Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File:                     6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier:          Cpo0islED+48knESPYCjGomHgJE3QBqCOiugsUSrV30=
Subject key identifier:   BB:0B:2A:01:B6:8C:86:0F:F0:FA:4D:93:D8:0F:7B:8D:AD:49:FC:EC
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer:       /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial:       01962DF3992DDF74D6A70C47639A86610B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number:          0A37
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
                          2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: jTHzCum89ZXe9eUC8tXgtiVs02T9IC9dDDi4cvPyip0=)
                          3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:99:2d:df:74:d6:a7:0c:47:63:9a:86:61:0b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=bb0b2a01b68c860ff0fa4d93d80f7b8dad49fcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:e3:86:d6:5c:2c:5b:ae:a6:1e:b0:01:bb:
                    96:eb:c7:75:a0:15:fd:f7:f8:df:fe:b4:4f:84:ca:
                    9e:41:e6:b1:1a:a7:ad:3a:95:13:12:e4:58:b0:4f:
                    87:d9:f2:d4:f6:ab:85:f0:fe:29:73:f5:1e:f4:20:
                    59:1b:40:47:20:15:ec:0f:31:3f:f1:fa:1b:68:1d:
                    b9:6e:87:bc:ce:f4:f1:b1:c4:09:82:9d:6c:b3:7e:
                    03:c5:9c:0f:33:40:69:48:e1:22:0e:84:cb:15:91:
                    45:3f:01:da:30:29:c7:d7:78:e1:ed:88:12:08:22:
                    7c:52:ef:48:7e:29:b0:26:44:22:57:a0:af:75:56:
                    6c:f1:fd:4d:6e:89:33:01:6a:48:cc:b7:11:8c:aa:
                    d6:ef:57:f9:3f:fd:95:98:c8:ef:31:b7:b8:5e:ce:
                    d9:e5:56:fc:e1:70:d1:9f:43:4e:3d:51:c9:6c:b2:
                    ba:dd:f9:65:b1:28:79:b0:10:6e:b9:54:d1:cb:47:
                    51:f5:15:89:e1:80:31:05:39:9b:0c:8f:c5:4e:cd:
                    d7:f0:4f:fb:5b:43:9f:c4:27:5a:f6:f8:27:46:2f:
                    ce:6f:ba:cb:cf:07:af:3e:fd:67:6c:45:7e:89:35:
                    0c:27:7f:42:e6:67:00:b7:d6:0f:fb:e7:5b:9d:da:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:2A:01:B6:8C:86:0F:F0:FA:4D:93:D8:0F:7B:8D:AD:49:FC:EC
            X509v3 Authority Key Identifier:
                keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3c:4b:2a:8b:33:49:bf:80:8d:24:81:7f:1d:d3:d2:3e:64:
         94:cf:d8:d8:dd:ff:18:e4:1e:d4:2e:a1:1d:95:5d:63:9c:e6:
         de:0a:d3:a1:38:b2:e6:bb:20:48:e6:4e:b8:ff:2f:ab:ef:6c:
         16:96:08:86:46:ff:48:f4:05:5a:21:a8:92:6c:75:44:d9:3a:
         e2:06:8a:df:93:03:9f:ea:50:aa:4a:57:f7:de:ad:dd:44:cb:
         14:b7:91:7c:ee:37:8d:63:43:3f:67:14:71:89:dd:dc:e6:31:
         d2:2d:97:c9:39:91:a1:59:64:58:16:40:d5:a2:f2:ca:b1:45:
         c2:51:70:27:c3:be:88:41:94:73:06:26:f9:fc:58:fc:28:2e:
         bf:39:01:7f:83:f4:6e:4b:e1:7a:0e:48:37:8a:18:76:cf:be:
         1f:17:38:e8:ed:f3:74:0e:65:ef:8c:ad:63:66:c9:56:64:f9:
         f0:38:5d:c5:a4:8d:fa:bf:51:36:42:a5:80:dc:d3:d5:22:0c:
         19:1e:01:50:73:da:06:10:ff:8c:90:f8:00:f4:c1:7f:f7:af:
         77:fd:b0:c3:98:81:1e:f4:72:67:a2:a4:03:23:24:db:da:87:
         22:48:cb:de:a6:1b:05:f3:02:26:09:25:86:15:04:a5:23:d1:
         96:7f:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----