Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File:                     r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier:          EKcjZay5yWknRXVKDhCUpvQ89rbLA2qLYMsxr34744o=
Subject key identifier:   F3:08:30:1F:38:3C:BC:1A:7E:D2:B4:13:80:8F:CD:97:A3:85:D3:4B
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer:       /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial:       01962F3D6D3689E8408819FC93122FC006BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: HOtt4Yz4OQwRvRsoRnZSiwJ3y37Q0K9TxgpdjsTrTiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6d:36:89:e8:40:88:19:fc:93:12:2f:c0:06:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=f308301f383cbc1a7ed2b413808fcd97a385d34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:de:44:0a:87:99:0c:2e:fe:11:2f:28:8f:
                    c6:1e:02:d6:05:17:7f:4f:d9:ba:a5:ae:c3:a0:01:
                    0e:a6:1c:a0:97:2c:5b:94:3b:96:00:84:92:5b:e0:
                    9d:99:f2:d9:a9:19:f1:29:6d:93:07:cd:e0:f1:9c:
                    60:21:17:41:a3:2e:e3:e7:1b:bf:52:8f:80:21:24:
                    5b:84:28:a3:f1:34:01:85:39:25:4c:d6:3e:47:70:
                    94:34:7d:2a:8d:a4:3d:b0:d4:0f:31:a7:71:2f:b8:
                    1e:7a:5e:5b:09:11:bd:5c:4b:bd:ab:1f:59:f2:60:
                    6d:6f:84:a9:2a:5d:17:8b:1f:e5:1e:0e:26:4b:e7:
                    9c:07:c0:5c:cb:68:33:f4:5c:e0:fd:99:64:95:1c:
                    16:63:9e:6f:90:dc:86:17:0f:af:c1:9c:91:f0:e6:
                    6a:8a:92:50:e0:aa:c9:13:28:9c:e8:76:bc:24:85:
                    c5:08:56:8e:7b:8f:02:eb:e0:d0:20:80:b1:1e:be:
                    ba:51:0a:c0:e1:3f:6f:83:16:cb:95:5f:6d:55:f7:
                    7f:05:20:1d:91:f3:b4:6c:4f:4c:af:d8:23:94:e1:
                    e5:c2:de:cd:c5:f3:5f:b3:6d:18:1a:19:9d:81:93:
                    df:c1:3e:ce:ee:e4:46:6d:22:80:72:6a:3a:a0:73:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:30:1F:38:3C:BC:1A:7E:D2:B4:13:80:8F:CD:97:A3:85:D3:4B
            X509v3 Authority Key Identifier:
                keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6a:a7:d0:92:cd:7c:c3:76:09:3d:e4:aa:ec:fa:38:0e:61:
         02:de:e6:18:9f:4b:4c:10:38:79:02:73:35:ab:d3:c2:93:48:
         db:c3:2c:fe:88:ab:d0:8f:92:ce:46:b4:dc:00:7f:46:0d:de:
         71:79:4c:5c:db:67:0c:b6:3f:fc:43:40:02:ef:40:8c:13:23:
         68:ef:97:34:fe:65:15:5b:8f:1d:af:e5:2c:e3:39:8a:05:3b:
         7e:04:f9:d2:56:0c:1c:85:47:de:ec:79:34:22:46:8b:4d:bd:
         8f:eb:fe:60:13:ff:bc:db:05:a8:e1:d7:19:b0:88:35:dc:fe:
         55:87:ea:8a:c1:b7:ce:cb:f8:56:f4:e5:90:69:cb:b2:02:34:
         d8:2d:fe:2a:b1:76:ef:0a:53:fc:b1:e3:88:f4:d8:b5:bb:8d:
         42:5f:7f:0d:2a:48:fb:15:74:99:be:75:ff:24:60:64:1f:57:
         8d:52:cd:a2:1a:8e:ae:8a:8e:76:a8:d0:9b:72:e8:cf:d2:0b:
         a8:6c:07:8e:1b:25:8a:53:24:bf:c7:f5:9e:d1:a3:1a:d5:71:
         26:72:24:69:8b:8c:ee:c8:9b:4b:75:b3:33:d2:ab:1b:87:c2:
         0d:2e:d9:8a:42:38:e9:ef:14:38:77:ad:d4:40:38:f8:86:cd:
         13:bd:70:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----