Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          zk2qort+XAHi11oGGX3M4l6r0YtWn2By7lbDFTuP+pg=
Subject key identifier:   6C:67:72:41:29:3A:2F:27:C1:84:7B:62:A8:90:6A:34:28:29:81:C1
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       01962E999F8138B571BEC5A1F10EA10644A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          0F4D
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: Dg_nZXNMxQynE5ehC7tXyWYcMIY.roa (hash: GdXBqs86r5DAb+MyyV4wEtv+zLO6JrCMc/QjbYWwSSo=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: ir7ZiZyHtrL51X+mmqopVUp+Lb7n2B06hWIJ/rZEL0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9f:81:38:b5:71:be:c5:a1:f1:0e:a1:06:44:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=6c677241293a2f27c1847b62a8906a34282981c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:c7:ec:24:b9:40:98:18:7e:e0:5f:dd:48:
                    d7:b5:6d:e9:aa:71:d7:d7:d2:ae:69:99:c5:ae:dd:
                    b7:ab:ae:1f:e9:7f:25:65:52:45:4a:c0:0d:53:59:
                    cf:d7:f0:d5:a0:56:e8:83:cd:16:43:55:66:0e:6d:
                    9c:a0:d1:74:6a:d6:88:0e:ce:01:4e:7b:d4:6f:e3:
                    5c:f6:20:47:44:d3:89:3e:2a:13:15:2a:6c:e4:85:
                    13:03:e0:1c:10:11:57:e6:f1:ad:ea:16:74:c3:56:
                    bd:af:a9:0c:90:44:97:d9:5d:e9:a8:2c:96:35:5c:
                    d3:21:36:2d:9d:95:18:55:12:7d:05:2e:32:7e:8c:
                    fc:16:16:ee:c2:c0:7f:cd:37:2b:9c:ec:31:79:96:
                    b8:a4:b2:10:ec:3a:bc:c2:c5:89:a2:4e:b2:bf:4b:
                    7c:87:f1:5b:a1:70:39:79:b7:79:8a:d0:5c:77:d1:
                    1e:58:57:e3:34:10:12:3e:57:e1:e4:90:69:c8:16:
                    f1:65:87:f8:8b:6c:f1:49:0e:ff:4a:2f:47:fe:bb:
                    5f:c7:a2:74:a1:70:95:96:b4:89:ea:42:67:33:cc:
                    0d:45:47:2f:46:05:44:30:0d:15:98:a9:6c:fb:30:
                    86:da:a2:d2:de:f6:52:7e:1e:93:de:46:41:4a:0c:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:67:72:41:29:3A:2F:27:C1:84:7B:62:A8:90:6A:34:28:29:81:C1
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:70:d6:cc:94:ce:05:19:0e:06:4d:cb:2f:c6:f3:91:9f:e6:
         52:ba:8e:8e:9f:c6:1f:b0:ec:98:46:1c:d7:ca:39:d7:cd:fe:
         33:3b:98:f8:5e:33:ee:d2:fa:37:15:c0:87:3f:bc:72:e9:c7:
         6b:36:8c:fc:a8:f0:c0:ad:db:16:43:f1:95:5e:ed:3a:96:22:
         4b:cd:9c:2e:96:63:98:7e:05:6f:4b:71:9e:73:15:3f:aa:8e:
         4a:bb:4e:ac:5a:1d:ff:c2:dd:53:b4:5a:8a:37:58:a4:56:5f:
         59:80:da:d3:a6:c2:af:92:f4:31:3a:b1:c8:19:b8:c0:fb:7a:
         41:db:ae:87:18:b8:18:d2:bf:dc:4c:85:de:66:73:51:04:bd:
         ff:5a:35:a3:04:16:48:1c:00:ed:2d:d3:55:4b:9a:c7:e2:0b:
         f3:3b:47:88:8c:ea:50:81:d1:8d:1d:78:a6:a6:04:a9:e4:b5:
         b1:63:2b:49:da:07:db:19:70:5d:e9:2e:43:94:7a:40:ec:84:
         4d:5e:04:2c:47:3f:06:9f:7e:94:e1:c4:be:57:94:55:5a:af:
         5d:8c:4b:6c:d9:f7:55:ed:4c:dd:98:2c:01:39:89:ee:49:bd:
         53:61:62:5e:d1:f7:99:74:ac:4f:1b:34:a1:47:b5:b7:c3:b6:
         76:2f:50:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----