Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File:                     6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier:          DZBGXdcEZHeHs/zucSU61+7f+Ufn5tn8J93BLpc+NPA=
Subject key identifier:   BB:98:38:4F:13:33:11:F8:CD:E8:7D:7D:51:27:73:78:88:31:AF:D9
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer:       /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial:       01962E98AED2A20F4A62393397A2560012DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number:          0FCA
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: gAc5Q+XpPymKHrplDVF+1+PjG8aSiHxWgRkDfbFo6ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ae:d2:a2:0f:4a:62:39:33:97:a2:56:00:12:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=bb98384f133311f8cde87d7d512773788831afd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:51:f6:3f:d7:0c:d2:67:c6:b2:f7:fd:20:
                    91:f0:b7:84:58:6c:4f:64:02:c0:54:eb:33:0d:c6:
                    00:37:d0:a8:bd:b2:4d:a7:00:a1:92:dd:ae:f4:0f:
                    45:87:b8:57:db:f8:f7:cc:1e:11:1f:9e:87:24:8c:
                    b2:45:a6:cb:72:19:ea:07:c6:58:56:84:e1:3d:72:
                    b5:c3:70:f8:8c:20:57:18:23:18:7c:ea:67:fc:e0:
                    83:d1:91:35:44:d6:30:38:eb:92:2f:6f:f8:05:2c:
                    49:7a:5e:07:b1:f0:19:a3:ff:be:38:50:cd:71:e6:
                    ba:0f:bf:b5:12:79:8a:27:5d:62:b1:67:aa:b0:dd:
                    8a:1f:94:18:91:be:ee:be:43:3e:10:54:7b:24:34:
                    f3:a3:29:3b:fd:83:6b:0f:4a:e8:fb:f9:f1:c6:27:
                    a9:d3:ab:e1:ba:ee:4f:99:41:69:06:f7:bf:09:d6:
                    32:be:50:a5:06:8c:9b:0c:10:41:eb:0f:c1:db:34:
                    93:fe:8d:66:74:db:24:73:4c:39:bf:58:5a:e0:e5:
                    18:72:9b:e0:e9:41:7c:df:e3:6d:22:12:4d:29:d5:
                    22:88:b7:f1:e2:ed:9d:da:dc:ef:bf:4e:3e:51:35:
                    4c:3c:d8:d7:7d:2d:97:96:75:3c:cd:89:4f:fe:46:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:98:38:4F:13:33:11:F8:CD:E8:7D:7D:51:27:73:78:88:31:AF:D9
            X509v3 Authority Key Identifier:
                keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:68:ef:53:29:57:19:e6:11:b9:82:cb:d1:70:0b:78:a4:
         c3:cc:2c:81:e4:21:95:ea:ff:4f:af:da:03:db:23:4f:f2:96:
         e2:d0:56:6d:df:95:34:2a:bc:40:0e:a0:13:68:7b:61:f2:c6:
         be:61:59:c8:a0:aa:ff:78:d5:68:11:d0:13:4b:7c:e0:7a:e7:
         40:94:81:11:78:86:1b:90:34:c1:cb:45:95:1a:c9:12:44:4f:
         46:f5:ce:8e:23:29:ae:6d:93:bb:d1:37:f7:36:70:ae:47:69:
         75:eb:79:a9:b3:3e:b3:3f:ce:59:87:2a:a9:ce:91:39:a5:4e:
         e7:29:6a:5f:60:b5:07:c2:d1:91:2a:1a:83:05:ba:d0:fc:35:
         2e:49:ae:d1:2b:b4:94:f3:b8:6a:6e:cf:f4:54:57:d2:50:06:
         19:39:7e:a7:f9:6c:c4:d0:9d:d4:7c:43:82:77:5f:d8:14:49:
         1e:d9:b3:a4:1d:f8:9f:4b:43:ca:11:67:4b:4b:3f:af:12:79:
         77:23:94:32:13:27:96:af:f9:fa:62:f9:29:d6:2f:b9:8e:21:
         40:a9:b8:17:95:7d:f3:7b:df:f5:f6:f8:61:8f:9b:9e:15:3b:
         d3:70:a7:63:95:0a:8b:87:be:4d:fa:5a:22:d7:02:dc:39:4c:
         af:00:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----