Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
File:                     6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft (raw, json)
Hash identifier:          2D0uLR29dh9C1++OQz9IFc5QK+K4rxWhoSpH5r+XhsI=
Subject key identifier:   0E:46:2D:3C:89:CF:43:48:39:17:84:22:29:5F:0C:AB:92:A6:84:3E
Authority key identifier: E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E
Certificate issuer:       /CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
Certificate serial:       01962DF449D78405FA552653A7E8AFE2F09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
Manifest number:          044A
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl (hash: dbQj4bTbU1tBq0LFmvMZezPfN8w6ecejtwFPU3Tuiqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:49:d7:84:05:fa:55:26:53:a7:e8:af:e2:f0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=0e462d3c89cf434839178422295f0cab92a6843e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:d8:9a:cf:f7:aa:79:e0:13:4d:b5:66:2d:
                    f7:f4:55:ba:42:61:a7:00:8b:b2:95:61:2e:2c:66:
                    a5:d2:b1:c2:b2:60:34:30:29:c0:a2:76:b2:e8:bd:
                    bd:62:36:b0:e0:3e:d9:22:af:94:33:b9:51:9b:8b:
                    06:be:09:66:9a:7b:a3:50:d1:52:d6:69:26:88:12:
                    b8:df:a6:98:2a:54:c1:6c:99:39:bd:7e:14:5d:80:
                    37:29:7b:6d:4d:bb:65:94:a8:9a:d6:81:93:bb:e9:
                    2d:5b:2f:c6:43:4b:a9:22:66:4a:6d:de:da:c5:98:
                    ec:73:74:aa:a6:0b:e1:67:e1:2d:73:2e:6e:f0:49:
                    33:c2:7e:c5:fc:d1:6d:11:18:ab:ff:e6:60:f7:21:
                    3c:09:41:21:6f:87:61:dd:bf:32:3d:30:41:75:88:
                    92:2f:69:6e:a6:2f:78:d4:8d:99:bc:49:05:45:83:
                    fa:e8:cb:09:0c:42:c7:35:42:ef:1d:88:b6:ea:06:
                    ab:84:f2:86:99:89:fe:a3:b6:66:cb:d2:86:21:d7:
                    76:56:6c:09:dc:a5:e8:1f:a6:f6:b2:3f:ab:fa:e8:
                    0a:ab:78:6e:d9:90:d1:0b:8f:7b:42:3e:2c:b3:b0:
                    fd:8d:1f:c6:80:0c:e7:41:46:34:12:a3:49:84:b5:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:46:2D:3C:89:CF:43:48:39:17:84:22:29:5F:0C:AB:92:A6:84:3E
            X509v3 Authority Key Identifier:
                keyid:E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:bc:8d:f0:7c:46:e1:36:9f:c1:0e:8c:d2:67:41:cd:6b:
         6a:86:f0:66:4c:37:d8:73:17:dd:c6:0f:ff:8f:1c:0f:f3:6f:
         be:f4:f7:d4:33:c1:6f:2a:ce:e8:c3:af:ce:ed:69:6f:f4:ca:
         0d:53:7e:6d:67:8a:06:b0:95:fd:91:97:7c:ae:43:b4:78:17:
         83:fb:9d:2c:d4:66:b7:8c:5a:55:53:6b:d5:e2:fa:26:62:94:
         06:4c:35:b6:18:92:bc:9d:5b:13:69:dc:6a:0e:58:d0:92:58:
         e5:a9:ae:94:dc:c4:74:dd:3d:78:cd:fb:44:c9:17:7d:e8:2a:
         55:1d:fd:a5:dc:b6:d6:01:f2:a4:23:05:f6:c9:dc:83:a4:87:
         23:80:51:7f:d8:b6:65:3c:92:bc:52:50:35:9d:9d:b5:c4:74:
         5b:07:81:ad:8b:be:04:8e:f2:25:23:b6:21:cd:ff:01:68:a3:
         2a:b5:af:87:d0:42:7b:c7:10:3d:10:77:de:9f:f9:66:d5:ea:
         5c:33:cb:5c:8b:17:99:00:b8:21:cd:3a:7e:a0:ff:44:52:e8:
         c3:5b:24:e2:ca:7e:91:b5:88:d9:a1:30:82:55:55:a9:51:f8:
         e1:df:72:ed:90:cd:ab:f2:fd:6c:2a:3d:9c:0f:3c:c1:2e:e5:
         c1:fd:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----