Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File:                     fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier:          Lb0GJcXVb356qX1Nwl4Akehq2cDoGiD9SjMXjhS6AHo=
Subject key identifier:   56:E9:45:6C:2E:85:F3:AE:63:7A:43:51:45:0D:5D:DC:BC:CB:2C:4A
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer:       /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial:       01962F06B8D615A4BC1FAE879FED7F0DD29F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number:          0E66
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: /U9HkJUlEVfXNGGtjlTrEPSG67PNOSuzip2OmrptJM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b8:d6:15:a4:bc:1f:ae:87:9f:ed:7f:0d:d2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=56e9456c2e85f3ae637a4351450d5ddcbccb2c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:29:a4:d0:8e:a4:69:d3:8a:de:da:ca:1f:
                    99:9b:a4:ae:7e:48:af:bf:53:3e:7b:ac:88:1a:70:
                    c5:9e:8e:3c:bb:48:ea:d4:91:ac:bb:d8:43:50:dd:
                    67:13:97:5e:11:23:c0:f7:95:9d:52:55:17:55:69:
                    be:bb:3d:68:7c:e7:72:b6:f4:2f:09:5f:79:f7:59:
                    66:33:08:1c:f7:24:29:9e:a5:84:72:78:80:33:a4:
                    cb:08:45:7d:00:3a:b5:9e:ca:e9:d2:43:1d:31:97:
                    79:e9:c5:54:86:56:29:b8:7f:ca:07:38:c8:63:dd:
                    42:43:e2:0f:43:d7:0c:2e:0f:e6:1f:fe:ea:b1:c9:
                    97:18:97:bc:f5:69:f3:a9:58:19:e7:29:ed:1d:66:
                    ec:1f:dc:f9:26:fc:d1:f0:35:f8:53:16:3f:4c:29:
                    8e:de:a5:43:eb:3c:d1:a2:61:17:6c:16:4b:3c:9f:
                    30:81:e1:20:80:43:1e:93:e8:60:43:42:57:16:e7:
                    b9:19:da:14:fd:a7:7e:0d:c4:0b:fb:ea:ef:f6:e6:
                    7b:e5:d8:0e:b7:db:45:71:4d:e7:c4:0f:73:fb:2f:
                    b2:89:f5:c1:4a:b8:ef:5f:ae:be:69:cd:50:ba:50:
                    36:f5:21:d9:6b:f9:3c:b9:fb:2a:5b:94:3e:d8:93:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E9:45:6C:2E:85:F3:AE:63:7A:43:51:45:0D:5D:DC:BC:CB:2C:4A
            X509v3 Authority Key Identifier:
                keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ab:60:1e:59:62:21:6f:95:fa:17:6c:a2:0a:56:65:f2:01:
         30:c1:b5:73:b6:60:56:bb:af:35:dd:bd:fe:e3:02:52:d4:26:
         6e:53:dc:28:e4:27:25:08:c7:b8:72:03:b5:a4:be:74:9e:b4:
         d9:2a:68:34:08:58:8c:ed:38:4a:5a:b2:ec:e8:3e:c8:c5:5c:
         2c:d6:6c:88:51:fc:15:70:8e:b1:0f:e8:a7:3e:e4:2c:f9:f8:
         a8:37:98:cc:a6:22:3b:27:a7:4d:ce:26:d1:f0:04:79:19:7c:
         82:7a:e4:df:c6:55:e9:a2:5c:65:ad:b0:8b:c2:27:88:05:68:
         1c:6d:3d:2f:d0:df:1d:de:c3:b9:69:0f:07:e1:11:d3:e2:fb:
         f4:18:4a:dd:b8:7a:85:2d:54:0c:46:5e:47:f1:09:0c:09:8c:
         0a:cd:d2:19:15:54:f5:67:89:58:eb:e8:be:76:95:31:58:b7:
         70:92:6d:8a:59:7a:f6:9b:a9:0b:f1:ce:31:27:00:b7:bb:c6:
         9b:f2:94:4e:ff:bc:e7:e2:81:2b:35:83:36:56:87:ab:cc:61:
         e0:6b:bf:3a:59:61:e4:0a:d8:e3:83:28:d8:c5:6e:e1:e0:c9:
         8f:35:84:e2:a0:33:6b:45:98:ff:02:87:32:3d:9d:5f:55:35:
         91:c8:82:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----