Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File:                     l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier:          QBl2HDAEYmySEAFZQ4yZHuRv2kshytci68BEsgdoZlg=
Subject key identifier:   B3:61:71:B2:C8:13:99:3B:8F:23:92:38:E8:04:AC:CF:B5:04:35:ED
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer:       /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial:       01962F3D586DDAB76A382D3503D768623AAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number:          0855
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: 1wn1WSZ9lUv1/3aSD6bDfJ+OdcJgiTuX2x+JOCKObKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:58:6d:da:b7:6a:38:2d:35:03:d7:68:62:3a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=b36171b2c813993b8f239238e804accfb50435ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:d8:c8:2c:22:a6:a9:6e:a9:4d:a4:92:27:
                    72:df:04:73:e4:61:22:2e:c7:b8:ff:10:56:0a:ef:
                    6a:bb:9a:5c:6d:54:7c:1c:46:d5:cc:fe:e2:2c:26:
                    be:8a:67:ab:29:01:bc:8d:b4:82:58:39:3e:1b:eb:
                    80:fc:c8:7b:e5:39:77:cd:fe:42:a8:d2:ad:36:14:
                    d1:fd:0d:7d:6d:a0:27:e6:58:9c:fe:26:92:82:6b:
                    1e:76:80:ca:66:f1:5a:8e:6c:08:05:d5:ee:5e:f4:
                    c4:2a:a7:d1:e6:9e:fc:b1:c4:15:35:cf:64:79:87:
                    b7:d7:48:ed:3c:7b:48:52:a9:93:06:ca:12:23:79:
                    df:56:58:45:e4:14:30:c8:84:b1:d6:6d:1a:54:29:
                    e5:c2:e1:40:25:63:e7:2c:73:9e:d0:ed:c5:e5:5a:
                    7d:b5:94:12:35:61:e9:75:ca:2a:5e:33:9e:16:cb:
                    6e:5e:0a:18:c9:a9:4f:ac:6b:1b:1e:cf:9a:19:b7:
                    73:ab:f6:dd:35:36:4d:0f:d7:80:d6:8a:ed:12:95:
                    4e:ca:b2:d5:87:6f:e7:4f:73:d9:22:4f:d3:f6:40:
                    8c:5e:c9:69:73:fc:c9:05:72:cb:27:92:43:d0:59:
                    98:0d:44:dd:d4:95:4a:4c:cc:ed:df:68:c4:2c:3e:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:61:71:B2:C8:13:99:3B:8F:23:92:38:E8:04:AC:CF:B5:04:35:ED
            X509v3 Authority Key Identifier:
                keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:11:3f:c1:eb:42:19:50:81:15:48:a2:f2:d0:30:50:e4:
         cd:ba:44:ba:9a:83:fd:fc:fe:9e:45:5a:f3:66:c5:19:0e:a7:
         18:1c:55:cb:9a:66:6b:d8:92:2a:17:00:da:42:f4:e9:18:f6:
         30:fa:64:e2:4c:43:63:c8:7b:9b:90:7d:c7:51:ae:a4:24:5e:
         6f:e1:5c:43:ab:29:53:33:c1:d9:ce:fd:5e:98:47:a6:6d:8c:
         1a:6b:b2:b3:85:fa:63:aa:92:ed:15:ee:1b:09:2d:af:17:43:
         ad:16:a1:5f:2e:cf:4e:a7:1a:d3:b2:c1:95:40:c7:c6:bd:34:
         7b:0e:ad:68:ab:77:2d:db:cc:96:65:b4:e6:2d:7e:b8:f1:95:
         81:93:fc:2f:b7:47:d0:15:56:04:06:d7:f9:24:99:89:f4:93:
         f5:3d:f6:a2:80:12:03:66:83:2a:09:5e:4e:95:6b:3a:21:83:
         3d:05:56:1f:36:2f:97:81:19:56:9c:e4:57:fd:95:f3:85:c6:
         02:78:28:06:6f:13:f6:6f:c7:89:00:31:b8:14:45:67:b1:0f:
         3c:2e:56:a2:eb:0e:60:40:2b:a9:02:95:de:37:f9:0c:6b:2c:
         50:2a:6c:47:34:d2:51:23:92:b3:06:a4:45:f1:d2:78:5a:a1:
         1e:3e:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----