Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File:                     ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier:          0uN3129K5AtXU2aDSv0nh1rK3/dtthf0u4T0MLt7Czs=
Subject key identifier:   D6:E9:6F:D9:54:AB:E1:9D:74:41:D8:CB:A4:49:EC:AC:A8:07:A3:EA
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer:       /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial:       01962DF3DE2B677B63F7F5035E021030EE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number:          115D
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: lzACAfAKu46YI7uuhE3SO1fXVXbBWJRAXnYdZvPnQlc=)
                          2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
                          3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:2b:67:7b:63:f7:f5:03:5e:02:10:30:ee:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=d6e96fd954abe19d7441d8cba449ecaca807a3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:5a:ec:4c:c8:76:cb:d7:fc:e7:8d:b7:58:
                    31:32:63:66:90:a8:7a:b6:39:15:ae:2d:2a:a5:0f:
                    5d:d0:61:7c:f8:74:46:f0:9f:4f:7e:09:4e:64:d9:
                    f2:09:ed:8c:e5:a9:cb:07:d1:45:2c:b2:a9:eb:27:
                    9a:83:8e:09:20:c8:90:42:12:77:bd:5e:ff:47:52:
                    b6:ff:2e:d2:3d:54:28:b1:35:b0:76:13:a9:26:4d:
                    35:a1:b9:0f:21:d8:6d:cc:ea:86:84:8d:0b:c3:25:
                    e0:f9:a8:f9:a9:ed:e5:26:36:e5:70:7b:17:f9:f7:
                    30:c2:c8:54:10:af:a9:99:56:3a:2a:30:43:4e:99:
                    b2:51:45:19:70:3c:7b:51:dc:7e:1f:8b:ea:82:97:
                    31:51:e0:ea:36:de:f2:15:63:78:c2:59:d7:be:dc:
                    21:9c:b3:2c:b4:ce:14:6d:b1:96:d2:e9:31:5b:cb:
                    ac:29:e0:6f:10:52:bf:95:48:b7:20:ba:d6:d5:cf:
                    2c:3f:fe:2e:ea:18:f0:23:e4:c8:54:ee:eb:bd:b7:
                    5f:38:93:9d:6e:1b:40:6b:b1:03:07:f9:cc:1e:b7:
                    6a:a8:f0:f5:d5:bc:d5:a2:2e:30:de:f4:42:a9:7f:
                    85:7b:d8:40:44:7e:09:36:37:d6:f9:c5:ab:9b:b5:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E9:6F:D9:54:AB:E1:9D:74:41:D8:CB:A4:49:EC:AC:A8:07:A3:EA
            X509v3 Authority Key Identifier:
                keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:ff:9f:0d:5c:84:21:46:c4:c1:3d:53:0a:45:9b:05:3b:
         f0:ec:c0:4d:7c:f6:fa:fe:84:b8:ba:2e:3c:56:96:a6:28:01:
         43:8e:92:d4:1c:43:af:79:a0:7a:54:57:3f:b6:ed:3f:1e:a6:
         c4:05:e8:c5:2a:a1:10:fc:ef:e5:f6:30:74:16:5c:f4:a9:9b:
         6b:f4:82:a7:a1:f9:4f:20:89:7d:83:de:b8:08:65:71:b5:aa:
         58:cc:d8:46:bc:e6:d7:16:31:3a:59:28:01:5c:4b:41:2a:aa:
         de:01:a8:16:a4:fe:86:5b:c9:41:af:92:24:6d:b6:05:24:f8:
         b3:f3:1b:49:6a:c5:c9:5a:97:e8:2e:15:8b:ee:e2:dd:72:9a:
         c9:48:de:3c:e3:78:45:a5:e9:63:59:96:b9:67:48:d5:bc:22:
         65:93:52:38:93:b5:71:a4:cb:d4:54:c9:90:b9:51:73:07:3d:
         96:29:83:0c:c6:ec:e5:d1:00:23:13:70:23:49:ca:b2:e8:41:
         2c:45:36:86:b0:43:74:92:d2:55:9d:6c:97:29:bd:57:ff:79:
         35:4e:5a:8f:1d:6e:25:e1:a0:85:8d:87:56:a4:14:ff:76:0c:
         7f:81:c0:6c:f1:16:4e:e2:0e:61:ce:9b:83:e7:1b:74:41:38:
         84:8c:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----