Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
File:                     _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json)
Hash identifier:          bKCj9My2dYEFusIqBdmwCT4dNBM2MG6ntVcYhiAuUt0=
Subject key identifier:   CB:7D:6A:AC:C5:4D:6B:F6:40:24:F9:83:D1:D2:E6:6B:F3:2B:AE:A5
Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
Certificate issuer:       /CN=feceda2a080442972aea7255f8b33a760ecb31cb
Certificate serial:       01962E9904F16A0B24658D2C67E11A82B5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
Manifest number:          0AF3
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: TRbFhO+Lo5zgaIG+Xf4dGZy+LKmriPS9VXF8mXF9rnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:04:f1:6a:0b:24:65:8d:2c:67:e1:1a:82:b5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=cb7d6aacc54d6bf64024f983d1d2e66bf32baea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:ae:3e:7a:8d:d6:12:ac:df:56:c3:f5:15:
                    3b:1e:cf:b9:c5:40:51:fd:92:2e:2c:e1:a3:53:37:
                    85:e1:5e:84:24:b7:2a:c8:02:3a:59:f6:ee:84:8f:
                    cb:56:bd:e5:d2:24:b2:f5:94:15:93:79:1d:cf:0a:
                    1f:12:a7:bc:1e:29:61:48:f0:8b:4c:a4:c5:de:75:
                    32:ce:59:b4:62:c4:16:92:3a:7f:5c:1e:75:3e:98:
                    e8:43:c1:14:b0:5a:d7:58:64:8d:75:c2:dd:58:56:
                    58:73:04:a2:b1:cb:44:80:fa:3c:b2:a6:9b:1c:cc:
                    a9:78:96:2d:fc:ec:4f:16:d2:01:0d:a8:9a:a7:3e:
                    18:54:93:29:78:09:67:aa:7c:12:29:93:7b:e7:fa:
                    b6:36:ec:fc:bd:d2:47:75:f1:3f:b7:80:f0:42:35:
                    18:94:bb:3b:d6:da:cb:f6:16:52:0d:3c:a6:3a:47:
                    9d:38:fb:1e:c4:22:bd:c2:c8:68:4f:5d:a6:f0:59:
                    aa:45:62:49:52:82:40:e0:e6:d7:df:4b:80:8b:a3:
                    28:3a:4f:50:f8:42:67:22:56:43:84:6d:1d:c9:1e:
                    22:b6:01:29:44:3e:72:b8:27:af:d3:29:09:89:c4:
                    3b:c5:eb:ca:14:cd:d3:4c:99:50:bd:42:0e:97:d3:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7D:6A:AC:C5:4D:6B:F6:40:24:F9:83:D1:D2:E6:6B:F3:2B:AE:A5
            X509v3 Authority Key Identifier:
                keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:da:05:56:70:ed:51:aa:c2:f7:5a:1b:1a:6e:20:8f:38:a6:
         0a:bf:98:c3:13:04:1d:14:51:58:33:a6:a1:d8:9b:54:f6:47:
         33:a5:60:91:04:a7:89:cc:a2:f1:46:fe:72:a2:4e:75:f7:8f:
         0e:a9:6c:36:28:81:d1:57:e3:83:60:f0:c9:53:5e:99:39:d3:
         5e:3f:01:5e:d0:e4:9d:35:9f:1e:c1:d0:fe:b0:e9:d2:84:b4:
         31:21:7b:ee:bd:16:c1:02:8d:cb:96:58:78:e6:34:7e:0e:0d:
         90:df:86:37:52:5b:7d:a6:f5:30:d9:30:c1:3c:56:58:19:c8:
         50:64:e8:1b:a0:ff:eb:ba:7d:a6:8e:09:91:93:8c:0f:92:b5:
         2b:14:13:76:4d:0b:f9:91:52:1c:a2:87:4b:57:f5:ca:cb:a6:
         b2:84:2a:b6:6c:70:33:36:f6:cc:a6:73:32:24:83:75:58:46:
         77:f7:89:e1:eb:77:d8:18:25:a9:96:88:0f:a8:74:d6:c7:8b:
         b6:e9:10:1f:86:a4:19:7d:c9:fb:22:43:53:ae:42:6b:d7:ef:
         94:38:fe:ec:42:03:fd:4e:7b:f2:04:cd:30:40:7c:ab:e9:61:
         53:0d:d3:cf:64:20:35:b0:fc:fd:f8:bf:04:82:39:56:b9:6b:
         bb:6c:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----