Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File:                     6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier:          Vk4/R2nLI8iKkmF82Sy8SHwGpgcHBzFVhL1pwOpq1n8=
Subject key identifier:   5D:2C:3D:24:DF:4A:E5:DF:86:C7:94:23:24:AA:07:8A:E5:7F:6A:64
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer:       /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial:       01962E99DAB37A9C3851C239A534D7EE73C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number:          0511
Signing time:             Sun 13 Apr 2025 10:02:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:36 +0000
Files and hashes:         1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: 0PaKegFb2CDIVp0mGWckumnDwqWqUhOcJJe/xf83nY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:da:b3:7a:9c:38:51:c2:39:a5:34:d7:ee:73:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
        Validity
            Not Before: Apr 13 10:02:36 2025 GMT
            Not After : Apr 14 10:02:36 2025 GMT
        Subject: CN=5d2c3d24df4ae5df86c7942324aa078ae57f6a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:cd:5b:12:3c:2c:ad:3c:b2:7d:c8:9e:b8:
                    76:f0:cf:77:21:b8:d8:06:ec:53:0f:e0:bc:d1:2b:
                    1b:8b:50:8a:2d:fe:96:0c:94:6e:5e:e9:14:dc:94:
                    3f:e7:8e:50:e3:b9:56:b5:86:d7:1a:3d:8c:2f:a5:
                    70:b5:bd:c4:d1:6c:7b:5f:6d:bf:4f:bb:e0:70:4e:
                    f4:e0:7c:b5:5b:ee:5c:82:84:a4:ac:79:bc:79:e5:
                    f1:97:3c:e7:80:ee:ef:e6:3f:95:50:54:5c:da:d6:
                    03:94:e2:ff:d5:80:d8:b9:7b:c2:fd:5f:86:aa:c8:
                    a0:f5:02:15:90:1a:00:c5:de:09:60:d0:44:bf:da:
                    d8:88:49:70:b4:66:17:f5:27:e0:e2:53:16:9f:2b:
                    6d:62:43:97:8b:08:40:99:c7:d2:ea:23:1c:0f:cf:
                    ce:da:10:a5:6a:e8:5c:d3:a1:81:5c:ac:8f:c4:ae:
                    58:b0:82:70:13:a5:3e:41:95:cd:cd:46:3b:8f:1f:
                    7e:cb:9b:dc:84:b6:92:32:76:7c:be:8e:41:64:85:
                    d4:77:4f:a8:d9:41:ed:12:b6:d9:64:e1:a4:a6:7e:
                    1c:19:72:31:34:2c:7e:c4:73:00:61:a5:2e:99:24:
                    25:21:16:2c:d4:8a:72:f7:a3:3e:3c:bf:af:ec:b9:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2C:3D:24:DF:4A:E5:DF:86:C7:94:23:24:AA:07:8A:E5:7F:6A:64
            X509v3 Authority Key Identifier:
                keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:77:7d:c3:99:34:6a:ab:fd:69:cb:cf:39:43:00:9a:5b:51:
         22:0c:8e:7f:85:30:f2:69:f9:78:b9:98:7e:38:04:e3:54:73:
         eb:9e:6c:aa:d1:8f:13:91:f7:2f:c9:c2:d3:fd:69:7d:8b:6c:
         d8:b4:a2:6d:30:3b:cc:df:7e:22:fd:04:d2:3a:97:34:d0:1a:
         b0:a0:6e:46:7a:32:fd:5e:46:89:d6:63:cd:15:05:59:55:34:
         22:9a:a1:e1:55:49:8f:b3:57:f0:25:f0:12:ab:44:b2:cf:9b:
         d7:08:4e:ee:39:20:c7:f0:70:36:bc:99:79:ca:35:43:0e:aa:
         b0:3e:50:56:25:4a:90:98:5e:62:61:6d:23:26:a2:55:ea:9a:
         9e:c2:88:6e:31:8a:63:ee:a1:59:ae:47:20:a5:35:b0:99:bd:
         69:07:17:3f:fb:4e:e6:20:eb:73:f6:da:35:15:a8:5c:16:cb:
         bb:07:f1:17:f6:b4:92:67:d9:a6:35:54:6a:c6:30:64:53:4e:
         e2:5d:37:ad:5b:64:ab:15:0e:35:ac:a3:19:06:c9:83:cf:15:
         26:95:21:32:ee:12:78:69:60:93:cd:2d:7c:be:95:87:1a:cc:
         58:13:aa:1b:86:a6:e4:3b:fa:32:ad:7e:3a:a3:4b:42:f3:8e:
         68:ba:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----