Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File:                     tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier:          iOuq7NSs4AfacoKhhR5KES6HDF1aY5AoloGfMich3jQ=
Subject key identifier:   5E:06:AD:82:9A:3A:13:1C:BB:14:E3:DD:74:9A:76:2F:50:CA:FE:8F
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer:       /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial:       01962E986F76642335D9B49767677BFBB645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number:          0CED
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: zXV5K8kHYxvYpqmqRJuUhVViE32Z+0IY4+00UBVeC9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6f:76:64:23:35:d9:b4:97:67:67:7b:fb:b6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=5e06ad829a3a131cbb14e3dd749a762f50cafe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:3c:b4:f3:8c:ac:97:9f:f9:47:fa:92:e3:
                    00:1d:18:2d:76:79:bd:4f:88:3b:db:e1:07:b1:16:
                    86:b9:9d:ac:41:31:7a:8a:4f:7d:b5:72:cd:22:f2:
                    02:47:fc:cc:0d:25:8f:d4:1a:53:e8:c1:56:74:b8:
                    f7:75:97:2d:d0:8f:7f:51:7a:33:9a:e4:50:02:f8:
                    af:e8:26:fb:12:b3:d5:5f:bc:ef:47:bf:fe:4d:88:
                    a1:24:a8:c5:29:45:5a:b2:27:b7:a1:19:6f:8a:b4:
                    f8:bd:d0:de:c6:cb:6b:9d:62:4d:36:03:60:f2:5d:
                    d6:5f:b5:ff:82:51:37:1f:32:18:54:6a:cb:cd:cd:
                    e2:78:d1:20:08:8e:19:b2:27:1c:fd:23:64:35:33:
                    10:9f:4f:2e:25:76:db:2c:df:76:8d:cd:b6:7c:2b:
                    a6:4d:5d:da:65:2d:0f:7d:65:b4:60:c5:5d:ed:05:
                    a9:cb:d7:8a:fd:11:fc:ba:3d:80:e7:d9:a3:cd:4d:
                    51:e4:11:bf:15:de:cf:f8:43:6f:c5:ca:ee:53:36:
                    76:40:64:67:63:61:80:6c:7e:51:8e:62:3d:c4:22:
                    c9:48:9a:42:70:11:ff:32:7b:f7:a2:b1:ba:f7:6b:
                    70:5f:92:1a:59:c4:01:42:e6:b8:6e:bb:9b:0b:53:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:06:AD:82:9A:3A:13:1C:BB:14:E3:DD:74:9A:76:2F:50:CA:FE:8F
            X509v3 Authority Key Identifier:
                keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:37:7f:d0:94:75:5b:42:70:ed:06:03:f4:f2:5d:00:65:b8:
         1e:e4:7d:96:8f:f4:25:ac:ad:47:90:a8:24:3b:00:18:ec:b6:
         3d:ef:a3:b3:d6:35:84:d3:f9:e0:74:4a:af:e0:3a:c5:cd:33:
         a5:d5:aa:18:50:c9:ec:a1:99:ce:52:c4:2c:14:94:40:1d:60:
         f0:d8:b0:8d:9c:03:ed:0c:6c:0e:e8:c4:45:d7:39:9e:c1:86:
         90:53:4e:6f:50:f6:b4:9a:b3:b8:f3:d3:ba:8a:48:bf:17:bc:
         97:ef:fb:22:1e:4a:1a:83:6d:6f:d1:4f:a2:42:b3:ff:69:87:
         8d:68:17:f7:ac:0e:89:b4:cc:d4:7c:b5:48:7b:a3:75:da:44:
         6d:07:00:33:2e:a0:7f:f1:19:9f:28:ab:62:03:ee:87:15:28:
         81:07:31:36:98:3c:bd:b4:3f:7c:2a:d4:2a:0e:be:61:d1:e2:
         aa:82:c7:55:93:d7:86:9c:10:53:77:cb:4a:ec:3c:a2:b9:76:
         cd:a1:60:16:e8:5d:3e:89:fa:36:51:8a:a7:b8:03:86:eb:cc:
         1a:95:e1:bb:90:05:c4:b6:fc:82:fd:9f:46:f5:b7:9b:ff:30:
         b1:c4:62:e9:35:c7:10:be:f0:0c:b9:3a:fc:21:87:3f:a3:91:
         4d:69:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----