Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File:                     s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier:          xd/WhAiK0ogQMwlp2jCuBDflDlF9KvrMdnxnJzizc6g=
Subject key identifier:   8C:2A:4F:4C:A3:51:5E:62:41:E6:68:16:2C:22:0C:2D:C9:E0:AB:84
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer:       /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial:       01962F3D4061EDD8BD1F53C97F2C4A54C95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
                          2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: u5zWVBrDRJCmALPKXyYFLkj0p13F1ol0LProsMtKPis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:40:61:ed:d8:bd:1f:53:c9:7f:2c:4a:54:c9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=8c2a4f4ca3515e6241e668162c220c2dc9e0ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:ff:4d:ea:32:59:e2:32:d9:bb:a7:87:a1:
                    d9:59:43:83:e6:b1:70:82:00:1b:b5:a1:75:2e:1c:
                    70:ad:e1:0a:4a:fb:f1:d4:6e:16:e8:c9:12:1b:09:
                    99:d9:c4:ed:68:39:6f:84:46:b8:02:68:09:2f:70:
                    fa:ea:ec:90:9a:70:91:0b:df:34:4f:35:e6:b9:6f:
                    7e:52:3f:82:f7:ec:0e:75:1c:0b:3e:dc:e4:2c:ea:
                    21:94:d3:d7:05:9c:fe:85:98:38:7f:9f:ca:9f:56:
                    e4:e7:5a:19:d6:54:bc:dd:c3:ae:1a:23:1c:02:12:
                    8a:a8:74:c0:73:e7:47:d6:73:c5:26:e7:87:4e:80:
                    cd:62:bf:cc:a1:3f:ae:e1:3b:e4:4d:ad:9c:68:bb:
                    e1:72:5a:98:05:50:1b:90:67:15:69:2d:17:91:57:
                    49:eb:3c:32:e6:82:60:a6:e2:a0:be:4d:a8:aa:37:
                    60:36:23:86:0e:19:d9:2f:59:63:5b:bb:7d:ec:57:
                    3f:c7:7b:3d:ea:92:02:a4:1b:11:ce:b0:71:93:a7:
                    a5:36:13:6c:a3:aa:0f:3e:bc:95:34:ce:19:57:fc:
                    57:0b:70:3d:cf:0f:dc:10:16:30:06:9a:a7:05:57:
                    ee:34:0b:d8:25:b8:48:94:82:46:b2:89:d3:f7:cf:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:4F:4C:A3:51:5E:62:41:E6:68:16:2C:22:0C:2D:C9:E0:AB:84
            X509v3 Authority Key Identifier:
                keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:d2:0a:ce:4d:d3:23:73:b9:92:59:96:34:5c:39:f4:48:
         fe:b8:54:ce:af:e2:d1:fa:01:e3:71:af:06:e5:d5:f8:b9:b9:
         77:14:dd:1f:90:4b:49:e8:30:e2:9c:ec:cc:a2:0e:d2:35:ae:
         12:bd:31:c5:32:31:74:aa:73:4c:7a:6a:11:f7:5a:38:94:a6:
         30:70:8a:a1:45:07:4c:3f:36:20:4f:0a:e9:52:d7:1d:16:46:
         35:c0:43:bf:a5:7a:37:3b:71:8f:13:52:03:d8:04:3f:6f:37:
         28:1b:92:ea:a5:8b:98:29:3f:d0:1a:04:40:68:cb:53:aa:88:
         51:aa:ee:d1:47:2b:39:d8:ff:55:b6:d6:4d:79:30:ce:15:df:
         27:fe:94:d7:aa:38:f9:ae:3f:54:04:c9:08:cb:1d:17:03:33:
         c7:5e:53:99:1b:b1:8c:db:1f:6c:60:92:27:97:f8:ae:5b:60:
         06:c9:b6:b2:f2:7f:ae:fe:6b:d3:3b:10:b8:ad:e2:41:8e:51:
         10:d6:1b:0f:bc:a7:5a:d6:ba:b8:61:4e:b1:5b:10:fa:57:72:
         b3:30:51:00:25:03:62:54:f5:d6:92:f9:ba:13:81:86:c1:27:
         48:8c:c9:5f:2c:ea:11:ff:5b:23:51:4f:a0:22:a5:4d:e5:6a:
         b7:a8:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----