Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File:                     xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier:          Rw9YqIvkpUHMODzpfd5/JcguoMK/mUs17KOjwmN1/us=
Subject key identifier:   2C:85:44:A8:0B:4F:F2:CA:CD:0E:EB:6C:4D:8D:C7:47:62:A4:B1:56
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer:       /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial:       01962F3DC4E952DBDF9B221AA4E216AAAC07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number:          0BF6
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: sNdRfmP71K+udNaZ+zxIcPMKBdLr+p4OsIF9jGML+jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c4:e9:52:db:df:9b:22:1a:a4:e2:16:aa:ac:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=2c8544a80b4ff2cacd0eeb6c4d8dc74762a4b156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:7e:27:4b:00:7e:b0:fe:fd:89:f3:b7:0b:
                    ba:35:23:66:c5:a0:72:84:d5:c7:00:fc:5f:c8:b7:
                    04:d5:7e:d9:88:78:65:63:6f:62:c2:70:cd:ea:c8:
                    67:d0:92:01:29:2d:41:fa:9f:56:14:dd:e5:fd:4a:
                    33:42:c9:37:4e:89:74:7e:ce:3a:e5:b0:16:bb:4d:
                    d3:a9:3e:87:70:ca:80:9f:43:0e:0c:75:a8:fd:90:
                    92:dd:67:04:1e:01:b5:c2:d5:df:a8:08:87:33:46:
                    26:74:aa:dd:b3:ca:5b:67:65:80:9a:65:2b:16:96:
                    48:5c:69:c9:97:bf:02:95:b4:4d:9a:9a:69:45:84:
                    23:83:fa:dc:48:0a:20:21:3e:6b:87:c9:9c:af:43:
                    26:9c:2d:f0:b3:3d:2d:ac:7e:6c:85:d7:d6:0c:d4:
                    02:3a:1e:16:ab:cf:5d:05:d6:c5:1e:44:8c:02:73:
                    4b:0e:d5:4e:64:58:e9:21:5c:66:ab:2b:3c:ee:aa:
                    74:c8:fd:3f:ce:42:19:f4:e3:75:e1:da:d1:da:af:
                    b7:44:2a:80:3d:60:86:ca:06:cc:5b:10:f4:47:e7:
                    4f:df:57:3d:41:20:59:f4:3a:9e:7c:42:1e:d7:50:
                    8c:4b:4a:1e:ae:4f:b9:cd:ad:84:1b:ea:3b:ce:6e:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:44:A8:0B:4F:F2:CA:CD:0E:EB:6C:4D:8D:C7:47:62:A4:B1:56
            X509v3 Authority Key Identifier:
                keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d4:b2:fe:2b:69:5a:fc:5e:da:28:2c:e1:cd:c4:a7:e6:d3:
         db:9c:c1:93:05:78:a5:5c:17:b3:f2:c6:1a:1f:3b:ff:b1:ad:
         94:3c:04:4e:e3:85:83:c8:43:1f:a0:f5:cc:3b:17:81:56:2b:
         72:55:69:cd:07:fd:6e:ba:f0:83:74:11:7b:5a:45:75:27:4e:
         e7:61:23:fa:60:93:ba:68:e8:5a:14:d6:86:a1:14:9f:f7:06:
         b5:ec:6a:01:0f:c6:66:7b:03:05:03:ef:17:c9:88:7b:84:44:
         49:33:06:75:2a:ff:ed:20:86:e9:ba:56:d4:cb:19:f8:4a:a7:
         35:4d:09:f2:26:42:df:26:0d:6a:9b:49:00:64:d7:4f:69:f9:
         a5:b2:31:23:11:91:99:3b:55:17:7f:26:17:9e:c4:7e:55:1f:
         c9:88:4b:aa:d2:df:44:b1:54:f1:2a:94:dc:76:9d:97:df:a1:
         dd:a4:8e:11:8b:b4:ca:21:b8:66:ae:ae:d5:c4:20:cf:04:9d:
         87:58:fc:67:6f:3a:df:d9:d7:7f:e4:94:3e:a1:a7:47:07:5b:
         e1:b5:59:af:46:04:40:f0:3d:67:ab:76:1e:b4:dc:52:53:21:
         30:a5:aa:87:8b:e3:0d:8c:e0:b8:57:bc:98:a2:ff:82:77:32:
         cf:14:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----