Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File:                     r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier:          OEaiAjibEdM+Ur5OXvtUvQgbHM7l1SA1yOv+yAG8GwI=
Subject key identifier:   30:74:11:F6:B5:19:7B:C7:FD:CC:2E:D4:AC:2C:7D:81:90:64:E6:2D
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer:       /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial:       01962E990230E02CD618979E1CB44E5F6658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: v3dnN8vltwdB6fC2g3cUiStPRE9XRieyn5Hg6P9RyiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:30:e0:2c:d6:18:97:9e:1c:b4:4e:5f:66:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=307411f6b5197bc7fdcc2ed4ac2c7d819064e62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:d0:a6:81:ee:ee:22:50:8d:0a:88:2c:92:
                    58:a9:01:68:be:02:5b:99:54:92:c1:90:3d:de:27:
                    a7:f3:22:b1:ee:37:34:a5:9c:f9:c3:1d:6e:26:cd:
                    9c:bb:52:50:0b:12:ff:09:85:8d:a7:84:de:e5:ed:
                    3c:c7:df:db:ca:dd:a7:53:17:87:26:d6:b3:8c:e9:
                    73:5a:ff:90:88:16:90:75:ee:1e:ea:87:07:69:3a:
                    66:3a:5d:2e:86:4e:d0:b6:aa:79:e5:b2:ac:84:de:
                    66:81:2d:5c:6d:52:4c:0a:80:92:00:0e:fe:26:6f:
                    31:ce:9c:31:a4:a2:a0:ae:2d:35:3f:6f:47:51:be:
                    ed:43:ab:46:12:4e:e2:17:08:0b:45:9e:e4:00:5e:
                    4d:d1:c4:02:6b:4e:00:20:a0:28:16:cb:87:b0:38:
                    4d:bf:25:23:6d:ee:3a:92:08:8c:15:f6:25:63:aa:
                    81:b2:57:36:e2:79:a3:22:ae:08:f0:9d:5f:fa:a2:
                    94:c4:36:a8:63:66:76:6b:7b:77:dd:d9:8b:7e:a5:
                    a3:f3:73:3a:1e:e5:b6:05:b0:43:bb:f6:44:8e:46:
                    33:01:d1:ce:65:c3:13:15:87:40:55:9f:fe:ef:57:
                    81:1d:26:31:6f:f6:ec:6a:56:fc:08:5e:05:fc:37:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:11:F6:B5:19:7B:C7:FD:CC:2E:D4:AC:2C:7D:81:90:64:E6:2D
            X509v3 Authority Key Identifier:
                keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:be:98:64:9f:f8:61:ac:9b:01:6d:71:86:ae:de:fd:d6:c9:
         b1:6a:24:cc:09:d8:7e:4d:73:0e:e0:35:92:45:a2:8c:35:8c:
         e3:20:95:2b:5b:a1:48:4b:17:00:5e:b3:87:f7:d8:ad:16:5d:
         ae:8c:3f:fc:8b:46:37:56:52:b7:70:ed:1c:e2:18:98:0c:dc:
         78:81:76:68:a0:11:c0:27:7b:50:b2:ba:b3:05:bb:ba:71:04:
         a0:c3:57:fa:c8:0c:14:6d:6e:e2:13:31:55:a5:0e:fc:5f:6e:
         b5:5e:20:f4:11:7b:c6:4b:73:40:f6:74:17:06:b8:9b:90:53:
         1d:af:f5:9a:de:8b:9e:85:be:27:52:03:33:be:6b:52:b7:87:
         8a:de:3e:41:21:4b:ef:ae:34:e1:fa:6c:d7:36:fb:f3:d6:d2:
         b9:3a:62:3a:b7:f6:ce:4c:dc:14:df:27:10:c3:a2:8c:57:80:
         64:98:25:57:5b:8e:f6:ce:bf:31:ea:b4:d9:f7:c9:5a:87:9c:
         7b:b1:05:34:f8:3a:9b:36:dc:8b:f4:73:3b:6f:78:5a:84:50:
         c5:3c:93:b1:1a:c8:62:5c:4e:ab:09:ef:5e:41:0d:8d:44:9f:
         24:c9:a5:c4:36:1b:ff:84:d3:73:7e:40:f9:21:fc:ff:38:53:
         1e:3c:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----