Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
File:                     6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json)
Hash identifier:          N01FXmEpxtbcvc76XMgkEqg2DDPPd0l+etf+L19E5EM=
Subject key identifier:   84:CF:C0:6C:F0:93:AB:2D:D2:FE:54:EA:0E:E7:58:17:DD:91:93:92
Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
Certificate issuer:       /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Certificate serial:       01962F3DBD5E098B2204E0EFA72F9874E3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
Manifest number:          0DAD
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 0IRtpKWzk8HJphT_ihghX52o_pQ.roa (hash: hQ8UcdaXM+7M8W7AcOjTNRV8pYkTm524u6CkYGZP1Ds=)
                          2: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: /2jir21h99uwKgLd2WCyC+EBK9RH2l1KuUf+i6EQZ74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bd:5e:09:8b:22:04:e0:ef:a7:2f:98:74:e3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=84cfc06cf093ab2dd2fe54ea0ee75817dd919392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:24:df:d1:e7:91:bc:25:4b:e8:c8:69:db:
                    c6:99:3a:f1:74:f4:57:b8:a9:60:37:78:00:d2:94:
                    35:93:e9:4a:6a:b1:ae:98:1f:72:1a:9c:5c:f5:98:
                    94:c0:40:62:9e:d8:5b:74:ad:a4:d0:a3:ba:4e:44:
                    07:b8:69:80:09:07:52:12:92:57:26:ec:2a:36:3f:
                    b7:ca:50:b0:e5:05:45:73:6f:ff:9f:54:56:85:7e:
                    67:c3:97:58:b9:61:39:ae:d8:40:50:4e:18:b5:34:
                    cc:37:64:03:15:a4:bf:22:b0:2b:6b:4b:53:40:c8:
                    68:eb:65:33:5d:3d:ef:12:9f:e6:d1:1a:de:23:b9:
                    4b:d7:da:5f:ea:f5:90:92:c3:51:95:ee:81:ee:e9:
                    ea:e4:71:53:1b:16:52:56:d0:41:fc:50:5d:fb:21:
                    5f:e7:dd:07:2b:65:df:98:8b:09:ff:cf:27:7f:59:
                    20:06:a1:03:40:ae:da:ae:6d:bd:b4:cb:27:95:a4:
                    6d:aa:e5:c2:ee:0c:25:79:0d:db:2b:1f:2d:01:5b:
                    e1:20:57:26:ab:17:4a:e4:83:38:3f:bd:e1:f6:df:
                    7d:f0:6a:e7:ae:f2:de:8d:f6:92:eb:90:f6:1e:cf:
                    1e:32:c6:03:85:48:37:c7:b1:b6:37:3e:7d:67:bb:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CF:C0:6C:F0:93:AB:2D:D2:FE:54:EA:0E:E7:58:17:DD:91:93:92
            X509v3 Authority Key Identifier:
                keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:23:0f:ce:19:fd:24:de:9e:00:d9:30:c1:17:1c:54:02:
         09:8d:11:e3:e6:45:62:87:16:f7:bc:ff:17:30:df:e3:4f:b2:
         3b:45:85:f4:12:3f:bc:68:3e:bb:15:55:72:f3:eb:96:8f:70:
         53:99:92:60:0b:32:ab:99:24:aa:81:6a:da:64:f0:23:49:7e:
         4b:00:b8:d5:82:19:08:2e:5a:fa:ec:5e:82:8d:fa:f5:c4:b9:
         ff:58:6b:45:f0:4a:d6:8b:c9:ab:10:15:55:a3:cd:72:98:43:
         87:58:28:19:31:32:4d:39:83:c4:1e:89:41:59:9b:da:01:cd:
         07:af:f2:0a:cb:55:86:57:ce:d7:cb:60:09:12:f6:29:c3:80:
         96:11:71:34:63:ba:01:9d:68:76:7f:9e:b5:0a:85:14:4f:bd:
         1e:c8:34:c2:9d:61:04:a1:55:06:8f:4a:56:59:4e:35:01:3e:
         0a:21:dc:e3:06:27:78:a5:9c:ba:47:1f:0b:ed:2c:4d:df:22:
         28:a3:4f:29:0d:b2:81:fa:a3:9b:9f:4d:32:21:db:33:bd:4f:
         39:e6:98:a4:24:c3:09:bc:89:53:0e:0d:ce:7b:89:c9:b9:24:
         83:30:ea:f5:12:16:bb:f9:3d:d5:01:b0:fa:21:74:f7:35:64:
         f2:0c:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----