Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File:                     axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier:          kDoK72SxC5l5fCgrwXirroJToCS6Yg52XnJ/xkLplQA=
Subject key identifier:   8A:53:88:55:35:7E:47:36:53:2A:72:B7:79:8B:DB:6D:A7:2F:15:26
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer:       /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial:       01962F0716C22C445D05733ACB963AD9383C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: CP4TwQevp53C1Wir6nS8AO1fHQKjxevLpTfPJ7UoK0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:16:c2:2c:44:5d:05:73:3a:cb:96:3a:d9:38:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=8a538855357e4736532a72b7798bdb6da72f1526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a6:f5:a6:ea:69:f7:c5:ed:0e:27:d0:85:12:
                    44:c9:14:29:1a:77:ac:04:3e:c8:51:a1:aa:42:1b:
                    26:33:d4:ad:a0:ba:bc:a7:e5:82:8c:cf:4a:93:36:
                    20:8d:66:81:4a:93:b9:3a:fb:d2:3f:6e:97:80:1d:
                    14:3e:b5:4b:80:23:c3:e9:c2:af:fd:20:8a:35:30:
                    f7:dd:28:3a:30:45:d1:84:2e:b8:ac:bb:10:49:46:
                    4d:4f:34:7c:bf:ce:ff:80:a0:9d:2d:dc:07:f2:57:
                    e5:ef:82:fb:f8:6f:f0:ec:6d:eb:1a:c9:cc:3c:3d:
                    3f:94:fb:34:ef:3a:62:cf:5c:68:b0:a1:e8:ba:21:
                    53:0d:39:ff:d9:83:73:3e:87:4f:91:91:ef:b3:e0:
                    7b:1d:23:3a:f4:75:d5:77:86:26:ac:37:15:19:a7:
                    f2:c7:28:9e:ca:b7:fc:0c:44:ad:0d:07:f1:e2:cf:
                    c5:90:83:ab:e3:d2:72:b5:01:19:84:93:cb:a5:6b:
                    be:56:13:f4:87:5f:38:a1:2c:c0:e5:e8:96:33:90:
                    1c:99:eb:8f:03:58:4c:1f:f5:74:4a:ff:3e:ea:e6:
                    1b:2e:e6:84:0f:7f:a5:59:a0:42:49:6e:ba:78:c3:
                    da:02:4a:d9:c2:21:d1:c8:91:e7:3f:e7:0e:35:89:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:88:55:35:7E:47:36:53:2A:72:B7:79:8B:DB:6D:A7:2F:15:26
            X509v3 Authority Key Identifier:
                keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:62:94:8c:5e:00:eb:82:0b:b6:c4:26:be:bc:40:9a:d9:7b:
         ab:14:74:f8:78:54:6c:df:0b:7c:b1:17:d0:9b:ef:b1:61:93:
         7c:08:10:9b:72:12:07:03:e0:98:de:86:49:f6:13:14:3a:45:
         6e:28:d7:e0:70:5c:a6:7a:da:d4:ea:16:86:8d:75:d7:c5:07:
         98:cc:a0:f5:42:63:a4:0a:2f:34:f3:d5:90:90:b9:4a:7e:09:
         b2:19:12:b3:45:ba:c6:f5:d2:73:c5:47:2f:ec:7c:57:3b:2b:
         ca:17:37:98:16:b4:1d:4f:92:b9:94:72:9d:c9:fe:12:27:dd:
         69:f4:18:3b:3c:24:dc:be:51:70:f2:9e:99:bc:a3:b6:e6:05:
         53:bc:20:96:6a:7f:17:e1:ff:02:b4:dc:85:0a:1f:09:bb:40:
         d6:e3:02:4e:c9:5d:a6:89:89:18:95:f3:40:ec:79:e1:d0:33:
         af:88:66:66:e2:d1:e5:64:de:59:0f:cf:fa:5b:a9:74:15:a7:
         29:96:06:74:b9:8a:f9:1d:b6:4c:dc:e0:38:5a:91:fb:f0:60:
         7c:a9:cf:bf:f6:62:cb:e8:1d:52:d3:9d:58:a8:be:87:1c:41:
         2f:e0:9b:dc:f7:38:da:5a:f1:4c:e4:6f:87:6d:b3:d4:68:a7:
         fd:e4:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----