Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File:                     xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier:          u5Zc06Byz1OphlWH0t25cvNR2Gak1Cr6LXEXIilPPeE=
Subject key identifier:   6E:B0:7B:14:5E:D0:C3:90:F5:1F:67:A2:04:FF:BF:90:54:8C:55:2E
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer:       /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial:       01962F748B707A0B2B05C0C9C2E55FF48E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number:          05C4
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: qVgUVrMF+FjvIIS3UNs6Z8URDgjh4xcuYf1lFqj072g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:70:7a:0b:2b:05:c0:c9:c2:e5:5f:f4:8e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=6eb07b145ed0c390f51f67a204ffbf90548c552e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:14:34:66:18:21:c1:ce:a1:29:30:f8:eb:
                    3a:a5:20:6d:95:ed:55:4a:8e:65:d8:de:81:4e:de:
                    56:17:73:7a:2d:40:ce:b2:1f:96:ca:24:f7:a3:37:
                    83:ce:5c:e6:af:39:a0:71:95:c0:0c:ba:4f:bc:1a:
                    c0:d8:5d:4a:93:84:6a:ad:c0:33:9d:e2:0c:ba:74:
                    b6:8c:40:51:65:02:c7:8f:5a:96:55:01:c7:30:93:
                    72:4c:97:4f:2c:82:c8:cf:a4:fc:04:3e:e5:0a:e6:
                    51:a7:b2:84:ea:d4:9c:63:75:f0:ed:72:60:da:78:
                    6b:12:44:e1:7b:81:36:f4:81:fa:53:80:84:7e:f7:
                    0c:40:35:df:37:4c:bc:6b:9e:48:f8:47:7b:7f:80:
                    88:31:2e:82:13:80:62:f8:b9:be:a0:a3:d4:1b:9a:
                    d1:46:5f:1e:e8:13:0b:e9:d4:d1:3d:a4:00:5b:36:
                    f6:4d:6d:2e:95:36:c0:34:f5:7c:27:8e:16:92:83:
                    37:e2:57:fd:97:1f:1a:be:b9:79:29:40:dc:b1:de:
                    08:80:ed:16:dd:22:6b:73:41:7a:88:35:5d:37:6f:
                    ae:be:7a:08:da:b8:a0:c7:1b:f4:24:f9:2b:58:07:
                    2d:73:5a:0c:37:f7:51:b7:e0:99:1a:35:cd:ef:39:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B0:7B:14:5E:D0:C3:90:F5:1F:67:A2:04:FF:BF:90:54:8C:55:2E
            X509v3 Authority Key Identifier:
                keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:05:0d:8b:a7:45:79:03:02:92:47:37:6d:7d:45:b1:86:
         5d:1e:72:53:41:50:21:98:05:0b:0d:60:02:1e:f0:1f:30:4d:
         4b:3a:ca:bb:8c:9f:8c:98:03:be:a8:17:41:ae:61:f4:9b:96:
         3c:d4:58:2c:d5:8c:6c:e8:8c:1d:8e:ad:60:70:1d:5c:dd:31:
         51:eb:46:e5:e8:77:48:ed:c5:8b:b9:85:1e:79:d6:3b:aa:fc:
         88:3e:4f:88:bf:3d:9a:9d:38:2f:a4:12:c0:4f:20:7a:90:05:
         3c:9d:bc:94:ff:f7:21:ef:6d:5e:5e:75:fb:52:b4:db:58:63:
         b8:50:35:4b:39:99:75:00:03:e6:1c:c3:2c:a9:26:41:86:02:
         1d:f2:6d:39:a7:7c:6d:5d:7c:60:8e:22:ff:41:b2:02:18:28:
         76:d8:1b:b2:3b:6f:91:ee:fc:91:c4:f6:ec:63:13:ad:ce:87:
         75:48:4a:b7:9c:cd:19:66:33:47:af:94:f8:90:d3:22:ec:34:
         44:1b:10:5a:8f:c6:52:1c:c2:aa:c5:3e:d9:ed:ae:1d:fd:10:
         b4:b6:11:7f:11:85:c6:1f:6b:ed:b2:47:dd:18:72:e7:01:bc:
         0a:86:af:69:df:cb:13:bf:77:3f:35:fa:dc:19:29:41:e6:8a:
         45:69:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----