:e3:27:68:31:84:8b:fa:87:13:aa:30:
                    47:ad:1d:b5:6b:de:38:89:2e:ff:de:26:f1:a9:57:
                    77:c4:f5:8a:a5:de:c4:d2:55:b4:13:6d:82:cf:39:
                    c7:32:1a:4a:43:1e:18:46:fb:b1:cf:d1:76:8b:58:
                    2b:f2:ac:64:cc:c0:27:9f:d0:01:27:c6:6a:c2:10:
                    b9:d4:79:6d:4c:cb:53:cc:c9:71:0d:35:cf:bc:cd:
                    8a:a8:2f:f8:7c:cb:31:41:cf:d1:ac:a3:71:34:0f:
                    e0:bb:e4:4a:4a:54:d4:f3:43:bb:49:b1:fc:ed:ef:
                    96:79:1f:6b:a9:07:bf:c4:62:39:1b:f1:0a:b0:6e:
                    c7:a6:41:02:c4:99:13:9f:c4:35:ce:63:34:67:b8:
                    b9:d0:7d:d4:c8:74:a0:2c:fe:e5:d0:61:09:01:87:
                    ce:27:bc:92:40:08:96:ac:b7:50:31:8d:ef:26:bc:
                    63:31:f8:a8:34:f0:a8:08:31:49:8c:7b:f8:a0:39:
                    48:90:c6:31:3a:0e:a3:3b:19:4d:6f:b9:75:d7:b4:
                    5b:91:d7:9e:98:23:0a:08:1e:54:1c:27:41:17:60:
                    b1:1b:08:c0:45:91:18:f5:b2:bf:95:ea:0e:12:30:
                    66:7a:7e:46:b3:c5:35:e0:22:67:a4:31:26:85:c3:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:DB:3E:A3:00:73:11:E3:A2:AF:6D:5A:C9:10:28:02:0C:15:B7
            X509v3 Authority Key Identifier:
                keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:22:2d:a4:47:69:1e:55:3e:77:4a:89:ca:78:ad:f0:58:f7:
         6a:a7:67:f7:8a:d0:5c:fe:ea:d9:b4:51:60:77:80:6d:f6:55:
         3d:50:c2:9a:13:bc:1d:c6:9f:3a:b2:1d:56:8d:01:2f:c3:95:
         da:76:a8:b7:85:94:cf:a6:ce:95:5c:f7:9a:10:74:bd:3d:81:
         cf:ae:d0:82:0c:04:77:cd:93:f9:56:a4:42:8a:49:27:f6:39:
         50:ca:5a:be:81:62:69:e9:b0:e6:7c:bd:8d:fb:be:5d:bb:17:
         78:bd:21:e8:6d:ea:8a:b7:84:b5:21:aa:40:eb:26:7c:19:ee:
         29:63:b4:4d:6e:73:4d:cd:1a:b6:de:6c:48:3b:82:21:fa:f0:
         14:29:5c:31:6a:52:c0:2a:f6:9b:7d:ba:c2:16:db:c9:f7:57:
         bf:72:99:bc:0b:a9:14:36:2c:08:b4:3e:41:54:da:a4:5b:2f:
         34:8a:84:28:bd:a2:b6:9e:1c:84:c8:76:fc:83:f8:f7:94:3c:
         e8:55:9c:b1:a1:b8:3e:b6:97:0e:37:e2:6a:89:07:50:a7:eb:
         f8:26:57:43:0c:6a:25:fa:b6:d4:be:7c:6b:0f:a8:24:d1:42:
         c6:69:f0:77:a3:a4:80:f0:38:50:40:80:51:ea:20:77:fe:26:
         1d:82:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----