Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
File:                     6R-du-aLhAJ87U0x6IA_E-nWXRM.mft (raw, json)
Hash identifier:          QbaOwci2JeMkx0DXlwbZl14s/2aw0o6iNlmaH5UWDR4=
Subject key identifier:   E1:11:C6:B3:C3:EF:3D:6E:24:96:54:EB:08:7D:17:3E:AD:36:CF:2C
Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
Certificate issuer:       /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Certificate serial:       01962FAB1FFE8B936DE377C4F174A4DDA6C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
Manifest number:          11FA
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: 6R-du-aLhAJ87U0x6IA_E-nWXRM.crl (hash: pcyRBYigtNHsu8vlfuHYHaL02Jr89PFGiebofhbEA64=)
                          2: JQUZ8AmIUaKrA3xLbBffsdyduoM.roa (hash: JNfVnNEK9ITAEhIOPMGzXPcwJP4nPhm5O7ysI5end8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1f:fe:8b:93:6d:e3:77:c4:f1:74:a4:dd:a6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=e111c6b3c3ef3d6e249654eb087d173ead36cf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:c7:25:91:60:45:85:75:6d:f5:45:09:8f:
                    ca:f8:1e:d6:c0:a4:fe:74:66:c3:eb:c6:15:ed:f8:
                    df:01:ec:bb:f1:43:a4:ab:b1:cd:09:1a:f1:09:b5:
                    18:e2:b3:ee:79:26:f8:6e:01:eb:dd:cc:02:72:d5:
                    80:89:dc:27:d3:f9:17:8f:6b:77:8b:68:1e:aa:27:
                    d4:07:49:f5:cf:53:24:54:f2:01:f7:19:5a:c9:86:
                    0a:46:10:4e:13:d0:f6:13:7a:e2:d5:eb:ea:ca:14:
                    5a:03:87:30:d3:74:dd:97:5d:30:88:00:e2:8c:ca:
                    41:20:15:93:51:3f:56:f1:18:2d:45:40:7c:13:9a:
                    c6:f4:57:71:7f:83:31:37:a8:af:fc:71:88:42:13:
                    27:32:89:0e:6b:c4:a8:cb:c4:63:cb:b5:5d:a5:59:
                    e5:e1:e9:a1:2d:14:a9:06:80:03:72:25:c1:a6:df:
                    73:04:68:42:da:e4:bf:5b:f8:cd:3a:3b:22:2c:2e:
                    e0:23:bc:52:a5:17:87:cf:87:68:cc:e6:65:51:10:
                    4b:7b:13:a4:55:22:7d:40:1d:01:b3:d2:f0:ac:d0:
                    fd:bc:aa:40:f2:d3:fd:3a:8f:84:e1:c8:ca:a3:f6:
                    67:de:6e:65:b9:57:8b:3d:fe:9f:33:e7:0e:80:eb:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:11:C6:B3:C3:EF:3D:6E:24:96:54:EB:08:7D:17:3E:AD:36:CF:2C
            X509v3 Authority Key Identifier:
                keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:da:80:90:96:3e:7b:2c:84:c3:d3:17:8f:3c:17:0b:4a:
         8d:72:47:e3:fe:70:85:30:0c:ec:4f:8d:34:b0:4c:71:c1:e2:
         d0:0f:84:6b:b0:b3:4b:05:01:44:89:6d:fa:25:0d:b0:b6:fa:
         f4:d8:02:d0:d3:4f:3e:cf:b7:41:0d:87:fb:a1:02:60:bf:4d:
         b2:c3:9f:59:7d:b7:59:c8:32:4c:ff:a9:71:01:d4:ff:03:cf:
         7e:c1:f0:41:5b:75:a8:db:dd:42:c7:6e:82:ce:e6:c6:27:c8:
         a9:35:66:70:bb:1f:77:01:80:4b:61:fe:10:ae:6c:bf:50:9a:
         88:9a:5b:25:1e:15:53:98:9b:c2:36:d2:0f:f9:af:69:71:9e:
         25:d9:a4:07:d3:0c:9e:3a:65:fa:70:dd:df:1e:71:ac:af:cd:
         f3:c8:36:2f:7b:3f:6d:a4:f2:4f:d6:49:7e:24:93:9e:45:73:
         52:d0:2b:7a:6e:cd:24:4c:02:02:9b:d2:3a:79:63:4d:56:24:
         76:d7:be:e3:fe:b7:f1:94:aa:5b:05:44:ed:b5:66:13:4d:53:
         f7:5d:9b:05:e9:02:a6:11:98:d4:12:40:b0:c8:b8:59:5f:b7:
         8c:36:cf:f3:4d:6e:c9:1d:ba:71:c4:68:95:06:e0:c3:b4:67:
         1e:6b:97:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqx/+i5Nt43fE8XSk3abDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWY5ZGJiZTY4Yjg0MDI3Y2VkNGQzMWU4ODAzZjEzZTlk
NjVkMTMwHhcNMjUwNDEzMTUwMTA2WhcNMjUwNDE0MTUwMTA2WjAzMTEwLwYDVQQD
EyhlMTExYzZiM2MzZWYzZDZlMjQ5NjU0ZWIwODdkMTczZWFkMzZjZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00jHJZFgRYV1bfVFCY/K+B7WwKT+
dGbD68YV7fjfAey78UOkq7HNCRrxCbUY4rPueSb4bgHr3cwCctWAidwn0/kXj2t3
i2geqifUB0n1z1MkVPIB9xlayYYKRhBOE9D2E3ri1evqyhRaA4cw03Tdl10wiADi
jMpBIBWTUT9W8RgtRUB8E5rG9Fdxf4MxN6iv/HGIQhMnMokOa8Soy8Rjy7VdpVnl
4emhLRSpBoADciXBpt9zBGhC2uS/W/jNOjsiLC7gI7xSpReHz4dozOZlURBLexOk
VSJ9QB0Bs9LwrND9vKpA8tP9Oo+E4cjKo/Zn3m5luVeLPf6fM+cOgOsfjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOERxrPD7z1uJJZU6wh9Fz6tNs8sMB8GA1UdIwQY
MBaAFOkfnbvmi4QCfO1NMeiAPxPp1l0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUt
YjRlNzlmNzgxZTRkLzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUtYjRlNzlmNzgxZTRk
LzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOHagJCW
PnsshMPTF488FwtKjXJH4/5whTAM7E+NNLBMccHi0A+Ea7CzSwUBRIlt+iUNsLb6
9NgC0NNPPs+3QQ2H+6ECYL9NssOfWX23WcgyTP+pcQHU/wPPfsHwQVt1qNvdQsdu
gs7mxifIqTVmcLsfdwGAS2H+EK5sv1CaiJpbJR4VU5ibwjbSD/mvaXGeJdmkB9MM
njpl+nDd3x5xrK/N88g2L3s/baTyT9ZJfiSTnkVzUtArem7NJEwCApvSOnljTVYk
dte+4/638ZSqWwVE7bVmE01T912bBekCphGY1BJAsMi4WV+3jDbP801uyR26ccRo
lQbgw7RnHmuX3A==
-----END CERTIFICATE-----