Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
File:                     6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json)
Hash identifier:          HXVtXvNv5hUMO8NRRgSrl6vi0QZE+XLHIO4zkq2s93U=
Subject key identifier:   6D:BF:9B:86:57:D5:C1:7E:F5:D4:FA:5A:7A:30:CD:0E:3B:F2:7E:F6
Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
Certificate issuer:       /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Certificate serial:       01962DF3F1D64124F75FF24419427B9B6A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: xy12jT/GKiZE9lC20w8MV5zWRJXyHLJGMT+bsFvG1zo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:d6:41:24:f7:5f:f2:44:19:42:7b:9b:6a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=6dbf9b8657d5c17ef5d4fa5a7a30cd0e3bf27ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:a4:91:e0:09:84:bc:40:61:b0:5d:be:a1:
                    b2:ec:a3:84:cf:ce:5c:92:e7:1d:37:e3:84:e0:52:
                    34:c7:d4:31:b3:ac:56:45:a6:ce:fa:a3:89:01:4e:
                    d7:99:c6:7e:23:a4:40:46:a5:8e:22:13:54:48:8f:
                    d3:83:41:11:e2:0b:d2:25:7c:01:38:6f:a3:38:8b:
                    66:90:8d:ca:81:8d:5a:2c:f6:95:9c:bb:39:c1:f5:
                    14:6c:d3:40:03:98:8c:48:0b:75:24:cb:d1:0f:56:
                    69:a6:6c:d6:06:94:27:be:b5:ce:b0:d5:c2:91:8c:
                    a9:c2:af:96:32:43:1d:6a:76:88:f4:17:5d:e4:3b:
                    38:fa:c8:63:e3:78:bb:21:a6:7e:ab:3a:bb:67:f0:
                    e5:8a:8f:8b:05:47:20:b5:de:28:ad:71:cf:53:4e:
                    fb:62:95:7f:5c:ae:87:fe:6a:51:4c:52:75:76:50:
                    7a:63:c1:28:e6:f3:fd:e3:ec:d9:ac:16:70:fc:b4:
                    3a:22:80:d3:66:81:b4:62:e8:01:f9:7d:e9:66:43:
                    1d:c5:86:a5:06:3d:6a:34:37:a9:5f:e6:29:ac:80:
                    a3:d3:47:49:1b:31:13:66:a2:04:be:78:fd:e4:37:
                    77:a6:3d:c3:7d:2c:1b:4b:f0:a7:f7:34:84:6e:12:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BF:9B:86:57:D5:C1:7E:F5:D4:FA:5A:7A:30:CD:0E:3B:F2:7E:F6
            X509v3 Authority Key Identifier:
                keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:63:12:54:db:8c:09:ef:e2:52:1a:0c:92:e7:af:7d:e1:
         a4:c9:80:c6:83:4c:d7:ed:f9:c0:21:e1:b5:03:ab:f3:6b:35:
         80:ea:6b:ca:e8:3b:75:86:04:e0:df:ff:e5:79:18:df:03:ce:
         a2:dd:9c:3d:d2:32:e3:2e:1a:95:f1:69:46:da:55:05:d7:f7:
         df:7e:c0:1b:9b:7a:6f:94:be:aa:4b:6b:3e:6c:38:22:5b:7d:
         54:9d:dd:b2:2f:8a:19:bc:e1:04:f0:74:32:65:7b:b3:a0:dd:
         04:b7:ff:6d:79:58:73:c2:2c:c9:71:12:9d:8d:2f:fa:24:0f:
         c9:d7:bb:46:e7:65:43:b6:1f:d3:1a:ec:3e:ca:17:51:e8:3f:
         bd:c5:8a:b6:5f:cb:0a:55:b9:f4:8c:4f:96:9c:df:59:48:61:
         3b:c1:d9:c6:0d:cd:c3:c7:4a:bb:b1:ee:7a:11:10:5f:92:bc:
         08:c5:30:d1:a5:b4:a2:c4:68:fd:33:f0:1c:dd:9d:c1:a7:df:
         cd:e9:d6:0c:b5:8e:bd:51:31:de:ff:78:c7:4c:44:04:94:f3:
         9f:47:79:87:db:a7:63:29:67:3c:13:05:fd:ca:a1:4a:fd:bc:
         db:ee:70:bb:a8:93:ba:20:e1:ea:89:13:cf:f9:00:9f:38:d4:
         f3:b0:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----