Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          cAAKCjOpJ52zfo2ZXsPbFmVKI43ncCqJZC9GSUj+AmQ=
Subject key identifier:   0D:83:23:0A:22:76:2C:58:2D:14:09:A4:E3:2D:D5:89:E1:D8:6D:1B
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       01962E98A3A95A3950A570F0223F91A547D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: jPJQ+J9JZZ+2Hr4NbS+H2POD5iEs6B2efScaITcdgLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:a9:5a:39:50:a5:70:f0:22:3f:91:a5:47:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=0d83230a22762c582d1409a4e32dd589e1d86d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:08:24:b5:d3:6a:ae:57:08:1d:1d:51:07:
                    9b:77:12:9c:56:a2:6c:34:5f:b5:df:33:1d:71:b4:
                    41:b6:95:e3:ae:c2:23:fd:79:89:04:0a:9e:16:7b:
                    c2:d5:ca:e3:b9:b6:58:f6:40:7e:10:a5:dc:0a:f5:
                    f4:22:62:33:5e:52:10:ea:7c:20:ba:f5:cc:32:ad:
                    57:fb:35:f5:eb:da:bc:70:e6:ec:b9:cb:ae:7e:1d:
                    82:d8:8f:e2:6d:33:69:0b:d5:2b:e3:e3:40:77:b3:
                    72:0d:3f:4b:3d:6e:5b:5f:70:48:6b:1c:af:49:84:
                    52:c1:d8:32:a0:8f:1a:84:0b:cd:27:d7:8c:23:53:
                    7c:f0:a4:50:db:0b:91:1c:a5:32:04:a8:9d:15:02:
                    ab:83:10:46:3a:b7:11:47:b9:81:ff:e5:b7:48:03:
                    08:c6:6c:06:d4:1f:22:b0:a9:86:cf:f4:99:b8:47:
                    e6:b6:3f:c9:ee:97:ec:e1:8d:36:0b:e0:98:f4:d5:
                    5f:d9:94:88:6c:ad:b3:62:a9:50:5d:b7:3b:86:56:
                    66:d7:1b:8b:d1:ec:76:0c:ff:bd:23:80:c8:79:ec:
                    cb:93:65:eb:f5:9b:a9:fe:bf:9d:06:24:67:68:5a:
                    5f:f5:4b:5e:c0:c8:ab:0f:18:4b:b9:55:0b:86:f4:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:83:23:0A:22:76:2C:58:2D:14:09:A4:E3:2D:D5:89:E1:D8:6D:1B
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:0f:a4:5e:f4:73:70:75:f9:95:7b:84:a2:be:16:13:9b:
         47:33:9c:7d:69:28:30:39:d7:f0:e9:0a:29:1a:71:41:3f:17:
         3e:63:d8:8c:8a:45:f7:a7:99:ea:76:99:fe:c2:d7:18:ce:97:
         54:37:14:8e:e5:e0:f3:75:50:e2:c4:78:fb:ae:00:af:53:a2:
         75:7f:7c:b0:22:5e:f8:df:5d:47:f1:bb:4b:8b:4f:3f:ae:8d:
         59:a4:6e:06:e0:b5:6f:f7:02:3c:82:14:d0:76:b3:93:d4:cf:
         08:cb:fb:e9:c4:32:6b:63:a4:19:5a:7e:4f:2f:60:9f:58:25:
         47:6f:77:4a:d9:7f:e1:ac:c3:44:cd:db:51:07:9c:6c:89:58:
         61:18:ce:bd:9c:10:69:df:b6:3e:51:bb:34:25:c7:9c:9a:11:
         99:d9:42:8c:46:54:cd:fd:2b:4f:76:a4:78:ce:c3:db:4c:a0:
         8f:7b:8e:23:88:90:ac:42:74:b0:c3:97:be:f2:3a:48:58:8e:
         bf:84:6c:20:91:c7:7b:3f:e4:61:d8:c0:9b:d3:0c:6e:2c:ba:
         0a:00:fd:85:c2:ac:f1:ce:85:e5:b5:2a:ad:5f:c9:77:d4:66:
         53:2a:58:64:dd:3e:c2:cf:39:8b:45:2e:79:c7:99:b4:8c:20:
         88:06:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----