Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File:                     b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier:          nEowyklAjuFND4sTLbvGr9JsZkG18F8kgilB1IswrGc=
Subject key identifier:   9B:FA:01:18:63:8B:48:B4:37:E5:EF:4C:8F:6B:6F:89:B1:14:BE:0C
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer:       /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial:       01962FAB91A2B283137827B148EE4F437ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number:          0BE0
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
                          2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: Q/+b6/71Fhvv7VX3BcjOwPNMf0ifCpe4Zqc8wIwOhE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:91:a2:b2:83:13:78:27:b1:48:ee:4f:43:7e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=9bfa0118638b48b437e5ef4c8f6b6f89b114be0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:33:78:96:77:54:44:a6:6e:13:ec:8a:26:
                    87:88:ab:e0:b8:6a:7c:a6:1e:b3:35:47:d0:15:7d:
                    c3:54:aa:fc:b6:02:6a:af:c3:bd:dc:83:7f:9c:09:
                    89:35:76:99:d2:5d:c0:c5:21:a0:98:e5:69:92:66:
                    28:06:c7:e1:00:79:24:23:f6:d1:dc:48:9c:23:7c:
                    fb:2c:0e:5d:57:79:73:85:17:cb:67:e9:ec:1f:fe:
                    76:6f:a8:70:4e:d5:78:08:ba:9e:2f:b1:cb:58:73:
                    6e:43:39:97:eb:e0:b8:63:95:ff:2a:84:96:93:6f:
                    9c:05:59:db:7e:96:de:82:c3:3d:b4:34:b6:be:e9:
                    b6:f1:00:a5:9b:64:77:c7:36:64:ae:7d:07:de:12:
                    00:01:5d:cd:a3:51:f9:38:69:37:54:10:4b:8e:a2:
                    ff:e0:2f:0f:47:ea:21:58:f5:7d:c7:87:d5:d8:3e:
                    c9:03:12:b5:5e:ba:b2:63:ae:4d:99:08:f5:19:9e:
                    96:22:90:38:cf:73:bc:fc:60:6e:46:b0:bb:a4:5a:
                    c0:f7:7c:ae:b6:57:c4:1f:28:e2:bd:f6:05:8e:0b:
                    62:23:ce:5b:8b:d2:b0:d1:35:70:08:9c:05:ba:9f:
                    96:0a:27:57:44:6b:03:fb:2d:67:6b:e0:55:73:0d:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:01:18:63:8B:48:B4:37:E5:EF:4C:8F:6B:6F:89:B1:14:BE:0C
            X509v3 Authority Key Identifier:
                keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:75:2b:fd:01:1a:c0:7a:e6:8e:54:db:dc:fe:99:fd:b9:02:
         cf:2b:67:59:31:e6:04:77:d9:90:cf:be:2d:1f:24:61:4e:4e:
         00:81:f2:38:3c:08:28:37:1e:c1:35:82:c2:e3:3d:62:78:76:
         26:3e:d7:7f:1b:b9:4c:46:db:f8:57:02:71:31:b1:43:f9:25:
         c3:eb:06:e6:aa:f4:98:f2:65:65:1f:fd:ab:4f:d2:f8:6a:28:
         c0:3b:bc:00:4d:3b:f7:d0:92:54:6e:65:0c:3b:ca:b3:5f:18:
         71:aa:de:13:81:c8:72:2c:fb:71:27:b3:e4:63:5f:71:7b:8c:
         14:0f:1f:d9:ad:2e:d5:b3:37:1c:f0:1c:c4:af:b2:bb:88:c1:
         d8:cd:70:61:a2:78:74:99:9e:6a:69:79:0f:d5:27:41:69:7f:
         70:ff:dd:f5:b7:2d:09:f0:69:ae:a6:bf:fa:36:ef:9c:a8:d2:
         74:9e:6f:4d:d9:cb:39:84:f6:51:5c:b5:be:f9:0b:2a:15:f0:
         e5:8e:c6:26:ca:10:ce:ef:fc:6a:83:f0:ea:24:79:2e:a9:50:
         55:18:58:6a:c5:79:2d:1c:19:48:20:4d:1f:e1:2a:1f:dc:6d:
         93:69:d1:a6:f8:4a:eb:49:f3:13:d9:47:ae:dd:97:5c:e2:9d:
         7a:6f:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----