Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
File:                     6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft (raw, json)
Hash identifier:          txBqLT6K8wGOtxIO3mPYx8IqOZlYCH4XXxG6vcDr+h8=
Subject key identifier:   57:52:43:09:77:21:AA:0D:F8:5C:53:66:45:F1:78:2D:37:47:70:4D
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Certificate issuer:       /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial:       01962DF4575C180E0A76F7723336BC2619F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: 6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl (hash: M7fiG6mP5W5AalcxJ8uUjIhFbQulw0YGPEpwAXiTOP4=)
                          2: IoQpRFacFQZ9HszRYXAifj0QYlo.roa (hash: znH4whLDnueXgOA1JHvpV7iCtsRDpxJ5aLqB4eYvdQ4=)
                          3: MBJXD_zFW9aI1-FakwyfSE1lyZE.roa (hash: Z/ipiMlii0qdUHpEZW4O+JSHQ5fbPSCwF2GC5O5sknU=)
                          4: bUvunvA1qeI1B6U6Omnh_Mewaqk.roa (hash: ldi80J/6WwUbivA33XBOIZR3qCbUxP7anEn+i9Zhmmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:57:5c:18:0e:0a:76:f7:72:33:36:bc:26:19:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=575243097721aa0df85c536645f1782d3747704d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:7d:4c:e9:1e:b1:06:36:bf:84:e1:c3:9f:
                    a1:e3:d0:59:8c:72:8f:7a:76:d3:12:74:f1:b9:1a:
                    3d:9f:d5:b1:69:c3:66:2b:c0:b1:57:52:80:60:5b:
                    58:b8:60:4a:7c:64:0a:56:dd:15:7c:f9:c9:2f:83:
                    f5:4f:13:27:60:95:f2:81:a1:09:c4:7e:ed:c5:1f:
                    6b:8c:a9:50:4b:0c:ff:68:df:e7:6f:64:d7:81:ca:
                    bd:23:7b:2e:e5:b7:be:26:a7:f1:75:3c:b7:a7:9c:
                    7b:70:2e:a6:36:36:36:1d:8b:21:12:12:34:a6:2b:
                    b3:8e:79:fd:30:16:5b:87:2a:4a:87:ec:46:0b:f0:
                    26:c8:9c:fd:40:94:08:ee:3d:1c:26:09:84:94:bd:
                    31:9a:69:4a:51:a1:47:f2:70:6f:e7:70:38:10:43:
                    8f:49:ca:54:31:23:f7:23:a6:0f:11:f8:62:81:7c:
                    ff:d8:fb:7b:af:b4:fc:40:06:8c:bb:67:0c:6f:be:
                    ec:f6:d4:57:32:eb:23:47:04:2c:59:f1:bd:a5:c2:
                    69:37:a0:96:b4:c0:5d:cc:a0:13:e8:18:a3:7c:a5:
                    fe:0c:81:37:36:99:73:fe:6a:24:cc:b5:0d:5a:ea:
                    cc:a7:fb:6a:47:a5:ce:46:0b:35:85:37:ec:a2:4c:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:43:09:77:21:AA:0D:F8:5C:53:66:45:F1:78:2D:37:47:70:4D
            X509v3 Authority Key Identifier:
                keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d7:39:e8:85:64:91:fc:6e:01:f3:25:3a:2a:2b:2b:b7:47:
         0e:7b:59:b9:77:cc:26:df:78:6c:02:0e:ab:5f:1f:3f:04:5d:
         93:03:98:7e:58:7e:bf:c5:f3:be:2e:47:e8:52:b6:cb:70:53:
         c5:4a:be:01:7a:53:6e:55:a6:46:44:8c:19:b4:97:c9:e8:2d:
         fc:76:92:63:8f:62:87:4d:84:27:7c:85:0c:85:df:49:45:7b:
         94:b8:82:cd:6a:86:4a:7d:4b:e1:8e:ff:ea:4c:13:6e:70:3e:
         9e:69:b0:2e:5a:86:22:93:ac:c3:bf:18:5f:27:45:2e:5b:ef:
         49:20:89:75:90:67:29:04:37:dd:e8:a4:47:f4:90:e0:93:9d:
         50:5a:6e:f7:b7:66:44:4b:67:37:60:47:87:0b:7b:fb:c9:d0:
         7a:78:63:63:f7:cf:f7:2e:28:03:00:73:ac:e5:aa:43:0a:52:
         35:62:73:f1:49:df:88:42:7e:12:f8:b7:a0:e9:d8:1c:e7:ea:
         09:5c:d6:1d:cf:e7:bc:a7:1b:b0:8f:19:17:04:e6:61:db:5f:
         50:b5:fc:59:17:01:37:95:0d:62:e7:ff:8c:4d:ff:13:8b:8a:
         b9:c1:66:b9:60:bb:17:7d:15:93:5a:de:45:3d:80:17:c6:cc:
         ff:6d:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----