Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File:                     a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier:          4yEcDg0YJrSFvj7+M1SpZQc+64T+jnyS8ChFybc8w7I=
Subject key identifier:   C3:F4:E9:4E:74:32:F5:7A:2A:63:D7:04:8C:BF:8E:00:74:50:BA:0E
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer:       /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial:       01962F06FCB56A3AACE0407A1C3B500517FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number:          13BE
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: 8Ujwm+nG/vaEXTTEPQzRVp8yWRehhd5DjKmI2zA6Rdo=)
                          2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fc:b5:6a:3a:ac:e0:40:7a:1c:3b:50:05:17:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=c3f4e94e7432f57a2a63d7048cbf8e007450ba0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:11:c1:9f:ce:e3:4b:32:bf:5c:37:a0:3f:
                    7a:99:67:8a:f4:20:f5:70:8e:c7:d2:88:f3:d6:09:
                    6d:9d:57:0e:af:29:0c:02:97:06:87:bf:98:d8:aa:
                    37:fe:d1:1a:8e:1b:c4:98:b9:18:e4:8a:a2:d4:73:
                    92:b4:27:86:49:e5:41:0a:e4:cb:e6:3c:c5:44:19:
                    5e:ea:30:d2:95:3b:4e:db:2d:0e:2a:48:df:1b:3b:
                    47:db:d5:93:02:cb:57:ac:a9:fe:96:9c:0d:7b:44:
                    49:50:8f:69:c3:af:eb:66:b6:5b:f1:af:b8:fc:17:
                    06:ec:c9:06:b4:51:a7:76:8b:22:ed:e3:94:30:4f:
                    4e:b7:81:76:4c:34:d2:37:11:c7:a1:d4:be:f7:cf:
                    86:86:f9:bc:04:8e:09:5d:87:37:8c:cf:be:d0:20:
                    5b:cc:78:e3:db:79:0a:5c:62:f4:08:c1:47:9b:db:
                    ee:0d:19:9d:84:8f:42:5d:4b:40:4b:85:80:67:29:
                    e5:5e:02:1b:25:24:8c:80:c7:08:74:a0:4d:ac:5a:
                    ff:2f:e3:cd:07:de:09:31:f4:e1:d8:d2:f4:46:ad:
                    46:7c:23:7c:c0:6e:ee:12:84:a4:94:7d:ae:d6:1d:
                    80:2a:1a:9d:09:68:1d:bf:0b:86:da:3b:80:f5:cf:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:E9:4E:74:32:F5:7A:2A:63:D7:04:8C:BF:8E:00:74:50:BA:0E
            X509v3 Authority Key Identifier:
                keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:0d:3f:56:0a:20:e8:6d:51:fa:51:a0:fc:d7:c8:78:30:
         70:77:59:93:67:1f:39:6c:a1:3e:8f:01:86:a8:1d:47:de:92:
         5f:77:37:81:2d:41:9e:ab:fc:4c:17:14:86:86:2d:4a:bc:fc:
         01:3d:a5:a6:09:37:ed:da:e9:6e:a0:3b:71:c3:f9:b0:21:d9:
         67:77:12:0a:80:e6:97:58:c8:9a:84:90:c3:68:f3:cb:a6:ff:
         7e:55:bf:40:12:8f:a7:a6:29:87:2c:b3:b4:d0:6f:75:d9:8d:
         fb:73:e2:20:a3:d3:e5:be:87:cc:41:ac:83:61:83:d3:fe:8e:
         d2:45:a4:01:09:9f:4b:d0:57:d4:c0:d2:8c:17:73:76:b7:11:
         6f:fa:c0:33:a2:2a:34:d5:8f:5d:af:4f:86:94:92:6a:47:01:
         c4:b5:6f:c2:19:2e:59:7c:ba:67:de:4f:f7:3d:85:4e:c2:00:
         c9:79:39:d1:94:f9:20:43:15:dc:c2:66:63:de:14:c8:19:2f:
         9c:4d:3d:f6:e1:4e:f1:50:a9:4f:b3:bd:10:a0:1b:18:16:c0:
         85:04:ea:b3:1e:31:5b:d2:3c:5d:7a:35:6e:7e:f8:23:d1:e0:
         1e:42:3f:90:00:51:8b:66:00:1a:e8:87:7d:11:c6:0f:59:81:
         11:92:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----