Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File:                     6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier:          H56DFXq0ne+OEieS/0pbLafLS9CyVejfPnOWhb1uvls=
Subject key identifier:   28:70:B6:01:66:5E:A6:99:FA:D0:CE:14:3E:5A:4C:C8:12:85:B7:B5
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer:       /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial:       01962E2ACFCFEDAC9AD3EBA9218C7769DB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number:          13F0
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: VaXQG/nUr6ZCnor4QW0HNivImrSqKKUXVRkiZrAU+3Y=)
                          2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cf:cf:ed:ac:9a:d3:eb:a9:21:8c:77:69:db:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=2870b601665ea699fad0ce143e5a4cc81285b7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:20:56:ca:b6:41:f8:6e:aa:c6:04:db:8c:
                    23:95:d4:2b:9b:3d:d1:eb:eb:f0:3a:c8:c0:84:59:
                    86:81:f8:d3:8c:ac:2d:a3:d3:3a:2b:8b:be:dc:3d:
                    95:6c:1b:2e:38:ba:64:3b:6c:41:58:73:cd:ab:35:
                    0d:eb:0b:88:d4:80:25:61:d9:1c:3b:67:a3:ad:f7:
                    20:c5:40:0a:81:9b:2a:77:82:65:9e:3d:07:9a:aa:
                    79:ee:bb:37:cc:8e:5a:ba:74:e1:09:fa:ed:97:bc:
                    c7:43:39:0c:cd:35:10:f4:cb:5a:d7:ad:f1:48:36:
                    43:cf:fa:9a:39:60:e0:eb:a6:e0:2a:eb:e2:2e:82:
                    46:f0:a4:67:26:83:af:26:d9:e3:c2:38:01:87:96:
                    bc:69:7c:91:1d:41:3e:e1:9e:91:a5:d3:c1:05:ac:
                    d4:c9:0a:74:ec:8d:33:05:23:2b:f2:f7:cc:82:1c:
                    bf:c3:5a:5d:55:e4:cd:49:bf:2d:05:43:54:53:c0:
                    f6:0d:a1:8f:2b:f4:bb:10:fc:df:7d:de:71:7b:95:
                    c6:f7:7b:76:09:67:43:7b:b4:51:40:fb:a7:76:dc:
                    f3:8c:41:a7:cb:75:e0:df:50:ff:df:fe:fe:c8:61:
                    16:f8:92:c4:4d:d2:7c:f3:56:72:65:09:57:25:43:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:70:B6:01:66:5E:A6:99:FA:D0:CE:14:3E:5A:4C:C8:12:85:B7:B5
            X509v3 Authority Key Identifier:
                keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:aa:b4:6a:de:8d:09:48:ff:5c:13:b9:62:96:9a:1c:e6:
         fe:f3:e1:33:3e:6b:ef:a2:8d:c0:6c:5a:87:51:d8:30:7d:5d:
         22:ba:5d:46:b1:1e:df:67:b5:cd:1e:c6:0c:02:9c:d0:4b:75:
         62:99:87:82:75:5b:fc:86:40:df:91:f6:85:cf:e1:51:3b:ab:
         6b:24:49:0f:31:e2:15:08:e9:f5:9d:d4:91:10:72:86:5c:8f:
         aa:07:d0:06:4a:08:87:2b:38:63:97:48:c1:19:a8:24:b5:39:
         ff:43:11:37:ee:ca:1b:44:61:21:98:de:a5:78:a8:61:99:56:
         1f:b4:09:92:47:e5:2c:d7:0d:d5:10:57:63:64:76:6e:5e:a8:
         c7:5d:16:cc:26:f7:6f:8c:6a:f0:50:e4:d9:1b:3e:6e:67:9a:
         92:f1:60:09:e4:93:d8:47:71:c6:13:06:33:23:6b:df:66:65:
         7d:8f:1e:db:fe:b6:5e:3b:7d:6e:aa:2c:09:69:ab:d1:ab:75:
         73:71:86:e5:f1:2f:6b:6a:9a:0d:8a:30:33:c0:be:12:de:75:
         d4:bd:05:f1:b2:d0:3d:65:9b:9d:05:39:8f:06:78:71:5a:32:
         b6:c4:c9:b0:70:a2:d4:d2:21:60:1f:e4:83:7d:4a:e2:2c:82:
         99:48:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----