Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          /WkFtbBwY3QAIM1wCHB5R7AMbs2JV0thnsO5jLa4ZJw=
Subject key identifier:   B0:B6:21:B7:87:F2:E9:0A:04:93:0F:20:B1:9C:4E:88:E5:BC:24:4B
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       01962E987FE5FCBAADCA1E23260D9329A2C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: I1YiwNI9wBMUqV956J8vXFrA+gBOspb4dLpCtTD5nbw=)
                          2: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (hash: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:e5:fc:ba:ad:ca:1e:23:26:0d:93:29:a2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=b0b621b787f2e90a04930f20b19c4e88e5bc244b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:a2:c7:4d:a0:e3:c6:b5:2e:a2:c9:72:96:
                    9d:74:80:e0:eb:fc:55:ba:56:a6:22:0c:b9:b9:cc:
                    dd:c1:4e:8a:f9:53:e5:bd:70:09:79:2f:f4:e0:c9:
                    58:62:5f:4b:de:b0:81:94:a3:91:b9:46:93:33:75:
                    3b:2a:31:ce:a1:0b:90:74:11:d4:b7:54:8c:67:cd:
                    96:38:a9:eb:a3:23:95:3b:07:a6:0f:3a:06:93:4c:
                    c0:02:99:b4:64:30:94:8e:12:91:9d:4f:57:57:e8:
                    64:f9:7d:55:c0:7d:23:53:0b:ac:1c:34:72:04:e7:
                    e2:e6:77:a2:b4:01:e1:b9:8f:9d:01:e6:7e:f3:b3:
                    63:ec:67:df:9a:48:3e:ff:a2:c8:8b:e9:f9:18:95:
                    35:8a:0f:0d:3c:b2:7f:03:bd:0b:60:67:d1:28:cd:
                    dd:9d:a6:0a:0e:3e:d8:7b:52:15:8f:10:bc:73:a7:
                    b7:c5:95:96:2a:5f:d7:b0:b5:88:b4:ce:08:f4:50:
                    d4:e0:c9:55:75:11:6c:e3:b7:25:dc:cb:bb:9f:69:
                    c5:84:1a:3b:21:5b:c1:34:e1:c1:2d:4d:49:0e:0a:
                    1b:d0:d2:5a:9e:73:14:4d:26:34:de:e5:c6:66:f5:
                    c5:07:56:01:fe:19:ab:ec:59:54:1e:25:56:f7:8c:
                    90:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:21:B7:87:F2:E9:0A:04:93:0F:20:B1:9C:4E:88:E5:BC:24:4B
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b9:07:91:d7:9f:43:e1:52:e9:06:2b:03:3d:65:a2:1b:dd:
         1d:55:43:f7:58:86:e7:14:57:60:68:42:8d:54:73:f4:71:7d:
         ac:8d:b1:b8:da:5c:04:28:eb:e5:16:c2:cd:f7:51:af:d6:4c:
         1f:26:84:35:cb:37:6b:94:96:47:48:9e:00:72:f9:83:30:fd:
         08:4a:6b:c3:f8:23:39:4a:10:82:05:d1:a1:63:b0:a0:1f:0c:
         fd:fd:55:f4:c4:99:58:61:ab:ca:e8:8a:26:6c:9b:ed:a8:6f:
         57:bf:e0:81:4e:70:c7:66:0f:9b:6d:ce:5f:13:6b:28:11:b6:
         9c:86:d8:09:3b:e4:fc:90:40:a5:ee:c3:6c:a9:3a:b7:3f:da:
         b3:b5:b0:47:1e:2e:1b:94:d6:fb:cc:08:33:c9:05:24:08:0c:
         ac:14:e8:a3:fb:fa:42:90:65:a4:71:73:ec:11:81:67:df:86:
         91:b1:7c:95:2e:69:d3:4a:9c:3c:89:44:f1:7e:76:9f:88:0b:
         37:f6:9d:a5:80:8d:dd:15:d6:2c:15:1a:59:e8:3d:fb:f4:23:
         a1:38:fe:62:c8:05:8a:6d:6a:8e:7e:c3:ca:43:05:8f:39:a0:
         86:1b:e4:49:bb:0e:01:a3:db:2d:e6:0c:d4:68:b7:4c:12:f0:
         06:f6:65:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----