Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
File:                     6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json)
Hash identifier:          MdOWjZN0PELeG3T8rsgyCaOgoJpRGb+NKbfuZROglGg=
Subject key identifier:   D9:FD:F6:58:6A:DC:00:12:07:26:82:13:09:E6:88:20:CC:B1:98:56
Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
Certificate issuer:       /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Certificate serial:       01962E61DED708A7EB9BB9A7CECC7AB90383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
Manifest number:          02CB
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: 2UEf1CTg1a6+/V0nUCFXdflMHebup+GKIjh+eYhMhxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:de:d7:08:a7:eb:9b:b9:a7:ce:cc:7a:b9:03:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=d9fdf6586adc00120726821309e68820ccb19856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:77:0c:b8:d2:a1:28:4d:b2:ad:28:94:27:
                    dc:7e:e9:80:cd:9b:49:ad:ad:87:a4:74:15:a6:8d:
                    32:34:a7:c2:29:48:e0:fc:28:08:db:cd:71:c8:3d:
                    96:ed:d6:71:97:63:07:51:6d:1c:96:8e:b7:e1:f3:
                    03:24:37:fa:d4:22:e1:00:e9:ba:07:7c:c5:5a:16:
                    86:4d:83:e6:e8:5d:c3:23:ff:59:56:b6:ed:8b:05:
                    c0:00:90:65:20:2f:11:38:23:48:5c:9e:30:da:99:
                    64:fb:0d:6a:67:18:8f:7a:36:e7:fe:79:65:49:fe:
                    87:1d:6c:ed:81:fd:01:27:69:ae:3e:2e:e3:7d:aa:
                    5a:2e:f3:60:e8:83:a4:6f:6e:20:55:93:54:59:ed:
                    36:e4:d4:25:7a:02:97:f0:02:4e:01:7e:69:4f:a7:
                    f1:e6:9c:8a:ba:42:5d:86:fa:51:76:a0:2d:4e:17:
                    5c:6d:e1:c6:33:bd:88:18:ec:20:09:ff:e3:a4:26:
                    e4:07:b1:ff:de:b7:57:d7:ff:34:a1:05:7f:71:fd:
                    dd:0c:ce:40:34:57:47:c7:81:28:87:e3:50:8b:04:
                    30:78:b6:8b:d6:51:65:1c:82:21:83:f9:64:c1:cc:
                    07:ce:00:3a:6b:f2:ef:19:18:87:a1:ae:b4:31:aa:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:F6:58:6A:DC:00:12:07:26:82:13:09:E6:88:20:CC:B1:98:56
            X509v3 Authority Key Identifier:
                keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:bd:9a:6f:cf:07:fb:60:ff:24:ec:80:35:f6:62:27:ca:
         62:59:35:0e:69:8d:1d:b0:96:f0:d7:0c:7c:03:06:9a:18:a4:
         a7:63:e7:ad:75:d9:1b:70:16:10:ee:cc:23:41:58:a6:28:0b:
         26:02:09:40:af:25:15:ba:43:f1:2c:94:9a:71:e0:e7:99:e8:
         ee:a9:3e:0e:79:04:59:c7:99:f8:e9:0f:44:6d:ba:69:ac:c2:
         0a:3f:7c:a9:88:03:67:65:32:61:bf:d0:3f:e9:3d:5a:34:6f:
         32:63:65:05:51:ef:63:63:91:56:e5:6c:44:3c:41:b8:f7:9f:
         d7:8d:43:5c:1d:dd:29:67:ce:45:91:0f:f2:1f:a0:7d:9a:21:
         b2:7b:83:c8:89:a7:71:ee:ca:e5:03:d4:1f:2d:57:7c:35:c9:
         35:b5:c1:81:c8:7f:9f:9c:01:35:c7:1d:6b:f3:03:1a:33:77:
         51:97:22:1e:05:c3:fe:4d:74:8a:c7:06:9b:38:19:10:d4:b9:
         36:12:8c:80:71:84:de:ba:c1:e1:cb:b8:5b:06:5f:b6:5a:90:
         dc:fb:dc:3a:43:83:fc:17:da:a1:3f:1a:02:09:3b:88:89:8f:
         77:20:c6:c9:b5:40:bd:52:74:62:96:c8:a4:65:31:c1:af:d1:
         b1:ab:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----