Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File:                     6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier:          nBPbXMvcl77SCMj0kI9wgyD8sA52UlTS4unMl9qq6DY=
Subject key identifier:   00:19:16:6A:1E:8D:5B:DE:65:15:83:A8:45:7E:09:10:DD:91:82:5C
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer:       /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial:       01962DF3D2BD5D9615F3F2C7F725DCA2A0A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number:          106B
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: /tYCF78Fw7NTNKDUk56ajseS0D5EgPtQqsed9I2XRtY=)
                          2: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (hash: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=)
                          3: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (hash: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d2:bd:5d:96:15:f3:f2:c7:f7:25:dc:a2:a0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=0019166a1e8d5bde651583a8457e0910dd91825c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:4d:bb:1e:90:6a:74:2d:46:5d:78:7c:9e:
                    a3:f6:20:ba:bc:af:d8:5b:93:ad:37:0a:e0:e7:d1:
                    02:9a:f2:fa:a5:0f:04:ea:05:f3:ef:ff:b8:84:c6:
                    c6:93:a3:5f:a8:18:6f:4f:71:4e:9e:ce:47:92:48:
                    19:77:10:f4:c8:84:a2:a5:d6:14:24:a9:41:55:9d:
                    da:98:aa:d4:ca:83:50:95:14:0e:f1:90:d3:58:a4:
                    24:fc:55:ef:58:d3:dd:38:52:d1:16:06:da:4b:8e:
                    c2:ec:d7:b5:e8:e9:59:57:95:1d:cb:d4:4e:a4:72:
                    61:f4:99:30:0b:22:f8:f3:99:e0:6b:c5:cf:51:56:
                    7e:19:ff:6a:66:78:8a:ba:72:5f:eb:40:36:e8:35:
                    8e:d1:ba:c4:79:3d:fc:45:63:ac:51:fe:0f:7d:a7:
                    ea:72:36:24:bc:af:b6:de:30:a3:b5:3f:2b:34:c8:
                    c2:61:ea:de:65:eb:ff:aa:a8:2e:36:f4:e7:cf:b5:
                    72:40:21:a6:0c:87:76:5a:a7:2e:e5:af:ce:a2:1d:
                    03:82:f2:72:ad:31:4e:73:be:6f:79:62:b7:0f:3f:
                    b9:33:32:de:6d:b8:16:32:16:a8:58:ce:f5:8a:7d:
                    16:66:91:69:f2:48:c0:95:0e:e5:26:d6:49:33:24:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:19:16:6A:1E:8D:5B:DE:65:15:83:A8:45:7E:09:10:DD:91:82:5C
            X509v3 Authority Key Identifier:
                keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:48:18:d4:b1:fd:a1:e3:1b:9b:77:57:8c:a9:3c:55:8f:cf:
         95:fb:6f:c4:47:fc:d2:c0:ec:9c:e6:cb:c8:9b:a3:ba:77:a0:
         fa:f9:76:b3:14:54:67:10:9b:a1:c0:4e:44:c4:b0:83:29:1f:
         bc:f8:85:d6:ca:3c:7c:a9:2a:ad:a9:7e:04:4d:ee:d8:95:20:
         7e:0b:14:02:6e:d4:ed:0b:86:45:e3:57:f3:19:f7:0b:1f:71:
         57:e4:82:f9:83:a3:ee:d0:1d:6d:26:ce:ce:0e:c5:d9:e9:3f:
         08:bc:8a:1b:65:d2:9b:a8:9b:e8:22:34:cf:67:3f:bb:0f:64:
         94:96:bd:77:6c:2b:2b:a5:79:20:5a:1d:0f:b3:f7:d9:fb:fd:
         3f:38:2b:4f:47:eb:dd:2d:6a:6d:e6:77:66:ee:72:c0:02:37:
         1e:d9:7a:fc:15:25:d5:f9:a3:dc:51:25:ab:22:03:8f:b0:56:
         ef:e1:7d:3d:9a:a0:a0:c7:e8:84:d4:7e:c0:23:41:1a:31:88:
         16:34:c2:96:a1:40:93:c7:4c:7d:c6:8b:a7:ca:7a:f8:29:89:
         c2:0c:02:bf:1b:99:b9:72:32:9a:65:15:e8:c2:99:36:bc:49:
         31:4f:2d:ce:d9:71:5e:e6:3a:f2:33:e3:30:8a:46:f8:94:42:
         64:5e:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----