Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File:                     iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier:          HMsIQxI5BENo4ZZAHxNqQzq5t3gVM9WzcxwpKpze5Wc=
Subject key identifier:   D5:58:66:B3:25:71:96:CF:F2:7E:06:81:0D:25:4B:52:23:AB:D8:3C
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer:       /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial:       01962F3DAC0245DFE2D99015B61C3CAB63EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number:          028B
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 8USyjcIT_1GOHpkZIowE_fxQy7g.roa (hash: SrhI+FQKoLnBdoVigVeYKJo+5g+IVUyEqc65USNCWB0=)
                          2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: uGPld48YUnTlrS6HVGO+hBccqP2CJBtfmzuuW+KOEqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ac:02:45:df:e2:d9:90:15:b6:1c:3c:ab:63:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=d55866b3257196cff27e06810d254b5223abd83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:41:2f:c8:4f:8d:76:a8:5e:b6:c8:3b:5b:
                    87:53:20:ab:bc:ea:7e:de:84:eb:29:a0:7a:e9:b8:
                    bd:e3:a4:15:a2:5a:bf:65:5a:13:63:ad:87:5b:7b:
                    98:1b:ba:9c:1c:a0:58:cc:24:3f:9d:98:ce:f1:a7:
                    c8:17:cf:1d:31:d4:5e:5c:be:72:c0:96:6e:44:55:
                    84:1b:f3:e3:32:46:8d:4a:91:57:57:c1:a0:f4:e6:
                    31:67:21:39:bd:b6:8d:7e:8c:ea:67:5c:88:43:99:
                    23:e5:ef:c3:40:2d:db:16:ea:5a:ff:fd:78:4a:09:
                    35:cb:1a:30:42:c6:23:9b:e4:55:49:80:b0:e2:db:
                    31:99:14:68:e2:97:62:fd:b0:38:d9:38:e8:ee:a7:
                    fe:d1:6d:f3:24:10:e1:39:13:c1:fc:83:a2:ae:bc:
                    c8:d8:3a:0b:22:8d:7a:d9:58:b4:e8:1f:aa:d5:09:
                    e2:ca:ca:ca:51:7e:28:6e:c2:00:8b:94:cb:e1:a6:
                    c8:8f:ef:b1:f3:19:bb:ea:5f:c7:db:52:4d:5c:ca:
                    60:3d:f9:2a:77:2b:f2:68:8a:3a:18:78:ac:1b:9a:
                    c8:db:31:b3:3b:83:cf:3c:59:86:6b:c4:2c:32:a7:
                    75:47:73:1e:b7:2e:f9:f9:eb:51:df:a0:3e:87:c2:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:66:B3:25:71:96:CF:F2:7E:06:81:0D:25:4B:52:23:AB:D8:3C
            X509v3 Authority Key Identifier:
                keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:e2:df:c2:f2:3f:37:f7:12:fe:24:58:ec:44:f3:a0:fb:
         23:63:95:66:13:0a:0c:ce:5c:23:9a:c1:22:f3:22:7c:1c:66:
         86:2c:bf:73:da:35:b0:e4:b5:b2:84:04:04:c4:3e:48:ea:81:
         0f:01:9a:68:8e:2b:2a:98:3c:51:43:76:bc:24:b6:c5:d6:20:
         e9:ef:5b:de:24:9b:6d:70:0d:05:f1:a9:29:72:1b:5f:54:e8:
         37:1e:c2:c0:0f:5f:bd:f2:7e:ec:9d:74:20:cc:69:f4:f1:78:
         3d:ca:b0:32:a8:02:dd:90:a9:00:09:92:9e:da:7e:99:f0:f0:
         5a:cb:30:6d:00:9b:94:4f:6f:21:d1:68:ea:7b:68:7c:d2:fd:
         3d:3b:d3:ec:62:f4:a5:1b:6e:4e:93:52:78:eb:85:2f:9b:b4:
         b3:d5:d1:1a:8d:1b:32:b0:d5:5d:fc:9f:44:15:6e:a7:22:c4:
         9b:29:c8:91:c1:8a:be:af:4e:49:19:d3:d7:62:84:1a:7b:3e:
         e8:b8:21:04:cf:14:a4:3a:af:05:94:07:c1:70:a2:99:ce:5d:
         b1:04:02:4d:00:75:8b:c9:70:ea:43:f3:9f:24:30:41:42:98:
         95:20:b2:47:57:67:6d:40:48:36:8f:ed:f8:35:84:5e:47:fc:
         8b:ad:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----