Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File:                     bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier:          csBoADZ9hcFA5C0yefZvaQu8oe+iG8CGr30gZAZnXa8=
Subject key identifier:   CB:1E:AD:40:9B:2D:EB:F7:90:D5:BD:80:9B:15:0D:91:2E:51:11:7B
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer:       /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial:       01962E98DFA9998732D48BF86629DD11DC6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: ZyymFahOxuUvtXJ45yjnlBPkmtvTodRQhGnZ+wT9OzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:a9:99:87:32:d4:8b:f8:66:29:dd:11:dc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=cb1ead409b2debf790d5bd809b150d912e51117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:1c:04:11:af:e6:89:aa:04:89:d5:4f:5a:
                    bb:93:3c:98:92:63:ba:a0:55:18:ba:b1:26:60:25:
                    d0:56:c7:bd:d0:c9:66:79:b4:6c:fc:ed:15:2e:16:
                    28:9e:c7:2d:d8:9a:b0:a9:e3:9b:eb:0d:2f:82:f5:
                    3f:5f:ab:37:a2:19:c9:56:d3:ef:ad:37:16:ef:48:
                    6f:3f:26:e5:d7:6e:30:b7:c9:96:a2:21:11:d4:85:
                    a2:f8:84:ce:bb:85:85:0a:f5:19:49:98:40:eb:3c:
                    3b:37:34:11:4e:ac:5f:e2:14:81:0d:dc:34:6a:3a:
                    7a:2f:7f:2d:06:bb:65:83:a2:b5:28:98:ad:99:5f:
                    a5:f9:7e:f1:b3:3f:ff:8b:6b:15:45:7c:a2:16:5a:
                    cd:5f:d1:21:01:3c:8c:03:30:8a:11:68:61:b2:6b:
                    7c:2c:27:5b:c8:42:a2:15:ac:35:5a:56:4a:88:ea:
                    78:62:d9:ed:35:c0:68:48:14:0c:16:41:f3:61:ec:
                    e9:f8:50:20:d6:36:58:f3:4e:c3:d4:86:83:1c:94:
                    5c:50:1d:06:01:5d:79:64:3e:a9:7a:0c:d8:0e:34:
                    09:b7:c1:25:8f:4b:10:76:7d:7e:1e:3f:d2:e5:91:
                    db:22:f0:48:0d:5b:50:28:5e:a3:0c:8d:f2:72:11:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:AD:40:9B:2D:EB:F7:90:D5:BD:80:9B:15:0D:91:2E:51:11:7B
            X509v3 Authority Key Identifier:
                keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:db:89:4a:0c:c1:de:28:79:42:65:42:76:a8:5b:fb:86:16:
         50:27:bf:cd:ba:fc:77:4c:9f:83:2f:90:3d:5b:81:78:00:9c:
         0a:f6:f5:17:cc:9e:00:a4:3b:71:06:cc:64:0b:f1:be:06:b9:
         21:c1:80:61:43:9c:8a:02:f3:21:a3:37:8d:da:73:16:03:98:
         50:5d:f8:fd:24:29:72:a8:13:b4:6f:a9:71:78:1c:f2:d8:d3:
         3b:f7:54:e5:4e:12:4f:7e:c1:f7:e0:2e:e9:26:a5:d7:e9:5b:
         ae:a6:ee:0c:04:fe:ee:77:20:fa:2e:1e:de:d2:8d:69:5a:bf:
         35:0a:95:2a:79:8d:39:82:1a:e4:c8:66:16:f6:55:e6:85:ab:
         be:83:23:f5:5a:0b:70:93:bb:77:80:fe:0e:d5:97:85:dd:bc:
         95:32:ba:5d:c9:a7:5b:e4:a2:88:14:36:b4:f8:7d:3f:6c:99:
         db:6b:1a:eb:04:9a:de:38:a3:18:a6:36:60:9e:ee:47:c8:7a:
         53:97:4c:3d:fd:c3:25:fd:d8:cc:b0:6f:db:24:8e:1d:fd:b5:
         ea:b5:85:8c:bb:4f:58:5b:e8:88:70:8f:da:e5:77:31:5f:41:
         25:4e:33:c6:0c:9d:cf:9d:f1:0f:02:03:8a:58:73:5b:b8:8e:
         5d:b9:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----