Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File:                     b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier:          Qdhtk3DZ66mdXlrPFFUOOasCmAejmYyQ8ZSntPmsBQw=
Subject key identifier:   71:73:68:84:B7:FD:FB:7D:BF:8A:51:34:69:DC:33:1E:41:EE:43:3C
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer:       /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial:       01962ECFCF5E33D55F9B73CEA87482A6FAD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number:          0CE6
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
                          2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
                          3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: PshWWtnyhhcWs3Ay36FbhCn/MpAZzMP78/htsQTkXvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:5e:33:d5:5f:9b:73:ce:a8:74:82:a6:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=71736884b7fdfb7dbf8a513469dc331e41ee433c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:99:db:89:a0:b0:f6:27:d4:6d:32:ad:72:
                    8d:fb:ca:53:d5:a7:ad:3f:b3:01:b2:f6:d6:04:69:
                    cc:8a:ae:16:6d:e9:27:44:a1:ed:4d:4b:bc:0e:86:
                    df:89:c7:14:a5:2f:70:81:71:28:68:7b:79:a4:f5:
                    6e:ff:62:98:09:02:5d:18:18:54:ad:e2:d7:db:54:
                    bd:ef:9b:e6:87:c6:ed:36:b3:4c:46:27:76:02:f3:
                    56:d2:36:87:1d:67:b1:71:92:ac:76:80:dd:3f:4f:
                    e2:66:17:b1:d2:72:4f:a8:c1:8b:34:e6:e4:3f:64:
                    88:71:41:e1:93:52:f0:42:4d:a6:5e:20:d5:4c:5e:
                    95:c8:b7:09:1a:e6:4e:7a:cc:af:37:eb:e1:12:74:
                    35:b5:f7:98:a0:28:bf:64:02:72:b2:34:1c:71:42:
                    a9:a7:17:4f:25:9e:33:62:97:29:dc:f0:d8:98:85:
                    24:9d:ed:fa:95:aa:99:7b:58:01:35:cd:5b:3e:06:
                    5e:1b:26:d4:c3:8c:f7:c2:11:19:71:66:25:c5:34:
                    22:9b:22:12:37:da:8b:cd:38:54:2f:a9:5f:d1:04:
                    9a:9a:2e:4b:6b:0f:95:0c:34:9d:a9:4a:68:ac:f3:
                    7a:50:2d:fd:d7:e4:ef:dc:89:16:fb:32:27:51:5b:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:68:84:B7:FD:FB:7D:BF:8A:51:34:69:DC:33:1E:41:EE:43:3C
            X509v3 Authority Key Identifier:
                keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:44:be:a6:d3:0d:a5:5c:d1:20:0e:f7:37:b8:86:b6:86:2f:
         b7:c7:88:67:fc:22:5e:5c:d3:77:4b:e0:8d:01:65:73:44:e2:
         d3:8e:a6:9a:00:00:65:5e:c0:f7:d7:1f:cf:19:a2:83:9f:ac:
         c4:26:2f:10:06:e9:b9:cc:9d:08:03:4e:57:fe:13:88:b0:b9:
         ef:a6:ba:2d:ca:0c:df:1d:33:07:e2:ad:71:3b:6e:41:c9:10:
         fb:7d:80:0a:1b:e2:c8:c0:c9:6a:f0:97:7d:9a:e1:da:ec:f5:
         5b:4c:98:90:fe:17:8a:7a:8d:6c:50:15:b2:60:66:83:f7:8e:
         54:7a:bc:50:e0:4b:bb:fa:af:44:90:7f:af:ad:8d:f5:79:3b:
         5f:01:3c:16:82:4b:51:7d:00:7a:03:6d:e3:b1:62:ae:94:aa:
         3f:82:18:5a:d7:93:52:1f:35:70:08:71:21:9e:5e:28:c2:64:
         4b:44:7d:b7:22:42:9f:61:33:d6:3c:1a:21:8a:88:61:e4:74:
         60:90:ac:5c:47:e2:6a:ef:b4:29:71:94:1e:5e:98:90:56:8c:
         12:5c:cf:c5:e8:0d:00:0e:fa:e6:79:57:ba:df:9e:4b:7b:b9:
         2d:7d:db:9e:f9:03:ea:a9:a1:b3:39:2e:0a:a7:2c:4e:f0:06:
         2a:21:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----