Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File:                     C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier:          9fd58p8V649IJiUZIV0WKc0xKrIxkE2+vA+s04/lzJc=
Subject key identifier:   2E:C3:4A:BF:AD:C1:E2:07:B1:0B:FB:19:9D:60:8E:52:61:03:9C:24
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer:       /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial:       01962DF3AA4A9DBF9DD15F5FD3266D64FC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number:          0AFC
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: Xg0w2UCwqRfFSxzEHw2L1lDkpLyWAppQSS/06tcMSR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:aa:4a:9d:bf:9d:d1:5f:5f:d3:26:6d:64:fc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=2ec34abfadc1e207b10bfb199d608e5261039c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:8d:d8:00:df:bf:d8:67:03:e2:4b:0e:cf:
                    21:90:98:d0:8b:74:79:2f:e6:08:b6:9a:be:09:1a:
                    d8:03:48:97:78:80:ae:09:6d:30:af:10:b7:21:76:
                    f8:32:5f:25:2d:54:ac:04:3f:5a:56:23:34:aa:8b:
                    14:d5:1e:16:6c:03:59:aa:9b:88:2a:9f:3e:e1:d8:
                    4b:66:ab:d5:13:96:8f:11:ed:de:96:fd:35:0b:57:
                    06:d4:97:8a:5b:1d:ca:bc:dd:53:ac:ff:3f:ed:89:
                    23:7f:d9:07:68:2c:28:48:de:a0:7d:55:c6:85:57:
                    dd:b9:d7:6e:61:15:72:b3:e5:61:14:0e:53:a1:8a:
                    6e:31:72:78:fc:ed:d0:c9:61:68:93:fe:f9:1a:00:
                    1b:15:1f:55:b9:cb:74:db:65:ea:41:ba:07:eb:4a:
                    34:4c:ce:cf:db:a7:ac:fb:68:f2:94:a3:31:e5:cf:
                    87:02:41:82:17:e1:47:80:e8:df:ef:2b:4e:97:03:
                    41:f8:ff:a4:1d:fa:cd:28:78:70:57:7e:a3:6b:3e:
                    6a:a1:28:d2:f6:bd:88:4e:0d:37:ad:a4:e9:72:80:
                    94:35:94:5e:24:dc:24:cd:70:ee:5b:fa:0b:22:fb:
                    e8:3d:0a:ff:88:76:1c:56:76:6f:0c:05:7f:15:e8:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C3:4A:BF:AD:C1:E2:07:B1:0B:FB:19:9D:60:8E:52:61:03:9C:24
            X509v3 Authority Key Identifier:
                keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:d1:88:bc:5f:8c:d7:5a:ab:1d:65:ed:31:f5:8e:17:e6:
         64:21:23:9e:77:d7:ce:bd:50:3e:c1:3a:cf:d0:ed:f9:d7:1f:
         29:bd:81:fc:27:43:a3:5a:b2:81:2c:b7:35:54:7e:a4:ef:9c:
         2f:83:79:f8:c8:2e:71:76:e9:c6:b4:fb:de:6a:d3:47:67:9a:
         a1:18:ff:ec:23:3e:08:a8:83:f6:a4:5d:78:53:cb:ad:44:bd:
         d2:0b:b2:a6:f7:b6:ed:e7:3e:fe:6b:7b:82:62:4f:89:87:bf:
         62:f8:29:4c:93:f5:3b:72:82:7b:1a:4c:8b:03:c6:c6:cf:41:
         a4:ee:35:3c:46:71:a6:6d:68:21:95:1d:68:d9:a4:98:a0:8a:
         e4:fe:e4:76:29:8a:dc:ca:b0:94:69:83:d5:4f:46:7a:33:6e:
         74:ee:51:53:a0:e0:2a:2b:f5:38:78:72:b8:a2:42:81:c3:14:
         0b:62:3c:5b:71:f6:ac:20:dd:12:e1:0a:b7:eb:42:6c:c3:07:
         f9:02:4f:66:a1:3e:c8:f2:e0:d9:9e:51:7b:b2:02:d2:77:cf:
         cb:c6:3d:0c:db:2e:40:f1:b7:2d:7e:eb:09:a5:05:23:4c:48:
         b6:1a:9f:7b:14:10:91:3f:77:c2:17:92:44:4c:cf:7c:9c:23:
         6d:b1:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----