Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          Bnj10PsLGKE0IcLzHuiJeuuheHLj5uallpBhZ6ARFSs=
Subject key identifier:   1F:1E:AE:47:13:4C:E0:B1:78:39:49:2C:47:87:A1:13:5E:1A:0C:A0
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       01962E2AC53B06D1990007DFC9C42F9C33B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          0F77
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
                          2: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
                          3: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
                          4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: jJvikA/7tZz7aI5OBuyu94a39+R7U6wk4NWPphdcGqg=)
                          5: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
                          6: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:3b:06:d1:99:00:07:df:c9:c4:2f:9c:33:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=1f1eae47134ce0b17839492c4787a1135e1a0ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:6e:f8:8e:2a:46:be:55:ef:90:f7:83:33:
                    1d:c3:12:4b:51:66:2e:4f:0d:d5:59:81:7f:2a:63:
                    40:56:a9:c3:58:5c:33:bf:3e:66:fc:dc:6d:22:75:
                    de:da:b7:78:ea:29:4c:5c:65:83:64:0c:94:e1:c5:
                    c9:27:27:1b:66:30:e0:28:e1:83:6d:64:3d:f0:93:
                    4a:50:47:77:5c:ca:23:9d:36:9a:a5:de:e8:a8:ce:
                    cd:c2:ab:d2:8e:d2:a5:ab:72:3a:67:9b:ed:f7:5c:
                    55:93:e0:98:65:d0:ec:3e:cb:ef:e4:a0:86:e5:87:
                    3f:29:85:71:4a:0c:20:1b:e6:e6:f2:6d:82:a6:c6:
                    fb:fa:75:27:29:89:75:20:cc:45:04:0b:29:4f:10:
                    95:56:b2:4f:cd:19:8e:70:bf:c9:9a:bd:13:ab:06:
                    81:97:25:4a:89:31:12:f0:ee:fd:6a:a3:01:43:ff:
                    0d:0c:ef:68:b7:75:3c:d0:e7:b7:b1:e2:32:ae:d0:
                    3d:8a:3d:fa:33:e9:5d:c8:0c:db:69:29:03:1c:46:
                    68:56:b2:a8:ba:11:af:8e:57:7c:c4:3f:90:3c:c8:
                    55:c0:ad:83:ce:17:9e:74:38:6c:29:56:7e:5c:f3:
                    dd:4f:48:e9:02:f4:76:7a:08:e6:51:e0:f7:6d:ac:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1E:AE:47:13:4C:E0:B1:78:39:49:2C:47:87:A1:13:5E:1A:0C:A0
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c9:a7:70:5e:71:40:fe:e0:b3:04:e2:58:87:b7:47:be:55:
         4a:d6:dc:28:c1:f5:66:e5:fb:e6:c4:11:3c:68:a1:ee:b3:76:
         16:b4:a7:89:b7:6a:6e:8f:f5:ce:ca:80:ee:c9:49:4e:0c:d4:
         69:34:53:6f:7f:42:87:9a:a4:59:2d:38:4e:db:93:41:83:db:
         eb:84:c7:9d:e1:5f:7f:fc:36:b6:51:4a:1f:c5:ff:09:b1:b7:
         f6:ac:64:67:ac:c5:24:ac:b2:41:97:0e:ed:7e:4b:57:57:c9:
         64:21:8d:b8:04:e1:9c:9a:8c:da:9d:59:f2:63:98:2a:56:f0:
         f6:70:85:e6:0a:53:59:2b:15:9e:21:c3:73:6f:9f:18:f0:1f:
         ed:ee:34:2e:51:53:af:db:b5:d6:55:2b:9a:95:b2:31:75:c7:
         84:59:37:66:29:93:16:d9:0a:da:04:63:69:3a:f9:e5:04:65:
         3b:05:d6:00:2d:3a:6e:87:14:e2:e9:7c:1b:9a:38:0f:36:42:
         c8:b9:34:11:bc:44:9d:ea:eb:a7:7a:ef:89:77:92:fc:51:73:
         5a:f4:2e:9d:21:56:d8:c9:d9:06:3c:79:99:50:1d:ad:9b:4e:
         9c:07:60:4c:25:a3:d1:73:cc:18:6f:cf:14:71:cc:a7:63:26:
         22:0f:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----