Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File:                     b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier:          a7EmHcIIvIXpOEWkvUOwovPOSUiUBm1I4NOweUfnDR4=
Subject key identifier:   A3:F9:F7:72:31:73:60:74:55:70:9E:1B:AC:20:88:AE:25:BD:48:5B
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer:       /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial:       01962ECF72DF5FE39CAA076B5F841386E938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
                          2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: hKkFgFyxy+nl/MJPlP5xguGNPRo3E00dwKoUSzvZyPg=)
                          3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:df:5f:e3:9c:aa:07:6b:5f:84:13:86:e9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=a3f9f7723173607455709e1bac2088ae25bd485b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:27:a2:e1:0b:33:e1:27:d0:2f:8a:49:1b:
                    49:ee:56:e3:5d:17:00:5d:a2:42:3c:b5:6b:e0:53:
                    32:3e:c4:9f:da:65:db:dd:44:b2:29:7d:3b:2e:ea:
                    16:17:ac:21:d5:ae:46:78:d3:82:9a:ad:1e:10:7a:
                    7d:71:aa:bb:96:10:ae:e7:89:13:73:52:d0:88:3a:
                    45:53:5f:df:4b:34:16:bc:fd:31:9c:07:18:85:2a:
                    b3:f8:16:ab:41:1a:fa:e6:03:ba:27:a8:12:98:75:
                    84:51:82:d1:0e:24:7d:d3:6e:a1:b9:4b:76:bf:10:
                    5a:d4:67:d3:79:a5:e0:48:8a:56:48:dd:dd:51:f7:
                    1c:c1:7b:ab:86:d1:8b:32:64:2d:a4:00:a4:1f:ce:
                    ab:2e:f0:ed:47:8e:60:d1:34:97:f4:a0:db:63:64:
                    ff:a0:9b:9b:6c:58:88:af:e8:9d:42:8e:f1:7c:19:
                    77:5f:04:39:7b:14:ae:43:b1:a9:75:92:4e:24:71:
                    8a:c8:92:07:33:60:2b:32:0a:f0:20:06:6b:2e:91:
                    4f:ef:8e:bf:96:8c:ef:a3:2f:6a:33:01:a9:67:49:
                    5d:3d:6e:fd:1b:5c:e9:4c:62:6b:e5:e1:a9:5f:80:
                    8b:8a:f1:04:80:79:ba:a4:b4:07:5f:15:b7:01:0e:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F9:F7:72:31:73:60:74:55:70:9E:1B:AC:20:88:AE:25:BD:48:5B
            X509v3 Authority Key Identifier:
                keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a3:ac:ad:90:fd:2c:91:7c:72:52:05:8f:fe:6f:26:78:14:
         e1:57:38:61:ef:a2:a7:df:24:cf:9e:40:84:19:38:64:f6:19:
         d2:fb:d6:78:f2:bf:12:05:47:8d:79:03:82:44:64:ae:b0:a0:
         bf:98:97:a1:40:97:c1:7c:f8:6e:d3:9f:53:7e:7f:3a:31:cb:
         f8:0e:26:3a:8e:05:57:5c:7f:5f:b7:6e:2a:4c:2c:46:55:e3:
         db:2c:0a:2b:df:c0:dd:a5:0e:a6:6b:47:bd:72:1a:9e:4f:4c:
         63:35:0e:7c:d7:ba:a1:54:65:69:4d:4f:2a:4c:00:a1:99:77:
         96:cf:78:bf:38:3e:84:6d:47:9a:7c:43:f3:a0:bd:df:39:f8:
         ba:60:c0:0a:5c:b8:8b:b5:aa:93:42:e5:e0:7d:ad:91:08:2b:
         1f:19:d4:63:f5:3a:c3:27:62:54:78:5a:cd:26:f6:52:8d:c3:
         cf:22:94:57:58:77:b9:94:5d:6c:48:f3:35:5b:3a:0f:18:81:
         9a:62:85:c3:19:1d:3b:17:bd:30:4c:4d:d1:27:de:6f:75:8e:
         f8:fe:51:fa:68:8e:a6:76:38:ab:67:fe:fe:97:ac:1a:8b:25:
         00:43:d2:c5:c2:a8:bd:46:6e:00:0c:c0:d9:a2:d8:e8:2f:c6:
         70:35:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----