Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File:                     avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier:          pJFNZpaPuPelr4btl5ImVNQMhzq1opMro1mQAgFZxxY=
Subject key identifier:   18:D8:0E:09:55:02:D1:82:C2:6F:C8:27:66:21:91:F9:70:9D:43:00
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer:       /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial:       01962E986C37422EEE2CF9B252A0E555C431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: QtXJ37dna06q58n02GpmFbwC3B7LjhV6ac7tqFDWF6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6c:37:42:2e:ee:2c:f9:b2:52:a0:e5:55:c4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=18d80e095502d182c26fc827662191f9709d4300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:a4:f3:56:45:64:ed:b6:97:b1:2e:28:8b:
                    64:c9:25:e4:42:03:0c:ec:ea:a9:f8:34:9e:85:25:
                    69:d6:49:6f:1f:b9:04:55:67:ac:9a:34:be:4c:d1:
                    92:26:cd:36:44:be:f3:72:77:e9:d9:55:66:7d:01:
                    7f:2a:82:b3:42:e1:55:30:54:40:cf:eb:eb:5f:4b:
                    75:8c:57:26:ac:ba:72:ed:15:8b:f5:37:ba:e3:52:
                    fe:bf:e9:4a:73:bc:cd:33:75:fa:94:f2:ac:7e:63:
                    74:75:de:da:32:ab:d5:d3:10:f9:f3:2f:6c:23:1c:
                    62:aa:8a:d2:bc:51:8a:be:a3:e8:bc:f0:82:6c:10:
                    d8:64:f4:f9:dc:a3:18:82:90:f8:d5:2e:16:72:a9:
                    85:4a:fa:c8:10:84:ad:85:a7:93:bb:fd:5d:5c:c8:
                    68:d0:7a:00:a4:8d:77:61:6e:d8:9c:76:4b:0c:d1:
                    1d:e8:6f:e0:64:23:fe:cb:b9:8c:6c:00:5f:b9:8f:
                    5c:fa:4e:5d:ce:41:8b:29:bd:be:96:05:b0:e7:af:
                    20:83:88:ee:8f:aa:76:02:d4:b0:db:46:f6:cc:e9:
                    b2:c9:cb:fd:b9:c1:70:b4:c9:87:ab:9b:01:74:2b:
                    de:04:ab:2f:bd:fc:29:66:a3:0b:1b:03:78:68:89:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D8:0E:09:55:02:D1:82:C2:6F:C8:27:66:21:91:F9:70:9D:43:00
            X509v3 Authority Key Identifier:
                keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:29:c7:62:0b:74:cb:63:e5:8d:f1:c4:41:34:62:48:1c:
         dc:10:d2:f8:1a:48:94:59:7f:6d:d2:8a:75:74:91:f9:08:df:
         e7:9b:9d:42:60:44:af:8a:09:1c:ad:06:33:f6:bc:30:c7:09:
         93:a2:b7:45:93:95:80:ce:1b:7f:b2:26:6c:17:4d:66:d7:05:
         d6:6d:71:b2:35:1b:d9:88:df:1d:85:c3:37:2f:f1:14:7a:2c:
         b3:1d:3b:7b:ee:54:fc:ae:9e:ca:d5:1f:fe:81:17:e6:56:ef:
         92:9f:91:fc:01:97:ab:05:67:07:8b:ae:e2:06:6f:e7:50:06:
         9f:02:2a:7f:cd:4a:47:04:da:5b:91:76:46:a5:d1:2b:4f:ec:
         ac:7a:7a:e6:3f:3c:e4:cc:8b:50:c7:c2:0f:ee:63:95:65:2d:
         d8:91:46:3a:46:4d:9b:bf:36:0a:4d:bf:6a:c1:f1:af:97:b5:
         a3:00:03:fd:d9:e1:17:2e:87:cf:a7:87:24:18:d1:20:ee:60:
         be:e8:9d:a1:36:44:f1:86:7f:37:c8:16:d2:af:57:13:6f:5b:
         c0:68:d0:77:4a:43:26:14:9a:59:34:75:bf:eb:55:3f:fe:bc:
         90:b7:2e:e5:a5:54:97:57:87:ae:f9:a9:b8:07:63:ad:83:9e:
         76:c1:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----