Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File:                     FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier:          vFiFIfEB059Ai+dd6aA8/T9z7XnMMt5+y3s8dMxWXco=
Subject key identifier:   6D:3B:9F:4E:FD:A0:40:67:BA:59:A6:37:61:29:70:5E:A9:09:53:FE
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer:       /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial:       01962E61E6991C7F25F1DCCF4706507A9F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number:          10C6
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
                          2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: URYjHHJNxUKvcyeXfUPW6ktVh+l9lTjLm/gpqzs1ZCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e6:99:1c:7f:25:f1:dc:cf:47:06:50:7a:9f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=6d3b9f4efda04067ba59a6376129705ea90953fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:29:72:92:2f:f7:90:ca:21:e7:6e:fc:36:
                    86:e8:d0:c1:e5:5e:10:81:29:ff:7a:33:9c:80:79:
                    65:23:21:0e:50:8a:73:00:af:46:be:1e:e9:34:32:
                    cf:47:7d:1e:b5:8d:9b:04:da:c2:65:37:1f:5e:3b:
                    ed:2b:4e:06:f0:e3:43:4e:be:db:78:a2:22:e0:75:
                    f3:af:75:19:ad:e9:94:ee:e1:8c:cc:0c:72:4b:4a:
                    94:60:c0:b7:06:63:ad:ad:fb:a9:50:b2:b7:af:7f:
                    4b:c7:5a:66:0e:b3:64:46:7b:41:af:4e:6d:67:c4:
                    47:f9:2c:7b:c7:ca:eb:b5:57:c5:2f:bd:49:bb:bd:
                    8a:fb:10:ca:cb:ce:ba:a8:3c:9a:04:ee:7e:c6:4f:
                    dc:67:6a:d7:e6:59:4e:e9:46:11:17:9e:71:bd:ca:
                    95:8f:8d:0d:c3:8f:57:03:64:92:99:03:0a:d1:e5:
                    25:a6:cf:58:bb:50:57:35:7e:73:82:18:51:e4:8e:
                    41:3a:04:7d:2a:92:99:c1:66:12:53:04:72:55:79:
                    30:67:7a:66:0d:2c:b9:57:3b:55:81:1e:39:4d:73:
                    1c:d8:2f:4a:f2:46:2c:c0:2d:b2:95:f0:2e:16:3d:
                    c1:c6:2a:84:a5:ca:a9:b9:8e:3b:97:97:73:f8:0f:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3B:9F:4E:FD:A0:40:67:BA:59:A6:37:61:29:70:5E:A9:09:53:FE
            X509v3 Authority Key Identifier:
                keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:b9:be:24:73:b1:64:ed:84:2a:e3:39:94:ec:bc:a7:43:
         5e:0f:4a:09:85:f3:0c:d8:b4:db:4b:8d:76:88:bc:4a:1f:ed:
         71:97:1c:a0:42:35:87:0f:70:8d:ef:67:40:55:57:7c:c0:52:
         61:cd:82:6c:4a:b1:bb:d6:32:27:69:4c:c3:fc:b8:ff:d1:c4:
         4f:51:20:7b:48:ee:99:23:34:52:88:c3:04:81:8a:f4:55:80:
         53:75:d3:45:4e:30:9f:46:0f:10:c9:2e:42:72:88:e0:6d:e9:
         1c:3a:68:36:c4:23:a5:bc:02:41:ac:8b:0e:82:b9:54:62:dc:
         28:1a:6e:ed:a6:61:71:4c:0c:44:aa:b8:7f:d4:cf:fd:24:16:
         fc:98:30:be:88:e2:8f:f4:ab:04:e6:3d:1a:76:13:15:e2:26:
         ab:d1:b0:4d:fd:6c:48:b1:7b:dc:09:11:e0:c1:66:f2:81:43:
         0c:3d:d4:c4:9c:38:36:20:42:51:b0:46:83:59:c4:23:7f:d4:
         f3:49:cb:da:d4:f5:96:28:d7:02:e5:27:7e:11:ed:e4:5c:83:
         96:ab:de:43:61:14:9b:eb:47:0e:16:3d:7c:9b:d5:7b:4b:4c:
         06:e1:27:ab:b2:7b:2b:3c:bf:28:7f:05:fd:47:6f:1d:6d:f4:
         bd:f1:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----