Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File:                     6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier:          4R7R7URuGUJQ+gKhj4HnW6RxJz9vALVWJ92/lWGD32E=
Subject key identifier:   05:E3:0E:DD:09:A9:FA:39:72:97:D3:A5:E3:ED:78:28:30:B1:8E:B7
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer:       /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial:       01962E99951D11D1CF5424A6F61AA4F2DEB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number:          0C07
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: J6jieDrK+5sSxhSsW7KarSLsjcHdagLrnuQJrxPGqio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:1d:11:d1:cf:54:24:a6:f6:1a:a4:f2:de:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=05e30edd09a9fa397297d3a5e3ed782830b18eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:ed:15:fd:ef:b4:e4:2c:2c:ec:b9:cc:99:
                    fb:1a:8f:d4:db:ab:68:c4:a8:d3:57:0b:24:a0:f4:
                    d6:ca:79:83:e0:bb:ab:51:a0:c3:71:0c:52:2f:db:
                    ee:0b:b3:13:46:14:84:9f:8a:8f:71:d8:50:86:e0:
                    0a:41:a5:03:c5:a1:2c:90:f9:fc:e9:40:74:08:2c:
                    16:58:fb:5d:07:9e:f1:88:ba:c5:4f:3a:01:ff:44:
                    91:2b:b0:a2:54:9b:3d:9d:cc:2e:37:71:b4:76:60:
                    7f:91:46:ed:dd:c0:a8:35:1d:b9:ed:c7:50:7d:b4:
                    18:aa:9a:bc:db:48:f4:e4:4e:59:e8:50:41:51:c7:
                    70:87:7d:4c:62:0e:69:a8:38:75:74:c1:b0:33:69:
                    0a:e2:ee:33:3e:d5:a7:44:f1:22:c0:4a:49:e5:6b:
                    33:08:10:93:f5:35:3d:46:05:85:38:4a:50:f7:1d:
                    5a:71:4b:82:41:9b:de:a9:ed:63:1e:ff:aa:8c:56:
                    11:f5:46:78:c8:a1:95:ae:84:d7:fc:54:a0:56:4b:
                    d4:f5:4b:f7:1b:23:2b:36:19:b6:52:00:fd:86:a9:
                    a6:ac:7a:03:8f:82:27:38:12:f1:c3:ad:46:c4:15:
                    ab:76:7c:39:67:44:99:01:3e:86:74:4e:41:27:b1:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:0E:DD:09:A9:FA:39:72:97:D3:A5:E3:ED:78:28:30:B1:8E:B7
            X509v3 Authority Key Identifier:
                keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:24:ca:03:3f:3e:67:5c:63:9e:79:5d:a7:ae:b2:19:1f:5d:
         d1:7f:47:39:f6:d0:69:c1:51:5d:3c:67:ee:8f:2b:a6:74:f8:
         e0:6f:69:74:58:b1:0d:78:84:71:61:92:f9:72:dd:ca:09:04:
         23:9d:05:3b:0a:b9:90:8e:36:d7:64:d6:f3:c7:b2:5c:15:7f:
         ea:dd:91:47:45:36:7d:b1:f4:fd:53:ed:5b:a1:92:81:6e:73:
         9e:37:2a:f6:e4:d1:85:a8:b3:25:6e:f4:e9:fa:b4:13:99:28:
         06:bc:82:1b:2f:46:0e:d3:1b:75:86:69:e6:cd:7d:91:29:6a:
         12:10:43:16:e8:56:04:6b:c2:77:72:5d:77:67:d3:41:80:d8:
         ec:5e:d9:bd:a7:46:d3:d2:8e:ba:f4:94:00:7f:ed:31:c9:21:
         1c:c9:92:6b:89:65:36:0b:77:0a:ef:26:66:bf:73:6c:3b:8d:
         1a:72:fd:d3:49:4c:09:d1:20:0f:a1:37:ac:fe:9e:b0:d6:e8:
         0f:40:7b:ea:12:18:7b:aa:b1:55:ab:b1:0a:fb:94:b1:fc:23:
         1d:08:8d:3f:f1:31:ec:46:51:43:ee:c1:ff:43:84:38:7a:e6:
         2d:8b:12:04:b0:01:ee:b6:18:ad:4a:ce:1c:f6:af:98:c3:80:
         8e:d2:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----