Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File:                     k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier:          RZXBt3w7kBFXQGLzL5v6H56X7RaT1fzrwSpxuz/sKl8=
Subject key identifier:   A9:45:BC:0E:34:FA:24:D2:89:C7:7C:A3:2B:A0:5E:C5:F5:87:A0:F8
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer:       /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial:       01962F7426C3ACD80C728F8F1F1FABCAB960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: kpyB92P6+YjWjaESoWbtu83o0SPDYNOt2I8eCMkzWFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:c3:ac:d8:0c:72:8f:8f:1f:1f:ab:ca:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=a945bc0e34fa24d289c77ca32ba05ec5f587a0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:05:84:f8:21:95:53:dd:c2:51:76:23:87:
                    a5:f1:6b:ed:19:e1:e2:ae:e3:36:5c:33:df:60:7e:
                    cd:a1:9c:9a:b9:b4:49:af:b1:95:c0:8f:40:6c:6b:
                    69:7c:fa:1d:23:b6:17:be:4f:88:10:68:ac:77:3b:
                    16:de:92:5a:4a:ff:1a:46:98:ea:50:a4:a8:32:b7:
                    44:92:81:92:7b:61:65:53:4b:d0:ea:76:13:29:82:
                    3c:c7:f0:75:25:cb:28:86:33:0c:cd:f0:50:ca:71:
                    d8:f6:1c:4b:8b:bd:5f:ca:37:86:3b:8d:b9:63:43:
                    53:22:6c:cc:fd:13:5b:d8:e2:59:50:54:45:b5:83:
                    6e:cb:7f:b4:b0:cb:73:67:9f:87:a8:01:7a:91:6f:
                    c4:fc:35:46:02:eb:16:71:88:1d:bc:d4:4b:09:be:
                    0e:99:11:a8:2a:46:83:41:03:c6:a9:06:63:c2:c0:
                    a3:42:68:44:c6:75:cc:0f:40:39:1d:64:8b:28:61:
                    18:b7:53:69:45:d4:e7:a2:21:7e:61:d5:60:4d:89:
                    e3:bc:09:ca:63:1a:f6:78:79:4e:b1:dd:7a:9c:37:
                    42:e5:f9:5b:2e:2d:65:1a:be:48:f2:1c:57:b0:73:
                    f6:b1:0c:cf:5b:35:79:1a:d4:03:7b:82:25:0e:b0:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:BC:0E:34:FA:24:D2:89:C7:7C:A3:2B:A0:5E:C5:F5:87:A0:F8
            X509v3 Authority Key Identifier:
                keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:6e:9d:45:24:b3:ae:81:4c:de:c9:56:a6:c3:00:8a:a9:
         5f:6e:cb:91:e5:dc:d1:c3:9b:5e:a2:9c:89:2f:bc:38:0e:8d:
         19:0c:12:9f:6c:de:86:71:36:11:2b:5a:7d:83:06:b2:1a:b4:
         b9:a3:cf:29:66:fd:4a:6a:72:8a:d4:06:55:79:05:c0:5e:d0:
         b2:60:e9:a2:41:29:88:b9:14:ee:27:b4:d8:8e:2b:b5:d4:44:
         39:62:a1:e9:f4:7e:08:30:21:af:75:b4:3f:ff:6e:e2:87:94:
         2a:55:a8:d7:16:cf:ce:a9:e1:b7:9c:c5:38:84:5b:b9:6f:b6:
         ac:10:88:4c:d8:1b:44:35:d4:cf:e4:4e:d8:53:7d:61:6b:c1:
         23:ca:b0:43:ec:99:85:6e:42:b0:8e:29:05:3c:d7:00:7f:4b:
         0a:a3:c9:57:d3:c9:32:69:2b:0c:b7:7e:e6:a1:99:76:19:91:
         37:91:5a:55:4a:01:f7:27:61:ff:72:cb:c9:15:60:c1:1d:9b:
         11:41:06:3f:59:63:19:fe:10:7a:e0:de:7d:1f:74:72:70:97:
         8d:d9:18:80:5c:d8:e0:0e:6c:85:40:d9:e9:dc:86:98:83:13:
         e5:9c:4c:0b:e4:a5:28:a5:3a:17:b8:ac:57:d0:72:c5:a7:da:
         ba:83:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----