Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File:                     6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier:          rZXogbcLCYrm3xqCVOzfCgIfndXwivFOzVim7cWNoyM=
Subject key identifier:   B5:25:5D:C0:4D:B0:6C:70:68:45:35:D7:8E:7B:CC:EC:40:4D:C4:1D
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer:       /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial:       01962F74B7896CD3E0658D21FC02343985EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number:          0433
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: aArh8AbRM7Xu7YmtZRNgQx0PwulLif55ODaREkC1RJA=)
                          2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:89:6c:d3:e0:65:8d:21:fc:02:34:39:85:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=b5255dc04db06c70684535d78e7bccec404dc41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:57:c8:44:7c:9f:83:49:4a:c2:e0:3a:da:
                    fe:05:88:aa:77:e9:00:81:66:e5:35:a3:39:4e:c2:
                    23:f9:f2:a1:69:6c:95:a1:bd:02:14:83:03:6f:1b:
                    62:28:19:e4:c0:a7:c3:99:bc:c8:7d:a0:a3:a3:e5:
                    a1:ab:78:d7:f9:46:b1:61:51:f7:52:df:ac:30:76:
                    e2:82:42:10:eb:04:e5:ef:bb:64:ec:a2:47:96:20:
                    07:6f:5c:cc:38:80:53:81:70:55:b2:03:86:0c:46:
                    01:32:54:79:e2:2a:50:83:f8:dd:e3:c0:97:a9:ec:
                    98:6c:67:db:81:9a:ee:21:d0:69:4e:0b:c8:9f:17:
                    ca:40:30:8a:0c:c1:57:c7:0a:c1:ab:d9:16:18:be:
                    2a:f9:52:3e:83:e8:a7:22:b8:ab:96:85:85:2c:29:
                    73:05:69:98:3f:6b:8c:fb:bb:25:e7:b8:b7:c9:68:
                    5e:e7:9b:2f:dc:a0:e1:37:23:9d:fd:13:bb:a4:d3:
                    ef:82:3e:df:2a:a3:63:ad:0f:e1:8b:86:dd:cb:a4:
                    f9:61:26:bd:c3:dd:8e:a5:c3:06:c4:b0:89:7b:66:
                    0f:ed:22:17:ae:3d:fc:02:ca:5b:6e:18:d8:fd:2d:
                    b0:1d:48:13:41:31:95:cc:dc:d8:5c:ab:ea:9c:04:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:25:5D:C0:4D:B0:6C:70:68:45:35:D7:8E:7B:CC:EC:40:4D:C4:1D
            X509v3 Authority Key Identifier:
                keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:7b:33:2c:2f:4d:0d:9a:a5:6e:01:37:1d:97:21:f5:0f:0e:
         54:38:8d:75:5d:1f:e3:03:07:1f:b4:dd:7c:1e:d6:41:96:f0:
         3c:f2:3d:d4:7d:ba:87:5e:99:b2:f7:c5:58:87:24:81:d2:dd:
         53:df:d7:f6:b6:67:74:79:c1:0f:91:aa:1b:75:1e:7c:b3:3a:
         07:5c:92:4f:14:14:cf:00:1e:85:53:ff:bf:42:20:29:50:2a:
         3b:8e:7a:44:b9:33:d6:88:0a:f4:a0:b7:05:61:a9:a5:eb:f7:
         29:a6:12:66:fb:79:79:61:16:40:77:e9:f2:95:1c:80:1d:aa:
         27:1b:b4:76:00:4c:1f:a2:3c:64:24:9b:13:98:9c:d7:9a:aa:
         22:28:54:d4:47:f7:cd:fb:15:7b:da:e1:90:89:a0:10:9e:6f:
         0d:b0:7d:9e:bb:23:3a:65:a5:82:eb:f2:f4:7f:b0:09:4b:8e:
         80:10:a2:3b:b0:b0:29:96:84:2d:2a:d5:48:48:d6:ad:32:ec:
         56:a8:76:6c:41:11:a0:6c:2e:60:5f:ab:f3:91:32:e5:c3:88:
         aa:4f:e7:91:dd:ea:e5:94:80:53:ba:ec:f1:0b:1f:4f:b5:2c:
         87:78:a9:58:5d:f9:31:3b:5e:1c:1d:4b:d6:2b:d0:42:1c:78:
         0c:5b:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----