Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
File:                     h6xJPPKny2pLNPTYtva3eyqVXpc.mft (raw, json)
Hash identifier:          l2nL8x2xLKZGSN/cf7gNRjaBp/w3e96oNbjkLOI+M9Q=
Subject key identifier:   40:94:FA:F7:64:DD:2F:0A:2B:0B:7B:49:74:2A:1F:2B:B7:A6:98:11
Authority key identifier: 87:AC:49:3C:F2:A7:CB:6A:4B:34:F4:D8:B6:F6:B7:7B:2A:95:5E:97
Certificate issuer:       /CN=87ac493cf2a7cb6a4b34f4d8b6f6b77b2a955e97
Certificate serial:       01962DF43D060E0AD6F7BFAF85EAB5C95E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6xJPPKny2pLNPTYtva3eyqVXpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft
Manifest number:          0A2E
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: h6xJPPKny2pLNPTYtva3eyqVXpc.crl (hash: 5jhZVSrLWqNpur5iXsEol7n58qtCFIxn9A/UucsW58s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3d:06:0e:0a:d6:f7:bf:af:85:ea:b5:c9:5e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87ac493cf2a7cb6a4b34f4d8b6f6b77b2a955e97
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=4094faf764dd2f0a2b0b7b49742a1f2bb7a69811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:08:72:28:50:df:5b:ab:88:7b:07:da:49:
                    60:b7:9b:b0:b5:85:d3:66:fb:37:b2:3b:fe:34:56:
                    70:6b:9d:78:2d:96:1c:3c:d5:6f:4f:49:ff:11:6c:
                    83:6a:d3:28:cf:ff:d4:52:a3:d5:49:d9:12:db:9f:
                    19:e5:f7:b0:65:24:68:10:5f:f6:e1:2c:03:1d:fa:
                    7a:89:9a:e3:2f:c7:17:8d:0d:61:cc:1b:04:d3:13:
                    6c:ec:b4:4d:ac:ec:4b:f3:70:be:f8:7e:2a:1a:b7:
                    15:e6:42:79:2d:b6:27:2b:0d:af:99:e8:37:08:68:
                    c3:51:fa:68:8b:3b:a7:cc:c6:2c:5c:71:7b:44:85:
                    37:d4:f1:4c:3f:44:7c:d1:54:79:70:aa:1e:98:ba:
                    9f:a5:a8:17:d3:db:19:00:87:27:fd:43:ea:c1:b6:
                    2c:9a:a9:50:0c:31:5b:6c:a9:16:55:26:8f:81:d8:
                    45:56:2c:c3:54:07:d5:80:14:43:98:bd:a7:de:69:
                    a9:88:ee:af:fc:3a:85:cd:ef:93:5d:96:fe:b4:89:
                    b4:fd:34:98:ee:06:24:65:13:03:eb:37:79:23:99:
                    2c:bb:96:ea:d8:50:4e:94:7e:ae:6c:68:b3:21:89:
                    8d:64:ce:30:54:1e:e7:c3:35:93:8e:0e:e6:27:46:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:94:FA:F7:64:DD:2F:0A:2B:0B:7B:49:74:2A:1F:2B:B7:A6:98:11
            X509v3 Authority Key Identifier:
                keyid:87:AC:49:3C:F2:A7:CB:6A:4B:34:F4:D8:B6:F6:B7:7B:2A:95:5E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6xJPPKny2pLNPTYtva3eyqVXpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a58a1e-f733-4d9e-88f6-3414367b2d7e/1/h6xJPPKny2pLNPTYtva3eyqVXpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:23:dc:1e:da:d9:fc:c7:d1:67:f1:36:b7:e9:0a:88:5b:4e:
         88:15:0e:1d:05:ba:36:c7:79:55:5d:b6:4b:40:89:bc:35:a7:
         3c:f5:c4:f7:57:26:13:a2:d1:7f:7f:d9:32:a7:02:14:d3:ef:
         cb:03:88:95:ea:09:02:5d:79:f7:31:c4:b9:53:11:00:62:61:
         9b:77:9d:36:81:ef:cd:8a:f1:21:db:3f:e4:02:f8:8a:d6:ab:
         be:8f:89:39:3e:55:fb:c4:f6:ac:85:12:1b:9b:38:06:11:c6:
         c7:ee:fc:1d:40:37:eb:16:b5:e7:54:fe:0a:cc:07:23:e1:c1:
         7e:52:c5:c5:2f:5a:61:f6:05:ec:f4:f9:f3:ad:23:93:25:c6:
         a5:a4:a3:f2:86:82:06:84:0d:9f:d4:08:4f:c2:ce:96:71:8a:
         12:1d:67:4b:d2:30:05:f1:b3:77:51:db:90:24:a7:27:0b:64:
         ad:f6:98:6b:cd:ca:9c:c9:a5:ca:8e:4c:70:49:df:01:b0:e2:
         d7:49:f8:23:d4:b4:b9:0f:6f:bf:d1:63:11:29:a2:53:e4:c9:
         6c:ed:52:23:ce:21:e3:77:db:bb:31:68:ef:c6:20:4a:6f:3f:
         eb:c9:c9:89:a2:eb:28:26:21:33:a9:12:cf:48:8e:69:19:58:
         bb:c7:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----