Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
File:                     A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft (raw, json)
Hash identifier:          pn5TYkj8oHeTXu8/MhirZ4rBadPqACSNEB4LyXYKLxA=
Subject key identifier:   A9:21:D6:0D:AE:93:CC:EE:36:24:E7:E0:12:FF:7B:2F:42:39:44:C6
Authority key identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B
Certificate issuer:       /CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
Certificate serial:       4DDC24E804FAB35C6BE5DAB8B990727EB93B463F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
Manifest number:          D6
Signing time:             Sun 13 Apr 2025 15:29:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:24:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:56:16 +0000
Files and hashes:         1: A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl (hash: 2UnWr7st8Sg2BXvBdqa3bq2a5ULRpnHAkGI7rrGr750=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dc:24:e8:04:fa:b3:5c:6b:e5:da:b8:b9:90:72:7e:b9:3b:46:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
        Validity
            Not Before: Apr 13 15:24:16 2025 GMT
            Not After : Apr 14 15:56:16 2025 GMT
        Subject: CN=A921D60DAE93CCEE3624E7E012FF7B2F423944C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:63:82:d4:cc:a4:cb:8c:94:0d:65:ce:5a:
                    4c:10:e0:67:84:67:ec:16:3e:46:a0:44:3d:07:08:
                    cc:a0:5c:71:a6:24:4f:53:42:db:cf:82:c9:2c:5a:
                    65:1a:4e:73:e7:3f:3d:85:66:4c:0f:d7:09:24:b5:
                    68:30:20:89:b5:7f:ed:cc:a6:ad:e7:74:fe:73:1a:
                    66:58:09:2a:03:a8:bc:a1:0b:7b:21:45:f9:d7:9a:
                    79:67:95:a5:1d:01:7a:9d:9a:b7:83:9d:4a:e5:0f:
                    25:c2:8e:37:5e:36:dc:39:4e:6a:97:d4:77:d1:05:
                    0c:5a:30:bf:aa:83:2a:4e:56:78:fe:fc:12:95:70:
                    ae:77:60:62:ba:4a:95:c7:c3:42:b9:b9:ba:04:fd:
                    35:af:07:21:19:a8:1e:19:86:2b:14:dc:e8:51:62:
                    df:e6:16:81:87:03:df:48:ef:ef:c3:a2:e3:bc:a2:
                    22:d5:9a:7b:3e:b9:e9:1f:d6:52:d6:52:d3:2d:90:
                    69:26:14:e8:73:3a:4d:39:00:36:54:5c:8a:21:ce:
                    14:82:49:21:da:d0:1e:76:07:6a:c8:b9:79:42:42:
                    25:4d:c3:9f:a1:80:7b:f5:89:92:56:58:39:1b:f3:
                    96:ae:bc:61:72:2e:53:0b:93:24:c7:8a:e3:6d:e5:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:D6:0D:AE:93:CC:EE:36:24:E7:E0:12:FF:7B:2F:42:39:44:C6
            X509v3 Authority Key Identifier:
                keyid:A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:d1:15:51:c3:63:9e:b7:37:8d:c4:37:7c:61:8e:01:aa:
         80:e7:c9:11:7a:a0:6a:20:ed:5f:97:bd:7c:bf:17:d7:2f:b4:
         88:69:fa:3b:25:b8:c0:17:c7:44:c7:66:47:b4:88:ea:93:36:
         8e:44:fc:66:24:69:cf:fe:21:21:02:05:81:91:ad:fd:ff:dd:
         c1:a8:5b:24:bd:62:d9:fe:52:16:88:4a:e9:d5:e3:e7:40:24:
         d2:d1:4e:cd:25:b6:fa:16:e2:02:6c:ef:10:72:a6:47:b3:eb:
         8b:d0:90:d0:9e:76:78:cf:b6:86:63:c2:f8:94:a6:8d:98:4f:
         4d:30:61:1e:2e:81:cf:27:7a:ec:cd:78:71:d7:83:f0:e7:d9:
         fc:cd:b6:06:1d:d6:f6:19:9f:2d:f0:bb:d5:40:01:77:90:48:
         e6:64:dc:62:75:6d:73:84:15:23:79:ef:be:50:1c:3f:e0:7c:
         ec:7c:33:c3:77:42:45:bd:ea:bf:ad:ca:f4:77:b0:ca:fd:c4:
         b3:83:3d:ec:bd:6d:78:a6:4b:2e:89:b0:6d:7d:97:0e:14:68:
         89:56:fa:05:52:ed:f0:82:50:50:7c:eb:2e:e0:7e:5e:8c:a1:
         d6:74:b7:f8:7c:14:03:e8:35:fd:0f:c9:67:49:fc:a8:35:38:
         d5:77:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----