Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File:                     a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier:          yfHTag5C79aMkbvI0P8ZSG41cGEAQdfTJRyZDh445DI=
Subject key identifier:   36:60:4A:BB:10:01:88:F0:90:0C:4B:DB:E5:31:B1:F9:A1:5F:D7:C0
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer:       /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial:       01962F066565DC8F781D1BB46353CB62A7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number:          0FC5
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: VcnG7Mm82mMi4zAvJGvNkg1E8mreKHx1LznOjBF0TU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:65:65:dc:8f:78:1d:1b:b4:63:53:cb:62:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=36604abb100188f0900c4bdbe531b1f9a15fd7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:e6:1c:f9:b6:a5:35:2d:d8:e0:88:01:43:
                    00:b1:d5:c9:eb:5b:a6:1b:b9:c8:7b:62:7c:4f:fe:
                    e6:e0:fa:8d:40:96:9f:55:b3:4d:f1:bd:e5:4c:55:
                    b5:63:fb:da:9f:f7:ce:8f:a6:6b:3e:fb:87:5a:33:
                    ac:ef:49:aa:2c:0c:fc:59:70:5d:c6:31:64:18:76:
                    5e:d6:1c:9f:a3:7c:95:35:00:fa:67:86:6f:25:f1:
                    bf:24:9e:c3:1c:50:c6:6b:ed:6d:ca:46:fd:18:30:
                    c9:4d:b4:60:3d:12:a4:59:fa:1e:11:21:de:e0:2b:
                    c1:9e:dd:75:7c:5b:3a:c9:b3:8c:83:27:f1:43:59:
                    c9:04:30:a1:8a:b9:f9:6c:fc:04:e9:02:61:8b:4a:
                    c1:54:6b:91:01:b2:ac:76:c1:38:22:f3:82:8a:5e:
                    b5:5d:b1:ce:e0:b5:43:b8:a4:d5:5f:28:dc:39:6c:
                    0b:80:72:74:61:e2:b3:43:55:d3:8e:af:8e:f8:3f:
                    4a:c4:18:e4:00:bd:c2:80:2e:e5:a0:00:0c:34:2e:
                    a9:89:ff:c4:83:0b:82:70:6b:e6:84:dd:5e:87:40:
                    73:c1:9e:dc:ae:15:6c:96:1b:92:1a:77:22:a0:0d:
                    bb:c3:bc:6f:88:5f:ef:ed:e3:c7:cc:01:e1:ed:45:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:60:4A:BB:10:01:88:F0:90:0C:4B:DB:E5:31:B1:F9:A1:5F:D7:C0
            X509v3 Authority Key Identifier:
                keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:ba:7c:f6:de:49:1d:b2:0d:fe:e5:27:0d:97:c8:e2:d9:
         8c:eb:c7:ee:27:eb:d5:4f:6f:eb:a7:1a:00:59:2c:e9:4c:a9:
         ba:e1:f8:55:3b:0b:b8:90:80:9a:b8:1b:f2:ac:ec:1e:7b:61:
         c6:73:0b:ea:84:64:ec:09:5f:be:07:f1:a0:c8:8b:87:fd:0f:
         d9:7a:11:a5:a0:c2:46:d1:c4:95:21:c0:c1:5b:66:8d:4c:81:
         ba:be:83:47:04:19:97:c4:3e:ff:e4:ce:24:24:5b:2d:02:87:
         9b:8b:da:e9:3e:e7:68:80:8e:ec:73:c9:d9:e0:28:4a:fc:09:
         d5:94:af:ce:92:a2:91:ed:b8:50:cd:b7:59:31:11:50:0d:2c:
         06:34:a5:4e:4f:02:4e:de:af:c7:59:c0:c1:74:77:76:45:70:
         b2:f8:b9:ba:c4:bf:01:59:8f:42:77:9a:eb:49:df:69:00:ea:
         f1:fa:21:63:d7:1b:12:f3:38:ff:87:e1:56:d6:f8:fe:b3:43:
         95:eb:cd:52:82:e4:b2:97:ab:4b:64:24:93:ea:6b:75:a4:01:
         87:ba:bc:9e:4a:09:9b:0d:5b:7a:c4:57:c3:9a:3e:75:fb:fb:
         ab:20:9d:66:34:30:67:b5:fc:fd:e6:1a:79:05:04:f6:f9:11:
         32:47:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----