Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
File:                     6quXbuOZaLcCcSdvbSLluRyOFuM.mft (raw, json)
Hash identifier:          siI+iKJch/5Fa0WoQSEH+ZCROMlD2oSnnfyRbIPjpa8=
Subject key identifier:   B5:22:EA:F2:71:4F:B2:75:AC:11:C3:45:86:62:16:43:01:A8:32:2B
Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
Certificate issuer:       /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Certificate serial:       01962FAB54BE03C86AF422B3C4B93D33C552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
Manifest number:          0420
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 6quXbuOZaLcCcSdvbSLluRyOFuM.crl (hash: fyV0pbEmCyEUYvSfUlKR1FBTqjxixVCNLzysB93gyeI=)
                          2: i0q0WkljmRyWQBIX1k1gWh9MzA8.roa (hash: trVbr6O3e+ojVgxfkyiAOzBDkcebOcDQG0rTpSEVsGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:54:be:03:c8:6a:f4:22:b3:c4:b9:3d:33:c5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=b522eaf2714fb275ac11c3458662164301a8322b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:24:98:a5:d2:e9:bd:27:62:9b:5c:85:ad:
                    28:8e:5d:e2:dd:07:ec:5e:f3:0a:a6:df:25:80:5f:
                    39:c9:60:d3:ad:00:65:a2:bb:e9:b0:64:43:54:57:
                    1e:d2:fe:61:1f:47:8e:63:d5:9c:e1:2b:22:84:58:
                    ec:fc:52:27:75:25:f8:f8:bf:66:74:54:6f:90:5b:
                    a8:32:bf:44:40:20:3e:d1:e6:db:a2:5a:62:98:cf:
                    12:94:8c:da:96:9d:2f:c9:d6:aa:23:ef:73:66:77:
                    64:83:b0:67:75:53:c5:db:4e:7c:6f:10:dc:5e:30:
                    27:a3:e4:eb:b5:d4:2d:05:d2:53:bb:29:b2:94:1b:
                    ce:7a:85:be:55:db:ae:db:c4:a5:78:27:c7:0d:40:
                    3a:21:fb:db:d9:f0:d2:28:bc:ba:46:f3:03:71:d6:
                    ec:10:1f:9b:95:f2:3d:82:fb:4e:2c:c4:85:bd:a9:
                    fd:f1:65:2a:ad:d8:54:ac:eb:f3:b0:c6:c7:2b:d4:
                    5f:6c:f1:b9:55:95:d6:bb:73:30:ef:eb:78:2b:68:
                    cb:cb:cf:2b:15:43:dd:70:53:d4:32:c9:2e:cb:c2:
                    e1:4c:b9:85:ea:b6:f8:8e:97:bc:96:f4:08:0e:b8:
                    6e:0a:8d:02:7f:13:da:98:80:09:2c:ed:d9:56:60:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:EA:F2:71:4F:B2:75:AC:11:C3:45:86:62:16:43:01:A8:32:2B
            X509v3 Authority Key Identifier:
                keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:31:ce:a0:58:bf:c5:d1:a2:57:36:34:73:fe:21:44:63:
         16:bf:d6:f4:8e:0e:74:6c:f9:a5:2b:48:75:66:3b:c7:88:35:
         66:3a:d0:13:00:92:6a:c3:83:18:f5:cd:dc:10:ee:b0:8f:76:
         7d:36:fc:64:da:29:6c:04:df:56:f2:49:82:7b:b9:be:1d:6e:
         60:60:c7:cc:da:68:cd:55:87:5f:4b:9f:53:b7:bc:2a:7c:54:
         07:cf:34:7a:45:f1:92:2b:d2:44:97:d1:1f:23:8a:1a:89:4e:
         b5:4e:45:9d:81:3e:9b:2d:6c:d1:3c:1c:75:d8:6b:85:c0:5e:
         ed:f6:c4:d4:48:a1:e3:fd:4b:92:d5:9e:b1:14:4c:c6:86:08:
         6e:bc:79:8c:08:55:ab:9f:e5:de:56:0b:f0:96:8a:97:5b:2c:
         75:86:e5:1c:dd:49:97:44:36:f6:c0:20:26:f9:3b:50:6d:35:
         0a:e8:45:1c:99:34:74:7f:43:6a:4e:a0:e5:39:30:a0:ee:33:
         b1:4a:9c:24:a1:7c:7b:c9:11:d9:53:18:42:2f:71:21:52:9b:
         4c:17:54:86:dc:ba:2f:e9:1f:eb:7c:bd:2c:bc:3f:cc:d4:87:
         f8:ff:24:0e:e8:88:7f:f8:3a:1a:3a:99:d0:11:f3:03:20:15:
         7e:3e:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----