Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File:                     a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier:          1WvhlCOWUrfj1w8w21XHrQfUW8vSZP/G/2iOhLQFrGI=
Subject key identifier:   58:8B:31:F8:89:01:24:9C:BA:0A:5E:F2:5B:24:35:19:21:95:8F:5F
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer:       /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial:       01962F741A3B8BC70F38274F0025E33F91D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number:          03B6
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
                          2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: lJe78tInUDlThYMefHzAw/RC6C4y1Je8NgXJdQ/44rA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:3b:8b:c7:0f:38:27:4f:00:25:e3:3f:91:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=588b31f88901249cba0a5ef25b24351921958f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:23:76:23:fa:c4:66:d8:56:c7:af:13:ef:
                    17:79:f4:92:02:e8:0f:25:3f:d9:c2:5c:46:75:9d:
                    78:86:49:c1:4a:5a:c1:cd:16:10:d1:cf:15:1a:e1:
                    05:72:ae:2b:b0:47:d0:f0:84:4d:3d:ce:fd:af:55:
                    1f:fe:ca:68:49:d1:0b:f1:74:b2:dc:6a:ff:8f:ae:
                    a8:d9:66:8e:dc:fd:32:e7:fc:1b:7b:42:87:1a:f2:
                    c5:3f:20:65:65:0f:29:f7:2a:fb:90:5f:ba:f4:ea:
                    dd:de:27:09:8f:11:df:ad:99:0f:6e:11:9c:d5:87:
                    ee:db:f1:be:39:ba:57:91:45:0e:76:1f:51:0a:5f:
                    a1:4c:03:28:f2:ae:02:e0:5a:a4:95:35:44:a3:5f:
                    27:c1:f3:a1:70:4d:f7:58:fd:12:a2:21:e9:a2:8b:
                    fa:f9:e5:90:e6:a7:fe:d5:ad:d4:1a:80:3f:16:88:
                    32:5e:1f:57:15:d3:8f:e6:93:a6:ca:1e:22:4a:e4:
                    b7:c3:59:31:c0:8a:2b:62:32:0b:d2:0c:7d:23:f0:
                    17:01:20:ef:4d:af:9a:b3:d0:ea:5c:68:8b:aa:46:
                    25:31:a2:fe:4d:ca:e1:ce:e7:af:64:03:a0:2c:50:
                    b2:10:57:7e:b4:ea:67:b2:08:38:0a:7b:5c:47:18:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8B:31:F8:89:01:24:9C:BA:0A:5E:F2:5B:24:35:19:21:95:8F:5F
            X509v3 Authority Key Identifier:
                keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5d:2a:55:56:0e:67:33:67:82:c7:95:43:15:ef:8b:ee:34:
         48:0b:14:36:69:db:1e:f5:e5:ca:07:fe:cf:37:01:ba:bc:e2:
         01:b6:35:fd:dc:84:f6:60:a1:d0:63:14:c9:aa:9f:55:ce:d4:
         b1:a0:86:ae:12:52:53:59:6e:35:af:80:2e:fd:ff:03:9f:90:
         b7:7a:1b:3d:b9:1e:65:1f:09:8b:54:83:77:e4:0e:18:5c:3a:
         dc:01:f9:f4:22:ad:1e:76:bf:ae:95:17:54:98:92:8b:60:53:
         55:1f:70:ea:13:11:64:c6:ec:52:61:d5:50:9d:64:46:25:2b:
         33:a0:47:35:d9:08:24:2f:7b:05:0a:88:28:84:ca:40:e2:7d:
         6a:ce:04:1d:b8:b3:fe:2e:3a:55:54:00:69:3b:3f:98:47:c8:
         d1:09:95:6b:cb:d2:7f:d7:42:bd:de:f0:54:12:11:4e:22:35:
         fb:97:b4:ac:a0:a5:8f:da:c2:15:94:a4:0e:51:9b:19:f9:c5:
         15:a9:74:ee:65:a9:bd:fb:da:2a:06:23:1a:36:fc:26:87:82:
         59:10:11:1c:dc:4a:4e:d7:d2:c5:96:a1:4d:42:7a:c6:41:9f:
         f7:fd:74:cd:91:58:28:ff:6e:64:1e:87:01:b2:0b:08:54:88:
         f2:a9:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----