Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File:                     a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier:          TY6YATTAoQm4tOhr+5+8oiFaACb9QdZGk+gwC/zabgo=
Subject key identifier:   30:4B:35:16:4D:CE:AB:83:7A:2A:C2:2F:94:1F:BD:2B:AE:97:72:07
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer:       /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial:       01962F7475F35238DEC2BC0699E7557908E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number:          0F8B
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: 89TWSjp/xPUL/qtNC0KfcZGMLMinPGmbi+FCARodKoo=)
                          2: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (hash: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:f3:52:38:de:c2:bc:06:99:e7:55:79:08:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=304b35164dceab837a2ac22f941fbd2bae977207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:58:a1:cc:2d:04:55:ec:11:7c:ad:4f:bc:d0:
                    74:32:48:13:38:49:f0:43:ee:a6:20:04:57:f5:1c:
                    51:36:37:75:bc:e3:9d:d6:2d:a9:8a:67:fa:2e:a8:
                    92:51:9f:5e:e3:b6:5c:29:03:25:2d:c8:e1:53:d1:
                    bf:31:40:ee:b7:22:a1:a8:2a:e1:70:82:16:7d:96:
                    fd:2d:70:c4:53:8b:ca:62:13:da:e6:1c:0b:25:b1:
                    06:a6:e6:7e:66:ba:fe:6a:cc:6f:8e:52:a5:06:af:
                    dd:80:5a:8a:b8:51:f0:53:53:7d:67:0d:d4:90:f9:
                    af:e1:b1:0b:4f:36:bb:62:fe:ac:43:e5:0b:4d:38:
                    66:ad:42:57:d6:33:bf:d7:d5:e3:73:8b:54:c8:25:
                    53:7d:a8:3a:0a:f5:9d:1b:d6:ba:42:22:f4:e2:91:
                    2a:74:95:c9:71:f1:b3:f2:01:05:52:7a:41:87:e2:
                    65:1e:91:d5:2b:f8:cc:9d:72:36:0a:e5:fc:64:15:
                    dc:71:bd:8e:c2:bd:4e:f9:81:f5:89:dc:d3:7c:c3:
                    87:90:01:8d:93:7b:4f:1a:27:46:ea:7b:5b:0c:0d:
                    f6:be:7f:58:89:51:ec:6a:83:3b:bb:81:0f:d5:81:
                    f7:37:ab:e8:5b:cb:52:d1:28:c7:80:06:ea:6d:e2:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:35:16:4D:CE:AB:83:7A:2A:C2:2F:94:1F:BD:2B:AE:97:72:07
            X509v3 Authority Key Identifier:
                keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0e:2f:62:14:63:29:a2:86:15:c3:27:8c:ec:35:84:ab:c0:
         1d:d6:4f:f3:e8:69:5d:8a:15:51:a2:60:de:74:18:59:94:8a:
         e1:c6:41:82:c5:0c:6c:f7:5a:d6:2c:23:ff:97:e8:00:95:d9:
         d4:7d:01:88:11:c9:af:aa:00:73:52:57:30:fa:85:f5:41:55:
         42:47:8b:0c:84:c8:d2:f6:e3:d4:99:c3:9f:93:35:d4:30:93:
         d6:df:a4:b9:d4:61:2d:4e:6f:92:80:fc:19:7f:62:07:65:c2:
         4f:b2:b6:5e:ef:50:d3:8e:4b:51:a7:e3:53:7d:1f:67:e4:4d:
         bc:ce:28:f3:1f:81:4b:45:f8:e9:6d:46:dc:5d:57:b6:cf:16:
         e2:dc:17:89:da:c2:b5:bd:34:53:a7:54:d6:d4:a2:97:41:25:
         25:82:c5:ac:86:c8:26:2c:fb:d7:31:6c:63:4a:7d:5f:2a:c5:
         99:82:a3:91:5e:e5:20:95:b7:64:d4:b9:af:a7:34:e9:5d:12:
         17:47:d6:c2:76:ae:64:ed:84:64:a1:c7:8a:4a:78:60:70:61:
         46:10:34:22:d0:ab:75:6a:7f:8a:99:1f:8e:69:55:60:31:ef:
         b6:79:ac:27:e3:43:b0:c8:ec:03:0b:7a:5e:47:16:90:92:d9:
         bf:83:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----