Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File:                     pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier:          E7g0xsqNLhT5cGgqHF/49fKAloxv0aaYoVNopwaJLfc=
Subject key identifier:   A3:5F:62:00:EB:0E:06:E5:97:5F:3B:5A:E7:F8:89:73:44:C5:73:D4
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer:       /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial:       01962F74BDA6606DF910EE90617C623F2107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: 9c4QclMhZe8IaRC0xXihqjSLd34EeqQPlAwvjxjWhDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:a6:60:6d:f9:10:ee:90:61:7c:62:3f:21:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=a35f6200eb0e06e5975f3b5ae7f8897344c573d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:bc:a2:c4:44:89:55:29:40:a1:8f:84:cc:
                    97:e2:22:0a:ad:77:f8:89:75:1c:2d:23:5e:ca:88:
                    95:03:53:b2:90:59:04:c3:d2:24:ca:c0:70:42:f6:
                    92:47:8d:9f:3d:79:5c:67:2e:1c:48:f8:a9:c4:66:
                    e1:e5:ce:d9:c9:11:c0:7f:83:e5:a1:d8:51:01:43:
                    d5:69:ad:b2:67:bc:f5:20:f6:49:7f:37:61:c1:1b:
                    7d:0c:ca:29:cb:2c:22:f8:20:21:10:d7:7c:1c:52:
                    5f:1d:5e:f7:ea:43:ef:b2:c7:96:e5:4c:7a:69:65:
                    a0:0b:81:e9:f6:67:b1:ff:5b:b8:e2:e2:e6:5f:38:
                    2a:f2:98:07:d0:5b:cd:fb:88:7f:86:a2:d9:18:d0:
                    25:30:47:b8:c1:dd:5e:4f:9a:19:8a:d6:4c:a1:30:
                    2f:af:11:2c:aa:a7:4d:90:fa:49:9c:46:f0:a5:da:
                    00:3a:83:15:b1:b3:25:ff:c8:3f:c1:41:04:18:82:
                    49:b7:73:07:b1:a5:18:60:55:dd:03:1a:b6:4e:24:
                    c9:09:4d:ac:48:e9:4a:89:5c:d6:d2:62:85:38:1d:
                    93:10:3f:16:62:36:d2:f9:56:8a:1c:19:34:ba:40:
                    29:31:c1:e9:f8:86:b2:94:78:ed:bc:25:62:69:10:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5F:62:00:EB:0E:06:E5:97:5F:3B:5A:E7:F8:89:73:44:C5:73:D4
            X509v3 Authority Key Identifier:
                keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:d0:10:18:b6:be:aa:85:1f:20:bd:bf:01:52:d1:47:c6:
         b3:8c:e8:93:13:00:0d:df:91:6e:46:8d:3e:76:23:b9:02:c6:
         09:0f:fb:8a:47:28:6c:13:81:c3:15:b4:53:e8:4c:b2:1d:40:
         26:88:83:d9:42:19:7f:3f:7f:f9:2f:11:88:30:8c:55:69:68:
         db:5a:67:5c:e4:71:4c:56:06:8c:84:82:e7:5a:0a:96:9b:ce:
         e5:30:2c:fc:fa:03:57:e8:29:fc:46:76:c1:1f:46:b3:25:aa:
         0f:a4:a7:91:ed:ab:c8:bc:40:00:d6:18:4b:2c:9b:7d:04:00:
         aa:49:ae:5a:47:8e:b1:3a:ac:98:ab:13:93:d0:06:03:ad:2a:
         dc:2c:7a:78:7a:d2:c3:91:ee:3d:10:bb:2a:7b:28:bb:1a:57:
         b4:b2:77:fa:be:2f:23:83:ff:ea:50:11:6d:49:79:42:ab:36:
         e1:41:81:03:5e:db:55:18:0c:1c:35:bb:fe:e8:ab:94:1b:ae:
         9f:ce:0f:f5:09:d6:cc:54:57:24:a9:96:f9:bf:81:0b:50:e1:
         1c:fa:91:0c:fb:38:1c:0f:78:dd:04:94:7d:f2:2d:c9:b3:5d:
         1c:9c:ee:b4:2c:65:45:67:4c:85:96:2e:bd:4c:19:cd:33:bb:
         5d:19:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----