Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File:                     a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier:          /1jqHsNFCk/l0iwMaqs6B+BURymJ6jn9HaXfGhh/g1c=
Subject key identifier:   6C:82:90:B9:82:FF:67:C1:F4:2F:84:B3:38:18:2E:59:96:A7:9B:8E
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer:       /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial:       01962DF3B1D920F72FB6ED8847C82B957864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number:          0146
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: X3IGZL9Q723pJIn0dQyQkBCgqMqKqztthGWNzAAXCK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:d9:20:f7:2f:b6:ed:88:47:c8:2b:95:78:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=6c8290b982ff67c1f42f84b338182e5996a79b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:3f:56:0e:86:28:5a:8d:25:5f:eb:4d:d9:
                    88:bd:8a:ec:2c:b7:27:02:55:7f:9f:b3:4d:42:f7:
                    48:a1:04:ee:6c:fe:fc:9b:58:08:4b:57:fd:87:a9:
                    e0:48:0e:10:8e:68:09:01:03:a7:04:19:1d:ff:92:
                    88:88:65:b9:3b:58:67:cf:46:57:f7:e9:fb:a4:fd:
                    8a:55:b6:95:cb:37:67:7b:3e:4b:ca:1e:ee:61:52:
                    60:9e:b9:c6:c2:0b:48:5d:9d:32:de:ad:59:f7:f9:
                    d4:51:10:f3:60:d0:3d:0e:59:15:90:67:2b:70:e9:
                    95:b1:51:1c:c9:48:8e:bf:5a:37:4b:03:d7:1c:8f:
                    06:44:dd:7c:6e:2a:61:0e:8b:22:9d:1a:c1:60:d8:
                    48:e6:f3:cc:1c:8f:1f:ab:7b:79:59:65:20:bb:32:
                    6c:1f:51:c8:5d:c7:1e:fe:1b:0f:d1:e0:2a:dd:f1:
                    86:98:0e:dd:00:55:4e:14:83:a0:e5:1b:d8:b8:42:
                    30:09:db:18:01:25:bb:6e:bb:59:f9:59:33:fc:eb:
                    a7:b1:08:98:17:d1:e2:f6:ba:aa:02:83:28:63:61:
                    29:cf:69:af:c2:45:8b:bb:d5:4d:81:63:df:61:b4:
                    a5:27:9e:45:4f:da:f9:a2:9c:70:6a:bb:79:a4:12:
                    21:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:90:B9:82:FF:67:C1:F4:2F:84:B3:38:18:2E:59:96:A7:9B:8E
            X509v3 Authority Key Identifier:
                keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:47:45:30:b6:45:82:cc:a1:f2:51:f6:db:fa:e0:7f:c6:08:
         7a:89:36:3c:e2:ef:61:59:a9:06:29:91:db:fe:58:c9:5e:f4:
         ae:be:a6:e2:c4:15:9b:24:8f:61:3a:9b:25:54:07:e2:33:22:
         e8:f9:7a:71:d0:59:46:4f:60:e0:46:11:be:37:f3:5e:f0:b9:
         7e:34:45:c4:db:bf:ed:24:a8:4f:15:e9:20:d3:9e:75:ea:ee:
         ea:88:c4:15:9a:64:a2:02:6e:bc:b0:50:91:c5:2d:8b:49:d2:
         66:9d:a1:12:e2:54:70:26:8e:1d:e9:5d:ca:f6:da:e9:38:24:
         f5:a3:2b:c8:99:f7:1d:3f:c4:a3:31:42:11:78:b1:bb:7c:9f:
         d4:ef:af:13:4f:bc:59:53:50:04:a1:70:36:5c:4a:1c:fe:a2:
         9d:9f:81:11:a6:b5:d8:0a:9d:22:53:69:4d:05:0e:18:1c:1d:
         b1:d2:86:cb:ee:80:eb:85:1e:3b:62:24:16:d1:f4:b0:e9:18:
         7d:a6:b7:16:73:0e:37:7d:c0:34:a5:84:b9:0a:af:fc:ac:9c:
         23:36:67:64:19:7e:74:2e:47:24:99:3b:66:c9:e9:c6:8a:ba:
         af:6c:ea:9a:11:d2:1a:26:d0:bc:82:d3:8a:95:92:f7:4a:a6:
         15:56:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----