Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File:                     1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier:          Y6+UTuTQgirjTpWTf6caU4OtA5Y2g2tV615uQpD2F0o=
Subject key identifier:   8D:48:B7:E0:BB:2F:10:1D:39:56:7F:A1:A3:5B:5D:14:98:03:7E:8A
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer:       /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial:       01962F744DCE4AE66BF8A011C874E512E600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number:          02D5
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: JHIV5Dtmu28mjHgLYJHhAFNai6v3mTcHM2IszmNJL+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4d:ce:4a:e6:6b:f8:a0:11:c8:74:e5:12:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=8d48b7e0bb2f101d39567fa1a35b5d1498037e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:5c:3c:4b:1d:dc:64:ca:7f:c3:2b:67:26:
                    39:8e:01:3a:74:4b:64:2a:d8:47:be:ca:ea:d5:b1:
                    5f:23:87:67:f4:2b:c3:c9:ac:37:7e:ce:45:8a:7b:
                    34:53:08:f3:81:4e:8f:8e:29:30:c7:76:e6:86:59:
                    7c:ac:2a:12:eb:7c:d3:98:3c:56:f5:8a:0a:95:88:
                    de:5b:24:0f:c5:d3:7d:3d:d8:cc:68:09:e3:7e:c7:
                    b7:c5:67:ee:c6:3e:9d:67:68:2e:6a:76:c2:79:43:
                    a9:98:3a:e7:db:8e:43:31:ba:a0:e3:e8:dd:79:ca:
                    af:8c:df:90:07:e2:a9:03:7b:4c:95:92:c1:39:31:
                    d3:48:c0:21:46:53:b9:49:41:21:91:33:ec:97:1a:
                    fa:67:41:00:11:a8:bc:07:00:c2:44:e4:0f:c9:78:
                    b0:2f:d8:12:26:2a:fe:60:29:93:b0:d8:9f:9a:88:
                    02:42:ff:54:d4:54:54:70:a8:1c:c2:f0:97:45:c1:
                    06:27:06:f7:28:89:e4:c0:47:5c:b6:9b:69:5c:e8:
                    aa:29:f4:a5:21:58:77:fe:3b:88:0d:5c:21:25:ac:
                    81:6c:44:81:10:c2:bb:0e:45:5c:d4:ca:fe:e5:99:
                    b6:df:df:8c:41:79:de:a5:73:54:68:57:a9:6b:d5:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:B7:E0:BB:2F:10:1D:39:56:7F:A1:A3:5B:5D:14:98:03:7E:8A
            X509v3 Authority Key Identifier:
                keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:73:fa:21:cb:7a:65:c3:87:e2:e7:5a:93:e1:f7:da:9f:44:
         b1:1d:de:2c:82:84:46:4f:3f:99:7c:14:e7:bf:f2:73:76:3d:
         f7:6f:f7:db:88:74:a4:6a:66:6d:1d:6f:f6:65:cc:13:34:f7:
         46:e8:dd:ee:c4:4a:70:5e:26:82:df:24:cf:1d:b0:ec:69:a5:
         e1:b3:eb:39:60:f5:d1:3e:2d:7f:eb:44:bc:2a:26:ca:c1:4e:
         dc:4a:b8:a9:fb:fd:b8:f7:cf:d7:40:81:a0:b1:f2:7a:eb:fe:
         59:4d:90:b8:c5:40:0b:01:c4:30:13:f0:e6:84:94:78:2c:4c:
         83:3c:54:d7:e0:b3:30:6f:5c:e5:dc:b9:b2:f0:59:ad:30:f8:
         3d:d0:dd:f5:d8:07:fd:5e:45:a0:51:0e:67:7c:0f:1b:f0:5e:
         1a:62:dd:e3:b3:97:6d:36:51:cb:57:e1:46:c3:6d:fe:ac:6c:
         df:04:e6:4b:14:ac:e2:af:82:d7:08:b6:a8:92:a6:57:60:ed:
         77:5d:33:26:ed:78:c5:5e:5f:c4:16:b1:85:e4:80:40:82:c9:
         f8:fe:91:60:83:53:13:41:7d:a3:2b:34:db:02:b9:23:a8:39:
         f5:d4:6c:c8:ad:a0:13:97:cb:19:48:f8:b7:fc:aa:e6:2c:f0:
         de:60:79:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----