Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
File:                     R6GA6fZdeI0WzuafVNYgZDvNYOc.mft (raw, json)
Hash identifier:          7kTT7bD5RlvfAVYzl1XcMoYW6Uc8Ph7Nk7kekr/UfrA=
Subject key identifier:   70:9A:C5:05:59:9C:33:42:0C:39:58:AB:56:03:F3:0E:22:A3:83:CB
Authority key identifier: 47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7
Certificate issuer:       /CN=47a180e9f65d788d16cee69f54d620643bcd60e7
Certificate serial:       01962F06A39055C0551AFFA8BEA8B293843A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
Manifest number:          098F
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: R6GA6fZdeI0WzuafVNYgZDvNYOc.crl (hash: AzgZml7AXOvjIfP4vXu3dO3UhwE3ZSAzjZ6ioQS/USc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a3:90:55:c0:55:1a:ff:a8:be:a8:b2:93:84:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a180e9f65d788d16cee69f54d620643bcd60e7
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=709ac505599c33420c3958ab5603f30e22a383cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:57:fb:08:c2:bd:2a:cf:1f:3a:36:2e:ab:
                    e7:ad:d0:bd:b1:e1:e1:ce:6b:1a:a6:9e:dc:87:75:
                    53:b0:4c:92:03:ac:da:24:40:30:69:f6:ad:5a:c1:
                    d3:36:87:27:04:92:4a:72:31:08:6e:57:4a:a8:db:
                    90:82:16:7e:74:35:22:43:ba:61:6b:a0:67:c4:de:
                    45:0c:2e:05:22:be:18:af:b1:12:1a:fe:6f:37:44:
                    6d:4b:92:4b:61:a7:8f:f5:c7:9e:2d:51:b7:bd:09:
                    5d:dc:d2:e2:7d:c0:d2:1d:19:02:6f:92:4d:db:32:
                    75:2d:52:ec:a0:c6:76:48:73:67:57:c1:05:c9:c7:
                    0d:4b:a5:1a:86:5a:13:14:21:d7:80:41:6a:8c:14:
                    c3:9f:34:92:e7:51:5b:8b:b9:44:75:86:78:15:e1:
                    9a:e9:af:35:c7:a7:55:c2:41:e4:68:09:3a:89:21:
                    df:20:73:4a:6b:86:cf:b6:7f:ac:60:08:16:bb:1d:
                    54:44:ff:46:73:f7:d0:24:dc:51:49:70:b4:00:40:
                    e5:58:85:d1:a2:56:01:52:f4:a1:c5:6c:e7:a3:d8:
                    f4:47:6f:36:15:20:77:7f:ce:81:e8:65:94:c5:7f:
                    ba:a7:e2:f0:5d:5b:00:1d:c5:aa:96:e3:fc:13:27:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:C5:05:59:9C:33:42:0C:39:58:AB:56:03:F3:0E:22:A3:83:CB
            X509v3 Authority Key Identifier:
                keyid:47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:25:e7:3a:55:79:aa:57:e9:93:65:47:ca:d1:81:ce:b4:dd:
         b9:86:b7:e3:29:08:3a:0e:45:15:3c:36:49:8c:b5:1a:b1:b6:
         9a:e6:dc:5d:ec:c4:ee:8b:95:cd:e0:d8:56:33:bf:59:92:89:
         cd:03:34:a9:08:d6:6f:62:11:d1:ba:63:50:e0:a3:78:c9:7a:
         c9:59:f4:10:67:f0:ba:15:6b:bd:94:ac:15:b1:fd:6c:43:2a:
         08:3d:a1:f2:89:dc:6d:84:b5:42:e4:43:20:d7:6d:db:74:8d:
         df:b1:8d:80:37:e1:09:5c:47:03:cc:76:74:f9:c9:6b:dc:20:
         0d:92:f1:f6:62:f1:25:9c:18:d3:d9:f3:42:4c:8d:5c:f9:34:
         1b:e9:6f:ac:cb:c7:0b:36:bb:00:b7:ea:a7:a5:1d:47:fa:c8:
         a9:53:af:b4:bf:53:2f:2a:e8:2f:0c:c9:5b:82:db:cc:c4:64:
         29:5d:51:0f:cc:91:8c:9b:f9:0f:ac:5d:57:3e:a9:6d:df:32:
         29:9d:dc:6e:01:d1:68:b3:7b:d9:c9:9f:20:8d:48:ed:9c:84:
         13:57:c7:a4:f8:dd:f7:cb:44:56:d6:4d:db:df:08:43:98:41:
         01:0f:41:f6:24:dd:1c:f3:61:5a:76:e1:90:91:51:ae:fa:be:
         30:3b:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----