Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File:                     6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier:          c4tVUjyJuvID9+CNsxv32tkGv/B+Kq7qvIc+42LXJ2U=
Subject key identifier:   9A:36:CC:5E:89:5E:1B:F5:E1:9F:C9:66:7A:64:78:6B:4B:87:5F:56
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer:       /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial:       01962F3D394E90C207825CD5918B39D27006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number:          1026
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: dCxbvE6cFa3dtO4kwsR91/0YNiHvIEu75WBZOFE0TwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:39:4e:90:c2:07:82:5c:d5:91:8b:39:d2:70:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=9a36cc5e895e1bf5e19fc9667a64786b4b875f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:ca:4e:46:1d:ae:65:e0:d1:72:ef:0e:3f:
                    a9:ee:de:86:d3:15:b9:09:fb:bf:ce:c5:4b:7a:29:
                    46:0d:3f:72:c6:b6:8d:3f:0d:00:80:72:fc:e1:b9:
                    9b:97:90:cc:0b:c1:4e:a4:98:56:d0:d1:b2:87:7d:
                    91:c7:b8:a5:f6:bb:45:e1:d5:a9:1b:f9:5c:d4:7e:
                    43:70:f2:5b:cd:ab:91:3d:8a:f1:b0:66:45:7b:81:
                    dd:29:ba:a6:dc:a3:80:4a:0a:f3:0e:f3:1e:ca:19:
                    cd:11:d9:bc:60:40:a7:7d:d9:6a:52:64:7c:e2:c0:
                    80:1f:ad:24:93:25:e6:5b:f0:eb:5d:d3:ec:ff:64:
                    de:cc:ee:25:30:44:6f:a7:32:8a:f3:f9:01:30:bd:
                    aa:d1:8d:b7:6c:d0:c6:10:c2:f6:e5:9c:a3:22:82:
                    32:22:ec:90:20:a9:5f:6f:23:55:24:89:52:8f:b4:
                    a6:cb:b7:29:55:6b:22:07:3e:1e:36:0b:a9:9e:2b:
                    a3:4b:dd:68:a0:dc:5d:af:35:86:76:ed:0e:a9:0a:
                    f5:25:b9:66:cc:ee:6a:bd:37:68:cc:52:39:50:03:
                    70:6f:08:e6:75:73:36:0e:7b:6c:94:05:5a:70:84:
                    56:b1:7f:93:06:72:22:9a:f7:70:28:df:27:6e:11:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:CC:5E:89:5E:1B:F5:E1:9F:C9:66:7A:64:78:6B:4B:87:5F:56
            X509v3 Authority Key Identifier:
                keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:54:f5:d8:95:88:f0:55:9f:39:bc:64:ec:a8:5f:0c:c4:af:
         59:53:8a:21:f4:44:e5:06:3e:28:8e:d9:6d:7d:87:59:de:68:
         ef:d5:be:db:b4:96:ad:f7:3d:ce:f1:78:3f:07:b8:30:4e:58:
         f3:b5:a6:a9:6d:9f:a8:50:08:76:75:4a:48:69:b0:30:c3:40:
         8d:cd:5e:2a:75:18:ff:e6:02:dd:a7:e8:fa:cb:5c:c4:3c:14:
         ca:08:7d:0b:97:f4:f2:00:1f:53:b4:81:e0:48:5c:85:24:48:
         20:ad:a8:92:fd:4b:3b:12:2a:51:c2:28:c4:d3:5b:52:25:5c:
         05:66:b6:03:8d:01:99:37:47:df:3e:de:b4:cf:d5:59:73:51:
         e7:84:62:ed:2f:51:fc:32:ab:cd:66:0b:8d:3e:31:47:ad:66:
         02:c0:01:b3:08:11:26:28:85:92:a6:b8:52:21:9a:14:01:f8:
         a3:10:a9:f5:3a:c1:c5:42:8f:d6:c2:8f:a5:c7:2f:2a:24:ee:
         ad:44:31:4e:67:1a:26:43:fa:cc:36:77:22:e1:11:8a:d5:37:
         b3:e6:2f:76:5a:3c:f0:5f:69:b6:ff:63:c2:3e:45:29:1e:22:
         a7:30:b7:36:f8:39:ef:b1:55:64:b4:f9:80:bb:c7:2d:5f:23:
         40:76:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----