Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
File:                     B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json)
Hash identifier:          k6WHkOu/0u23E2xA9ja68Qce6BkwYda7xWSTAPjqzyM=
Subject key identifier:   3C:CD:92:D0:CC:11:93:3A:73:34:B0:A7:5A:E8:02:DC:99:9E:49:65
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Certificate issuer:       /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial:       01962F74C5CF746A6E600FD2859367FC0911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
Manifest number:          0B6A
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: 7YZamnINY4RQ0bJuZ1NVVYfaxLFgkgPVrrHDafthIBs=)
                          2: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (hash: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c5:cf:74:6a:6e:60:0f:d2:85:93:67:fc:09:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=3ccd92d0cc11933a7334b0a75ae802dc999e4965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:ee:58:7f:a9:f7:b8:a8:c7:e4:c5:19:c8:
                    bc:11:92:0e:6a:c1:85:b6:70:61:38:38:ed:b0:6b:
                    18:51:94:f3:12:15:3e:70:af:a0:f9:d2:b7:1e:d4:
                    14:42:29:58:d9:9b:cf:89:69:bd:18:d6:bc:8d:c1:
                    01:15:73:99:06:f2:16:c6:8a:3f:5e:81:3d:74:26:
                    e7:1d:58:ca:da:6f:eb:60:f7:86:aa:68:70:1c:6f:
                    8f:27:d4:7b:7c:89:da:e5:8c:04:91:93:8b:75:66:
                    ac:14:cc:44:c9:a4:59:68:61:bb:2b:12:5d:2f:30:
                    db:e8:cb:02:3a:34:ec:9e:07:19:34:1f:90:a6:52:
                    f5:09:d6:7b:d0:5a:9a:a6:1a:88:16:96:7c:46:8b:
                    e8:3f:fb:2e:c4:b8:4e:32:6e:65:d1:dc:e9:91:29:
                    12:14:26:6b:f3:23:63:bf:39:d8:13:b4:dd:d6:0b:
                    c7:9e:37:d0:44:6a:45:44:2f:34:d3:0d:71:cd:32:
                    d6:28:33:99:a4:bf:92:d7:1e:b9:b8:fc:89:a6:df:
                    6d:a6:e0:23:e5:e1:95:e5:2b:9f:d1:b0:a3:ee:8f:
                    a2:2b:ba:cd:06:fe:ae:16:2b:e4:6b:6b:98:ec:e8:
                    ad:4e:4f:6e:c4:36:40:df:c0:70:72:ed:d1:3a:08:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CD:92:D0:CC:11:93:3A:73:34:B0:A7:5A:E8:02:DC:99:9E:49:65
            X509v3 Authority Key Identifier:
                keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0a:29:d2:20:5e:25:02:2c:71:d9:0b:93:0e:cc:82:b2:6f:
         04:7e:d5:2b:52:5b:4d:7d:6f:e9:07:96:9b:61:6d:98:1b:66:
         99:5e:d0:6d:4a:8a:12:8b:54:44:c2:e8:48:e8:ca:c5:99:64:
         14:e3:9e:5c:dd:d1:ab:fa:47:6a:38:3e:cf:52:92:66:16:0a:
         53:b1:84:cb:11:8e:08:a4:5a:04:29:60:ed:74:33:e4:da:4b:
         b6:0b:d9:6f:27:de:4d:7a:f7:6c:cb:2b:c1:33:e5:9a:89:60:
         0f:86:2a:1f:cc:84:c3:22:ae:b8:bc:de:68:0b:ed:ab:67:ba:
         3e:6a:0b:97:f8:b5:bf:c4:d3:07:5c:a2:ab:cc:38:74:26:34:
         47:e7:e6:7c:56:50:a4:80:ef:cb:07:03:4b:8f:46:d2:31:ee:
         3a:9d:75:73:ce:51:79:6d:ff:4c:cb:6c:63:01:67:f5:2a:6d:
         48:20:f6:3d:32:1b:40:0a:67:6a:ca:59:4f:0d:8b:83:f2:4c:
         95:71:24:9a:bb:c8:80:16:0e:eb:b4:0f:f7:27:8d:32:af:e8:
         4f:f4:a1:a1:c7:1a:fe:c9:04:e7:19:fa:09:03:15:ae:6d:34:
         53:3d:4b:f4:e4:42:cc:c8:17:00:1f:96:12:77:02:76:f9:90:
         f5:82:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----