Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File:                     kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier:          BGSu3w3ihhvZZoPj/BKaZ4HdcUl9M/RFo8W+VPwo5h4=
Subject key identifier:   56:2D:06:DD:E7:36:2B:9A:F3:3E:22:CD:D4:BF:E9:EF:60:BD:CF:17
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer:       /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial:       01962DF408E0C2809637E020D550D7FBC5DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: CYYVcn0FtEFFGz53Uec45bq61KDL/qVhI5EI4+/ZdRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:e0:c2:80:96:37:e0:20:d5:50:d7:fb:c5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=562d06dde7362b9af33e22cdd4bfe9ef60bdcf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:89:2e:b6:c0:fa:b2:8c:24:aa:ff:56:36:
                    bf:31:da:47:9a:16:b5:2d:ee:b1:37:dd:d9:49:fd:
                    a5:02:0f:ec:ae:bc:3e:c3:72:f5:41:04:f5:65:f6:
                    05:f6:cc:94:95:f7:af:60:38:57:2f:09:d4:cd:b6:
                    f3:05:f7:5b:e8:dc:fa:3c:f6:d2:47:31:26:72:11:
                    44:4e:ec:5f:f0:7d:1c:86:17:f7:13:88:83:31:93:
                    6b:d9:61:93:df:b1:07:c8:4b:40:e1:98:1b:ca:61:
                    f0:23:62:85:3e:a5:d4:35:83:2f:4e:dd:38:f5:ab:
                    1a:9b:3a:fb:3f:31:55:75:51:a0:19:0d:47:24:4a:
                    23:ad:73:b8:0d:d0:18:31:1a:67:d3:c9:bd:11:d6:
                    f7:2d:75:6e:8e:10:20:13:d7:5c:7d:75:be:ed:34:
                    b9:e4:1d:7d:9f:bb:53:af:30:2b:2c:c2:6b:15:46:
                    eb:b4:38:e6:6c:94:e6:f5:31:76:ca:b2:c6:cb:da:
                    d2:02:1f:c2:77:4d:55:eb:92:4c:e0:71:90:41:6c:
                    e7:6e:3f:af:88:e0:96:33:04:fe:62:ea:73:f2:8a:
                    6d:9c:12:e4:73:e8:22:50:a2:62:2f:52:65:31:d0:
                    03:ac:55:63:74:85:50:4a:cd:5f:e7:2b:c1:63:4d:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:06:DD:E7:36:2B:9A:F3:3E:22:CD:D4:BF:E9:EF:60:BD:CF:17
            X509v3 Authority Key Identifier:
                keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:8d:ac:e2:ba:8f:66:85:3b:1d:ce:5d:26:9b:d6:08:87:
         a9:68:69:46:d0:fe:eb:40:c8:15:a8:d2:c6:21:db:01:a5:dc:
         23:e3:a7:6e:85:e2:50:14:62:d9:cc:60:cc:f5:cd:40:0b:7c:
         99:28:ab:61:a8:c4:08:f9:db:01:c6:75:ce:46:3c:10:a8:8b:
         47:c0:da:6d:f8:11:1d:04:54:62:63:d0:eb:6e:f6:8f:cf:63:
         90:0a:b5:ec:f7:b1:77:cb:9d:bf:24:04:2e:9c:99:5b:64:3f:
         2d:c3:61:6d:72:f8:3f:20:61:94:f8:8d:85:a4:31:4a:a0:32:
         11:51:90:da:cc:3f:46:10:c0:34:bf:19:4a:8a:0b:a0:f0:5f:
         fa:d6:90:be:2a:32:16:aa:77:20:c7:5a:c0:40:30:07:dd:9a:
         b6:71:35:8e:82:d7:f9:e9:eb:f2:e7:f1:8d:91:ed:1e:aa:f7:
         14:1f:ba:be:7a:ec:ab:32:9d:73:c2:81:43:66:4e:f8:a5:40:
         1b:64:44:c0:be:b8:f6:aa:bf:f2:3c:9c:2c:6f:c5:f2:fa:c6:
         74:89:e5:76:2d:62:cc:ca:89:7e:6c:42:13:46:fd:d7:6e:da:
         93:da:24:fa:8f:8c:55:a5:74:2f:cc:e9:bb:d2:06:28:dc:be:
         6d:6e:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----