Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
File:                     s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json)
Hash identifier:          8/KZdiIFdghFgD72Zyjy+jFxtjYVuqLzqhioaqqS5Qo=
Subject key identifier:   96:8E:F0:86:53:30:BF:86:DD:5A:44:B6:F1:FC:21:B4:67:65:F5:04
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Certificate issuer:       /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial:       01962E98FDC2B2E77041C17D20CDD6F9288F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
Manifest number:          1500
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: 1IyxB14_QkLsvmLRx3j-3a6Zjk4.roa (hash: htWKauGvhiwmC3uhHI9F9baGTADLWNpjXIog5aUAkzA=)
                          2: Hrw24NCuWIUCpkj_ixSA3ykRPr4.roa (hash: EL86DxycBZAbHkapsC+FVYde7DJDbg6IvsLrlIhK4Mg=)
                          3: HzkqLbs1liYqOOnORyYsONDUWCk.roa (hash: uXYRvHJ6LJgN5jTlxHsTjXJyetqQoAXwubqH0//UAWg=)
                          4: KW8HM7Vt-viFSQssh-MaAGQ56LI.roa (hash: LVB3HoG1zrGwq6DA6Whlqb+iZJnipajeWgJUkFDtgQ8=)
                          5: N8YU9P6afQ3l1ax9yLIDe6D0fIk.roa (hash: EU77Dk5F7GrtkJ85p7yvIHvzXNj6aNgdhN+Tn5j+zs0=)
                          6: NxaezdRi3ofV0Ea6FtmKMCg4Xno.roa (hash: OxfdQ+cdMI49CYY0Q1jeMkKHuJPcs1w/NoTD4eAZ2MA=)
                          7: jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa (hash: 4TEbxdiinYCpm4mycPqOwDmBBxQQxUxqZfGO0t4kbOg=)
                          8: mSsD_9FMfN2LP7M_Mwsa2ue8f54.roa (hash: 9X0dNAuuQyEHvxBMN4gp2QewnB9NGpB0KtQCW0IE4VU=)
                          9: oRsHwl0lqDdQsW8I1c5igLUyNzs.roa (hash: 8g9A+Hdue1idAErOv1qWZKgEKPMgG/A4+RlDqNfgnkI=)
                          10: oreGjQwv74g6OpxObQTCv-MnU1M.roa (hash: d1IJwSRdqQjA5VA/VLC7+miffsmnB8Nxer6G7ClHfMc=)
                          11: p2_R78qfiRDhzvxPsVGCBtVmaJE.roa (hash: AfONkYdMNZkN9Er/D4pbys1uxPQQYlJm+sdpKa5QxNI=)
                          12: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: VvtZbifkKFZPLfaTG9K3HLNvHImFWZWP8b3olpDEbCk=)
                          13: vxg-yi7SqRx3q3DlZJY82nlINbw.roa (hash: 8Tp3GLDI+FIAlBt1x2bg1AA0ZulV2JjhMEdWi/PMtGA=)
                          14: wjy1-qmg6rYR0UilXbPOrktmKnc.roa (hash: OCHLZL4VOIDtWxajhki14b+EkeW6juZq6cOYKpzs8QI=)
                          15: xMcgE5el8x0M_rTEbVyhY3X3x1c.roa (hash: PGLJrZJLBXcLan5LC1jzJXTcMWQ+drrbyWZOiA3GgNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fd:c2:b2:e7:70:41:c1:7d:20:cd:d6:f9:28:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=968ef0865330bf86dd5a44b6f1fc21b46765f504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:1a:9b:a9:cd:ff:76:71:2d:02:16:f4:86:
                    0e:be:64:d4:c5:2d:fc:13:5a:0b:8c:08:a1:bf:0f:
                    22:fb:d0:30:2c:e5:ff:87:2f:73:79:be:1f:e6:60:
                    ef:a5:4c:06:a1:0a:89:e2:4d:fa:aa:b7:99:74:ad:
                    89:ec:67:f3:83:c0:a7:e2:d9:38:c7:2f:42:a4:e8:
                    0c:c7:bb:14:3a:16:d9:90:cb:88:5f:1f:d4:cb:21:
                    02:db:35:53:2a:db:50:8c:11:b6:68:92:98:36:07:
                    61:76:3b:4a:ba:f0:59:c8:28:9d:fd:9e:49:1d:24:
                    1b:b8:50:9f:a5:73:3d:98:0d:f5:2b:8a:ab:7a:1b:
                    1c:32:67:d2:e6:56:06:94:03:18:45:d5:f7:d7:3c:
                    18:ea:21:80:18:38:32:5f:0e:7e:0e:b3:cc:44:1a:
                    bb:22:ee:70:8e:31:7e:9a:13:74:a7:e5:cc:7b:fe:
                    4f:cf:7f:e8:6f:5b:89:f6:c6:8b:a3:70:4a:9a:56:
                    9f:d1:72:3c:97:ed:b1:e2:04:96:80:5c:25:1b:33:
                    9e:c6:ca:52:96:b0:4f:ab:bc:2f:cc:0d:4c:11:b5:
                    ec:55:74:4d:04:b0:9a:f9:a0:1e:66:bd:4a:0b:b4:
                    53:e5:dd:3a:59:d3:d8:a4:3a:0b:94:b0:da:02:4e:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:F0:86:53:30:BF:86:DD:5A:44:B6:F1:FC:21:B4:67:65:F5:04
            X509v3 Authority Key Identifier:
                keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:51:a4:72:9f:6a:07:0b:fa:98:45:2c:95:f3:45:3e:18:
         da:a1:51:45:45:73:a2:12:b7:58:6f:df:0f:66:bb:e5:b0:1b:
         a4:bd:e1:a6:31:3d:7c:5c:9c:fd:df:ec:66:29:19:06:c0:8a:
         06:ff:1e:46:a8:7c:80:97:6a:f9:ae:5e:17:51:34:24:0b:33:
         44:9f:82:d5:66:69:37:9b:9c:09:f1:87:f4:be:a3:15:36:23:
         2d:02:ac:93:58:e9:f9:d5:6c:ef:b9:21:27:82:0e:dc:20:44:
         15:67:67:bd:62:c3:5f:4e:04:29:bc:27:23:3d:fc:1b:1c:6f:
         f1:ba:43:c2:8e:49:05:1c:86:23:d1:95:cc:33:cd:b7:58:f6:
         34:6c:60:51:1f:d5:42:d1:70:43:73:a5:46:e9:b3:06:a2:38:
         68:79:7b:a2:da:d0:23:d6:1f:49:d5:27:a9:de:c5:84:e0:0c:
         3a:d0:cf:29:8d:70:0e:1f:e6:79:ca:07:a0:da:6f:79:8d:01:
         2e:a1:ec:c9:9d:e4:22:46:45:a6:ee:7c:1b:52:7a:f4:bd:bc:
         1e:76:6a:c1:66:d3:51:7c:3d:1b:0f:c3:65:cb:8c:5f:c9:89:
         a0:8f:18:8d:2f:00:fe:a0:3b:26:eb:60:1f:45:01:98:c0:b9:
         7d:61:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----