Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File:                     iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier:          Vhv/zlV1R4AGAXDQ1kMEtU6dyl5rOQM7ccaCsL5WES0=
Subject key identifier:   B6:E0:5C:CC:C6:AC:87:12:BA:78:EE:AD:2D:7B:5C:B6:23:46:A8:67
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer:       /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial:       01962F74F1AA805172E327E90C72BFACCD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number:          031D
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=)
                          2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=)
                          3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=)
                          4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=)
                          5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=)
                          6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: chug+zljG0X1aYue8fgAPiIvrhyw/wpytKkOr9OWlpw=)
                          7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f1:aa:80:51:72:e3:27:e9:0c:72:bf:ac:cd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=b6e05cccc6ac8712ba78eead2d7b5cb62346a867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:2b:1d:d2:b6:71:55:db:b8:0a:c5:c1:fd:
                    3b:25:02:90:c9:db:0a:a7:94:8d:0a:d1:ad:db:fb:
                    5d:e1:5f:d4:9e:29:b3:63:3d:c9:8a:eb:65:60:f4:
                    22:01:08:aa:2a:e9:62:d8:ad:0c:88:0e:97:8e:33:
                    a5:58:07:62:14:04:1f:05:c7:f8:43:22:6f:36:7e:
                    63:21:0c:6c:21:38:41:97:f6:00:68:87:65:8b:2a:
                    a9:7d:03:11:54:69:56:0f:bf:f0:dc:47:c5:13:59:
                    2d:e4:0a:fc:c7:05:5c:f8:e9:33:4f:d0:b6:5f:fa:
                    41:29:dd:c9:dd:78:33:d1:1b:78:29:c4:36:cb:12:
                    31:a7:38:40:8f:72:02:ac:0c:37:94:4d:c3:bc:0b:
                    c5:41:14:45:96:dd:ef:10:32:35:3c:18:a1:85:c2:
                    41:0f:e0:27:92:cc:4d:48:aa:f9:4d:b8:8a:d8:3a:
                    bc:a3:81:6f:b0:cc:ad:40:da:4e:02:37:cb:77:2c:
                    ed:db:d0:f3:2d:cd:49:c1:62:d4:7c:ca:77:75:b1:
                    09:6b:b8:fd:80:8a:dc:fa:b1:85:56:f3:13:d5:84:
                    75:3b:21:10:40:34:aa:0a:c5:49:2c:e6:87:af:ec:
                    32:db:6b:b0:44:6b:ad:9e:45:5d:4e:7b:2c:e5:4f:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:5C:CC:C6:AC:87:12:BA:78:EE:AD:2D:7B:5C:B6:23:46:A8:67
            X509v3 Authority Key Identifier:
                keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a4:04:f2:e9:0f:12:6f:77:c2:d9:be:07:17:b7:0a:b9:04:
         95:bb:a3:7f:ec:a5:31:5f:48:6c:91:41:95:07:56:59:0a:f2:
         8e:79:5d:f7:97:0c:d9:44:74:ea:ab:0e:38:4a:79:c9:29:49:
         2d:7b:95:a9:8f:aa:5b:64:41:28:a5:8d:9f:e4:c6:55:6e:e2:
         97:c8:ff:f8:08:ee:f5:98:00:23:cb:79:a2:97:7c:30:50:38:
         b8:17:9a:a2:12:bf:7b:6d:90:f4:b6:7e:7c:f3:8c:80:25:02:
         0e:62:78:b6:51:8d:8b:23:3b:c4:f4:96:f0:ba:43:5e:75:14:
         c0:c8:78:df:74:82:6e:ec:ae:07:e9:b2:73:fe:2c:dd:4b:f0:
         1e:75:02:ee:76:a8:78:3d:16:ad:ea:25:33:65:ef:ae:3e:b7:
         21:f4:ed:64:61:0a:34:78:25:a1:e3:1a:d8:c5:e7:e2:3c:d7:
         c1:f0:f8:80:af:2f:87:71:aa:86:8d:1c:52:42:8b:70:31:07:
         bb:13:16:5e:82:22:c0:82:b3:d6:4d:d5:d9:66:6a:b4:88:33:
         b4:af:09:1d:c5:5f:92:61:7a:36:b2:af:cc:20:fe:66:d2:0a:
         38:79:f6:c1:1a:63:79:98:f8:df:ac:a7:0f:01:61:f4:1f:35:
         6e:ce:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----