Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
File:                     bQmekI59iHniTR7eCdgSz0at4sw.mft (raw, json)
Hash identifier:          9DsqJmOl83/jDaH+aBP9CkFRU4QVaGj4f5PLC+L2Cjo=
Subject key identifier:   9E:15:C7:D0:20:29:9C:37:A7:4D:E0:F6:98:66:66:C2:08:0C:A7:E5
Authority key identifier: 6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
Certificate issuer:       /CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Certificate serial:       01962F0737E2519CF31B7DC52DE7B7369E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
Manifest number:          03E6
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: bQmekI59iHniTR7eCdgSz0at4sw.crl (hash: l7fNzO2xPLnw2f/WM7BjEW6hN/tz+9lZTMenaehnZp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:37:e2:51:9c:f3:1b:7d:c5:2d:e7:b7:36:9e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=9e15c7d020299c37a74de0f6986666c2080ca7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:98:86:23:57:1b:9e:e7:86:04:67:cc:a4:
                    ee:c6:25:e4:99:b0:7a:5b:a3:ad:d8:c1:9a:95:ba:
                    aa:5b:e4:7d:22:56:41:1a:59:b9:6c:ce:6e:10:3d:
                    cc:08:5e:e9:0b:af:5d:0f:0b:6d:a1:98:9c:24:a2:
                    b1:0a:3a:41:a9:f0:1e:d6:46:43:8a:94:53:e5:d8:
                    e8:79:ee:91:46:22:b5:ad:8b:9c:e2:5a:47:2c:07:
                    cf:f0:37:44:f2:ab:60:22:c0:2a:39:6c:97:b3:c0:
                    eb:65:e2:f8:7c:5c:d0:88:ed:1e:96:0a:d1:8f:a7:
                    ed:fe:a0:84:20:49:72:1b:a9:f8:f1:7e:cb:3d:c6:
                    24:51:08:e3:10:e4:ac:66:f9:2d:9a:e4:bf:d3:52:
                    d0:1c:eb:d2:ff:b6:c6:dc:de:24:bf:ac:e0:ec:8d:
                    68:be:bd:3f:29:7e:9a:8b:06:f9:0a:0d:8a:99:42:
                    3e:29:7b:62:0e:16:1a:31:e8:0d:a0:a2:03:46:e1:
                    50:e7:e7:08:76:df:d2:fd:03:e0:a7:2a:74:da:a1:
                    ac:38:ad:c9:a3:77:a1:e5:05:5b:f5:58:26:83:3d:
                    6b:33:70:6a:d2:50:62:f0:3f:36:44:08:47:88:1e:
                    e4:a9:4c:72:4a:3d:a4:47:b2:d0:9d:d6:dc:eb:0d:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:15:C7:D0:20:29:9C:37:A7:4D:E0:F6:98:66:66:C2:08:0C:A7:E5
            X509v3 Authority Key Identifier:
                keyid:6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:04:76:8a:98:cc:0a:a5:03:2c:66:12:16:81:1a:44:af:77:
         6c:37:f1:cc:8a:53:44:1c:bf:a0:59:f2:e7:7e:5c:d2:88:0a:
         d2:60:57:f3:e9:cd:88:00:1e:d9:fb:39:0a:cf:1c:91:ee:5d:
         cb:4d:bb:57:78:33:99:3e:71:42:2a:69:49:2d:00:a6:6a:fd:
         4e:0a:64:14:f1:41:de:ff:5b:38:21:2f:51:64:08:e6:b3:ce:
         46:a4:ad:68:04:cd:72:4b:47:f5:f3:e6:14:f5:cd:30:48:5e:
         dd:c8:fb:de:30:f6:0a:1f:6e:fa:ad:b6:bd:a5:eb:de:fc:6a:
         7f:90:57:92:7b:c4:1e:29:11:1d:a8:f3:a9:aa:bd:0b:78:d8:
         43:11:3d:51:67:36:b9:73:14:08:0a:46:2b:fb:f1:bb:81:fb:
         0d:1b:12:6a:86:35:b4:89:91:57:1b:60:5d:b7:82:ca:f1:c7:
         83:53:44:25:00:48:d5:72:56:88:47:ba:08:ff:a1:7b:28:45:
         69:7a:c8:f0:b3:15:1d:7e:15:c0:62:d3:f1:7d:46:28:f6:ad:
         0d:91:4a:3e:f9:a1:30:a1:01:77:d6:b4:e4:a1:3e:8f:fc:4e:
         71:54:f6:26:91:78:a3:b8:a6:ae:35:08:13:68:c1:d0:b9:b0:
         f8:4f:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----