Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          CthntbGy0y+JH8VZMgtaUhnfqSo8GX1g05nWai8t97o=
Subject key identifier:   16:43:79:29:EE:D3:4D:DA:33:46:53:10:75:B7:F9:7E:91:16:F7:E8
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       01962DF4399CDE4575FAA58888883E906B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0BDF
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: 323a7XQwMeaiZ433AGDr/cijVTMBm+5dccsrC8tcowA=)
                          2: RshraodQG0v2CwIen1d8e2inEyk.roa (hash: tjJ3tzpy63NbiAcLeNQHsJL6oNJgQPy/v6//+8AFf5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:39:9c:de:45:75:fa:a5:88:88:88:3e:90:6b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=16437929eed34dda3346531075b7f97e9116f7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:2e:00:8f:73:e3:1b:c4:0d:97:c0:af:d2:
                    1b:9c:1d:46:27:66:83:73:b4:1b:14:0c:22:d3:97:
                    ed:9d:92:cb:e2:c5:26:8d:57:4e:e1:fa:61:06:be:
                    d1:39:30:f6:08:76:d7:fe:d4:d7:90:b1:84:07:6f:
                    e9:ef:2b:46:4d:d4:82:02:45:34:d0:f0:6b:58:f5:
                    ca:25:4b:6f:bd:15:16:94:79:89:8b:b1:ed:12:1e:
                    7a:09:62:35:fc:40:b1:b5:d3:3f:a4:1e:c4:88:2d:
                    d9:8a:1f:2b:ce:eb:9c:91:e6:a2:6c:3e:9f:ce:62:
                    7d:66:02:25:ba:f6:86:cd:49:35:dd:a5:12:dc:b4:
                    80:c4:d8:86:5c:15:1e:e9:c5:6e:30:82:59:22:3c:
                    59:47:84:a1:19:73:35:75:c9:8d:67:0a:d4:0e:ec:
                    d0:d2:80:eb:e0:83:bd:90:9c:26:6c:7d:d9:d4:8b:
                    36:2c:81:05:93:a2:28:90:c6:ce:be:70:2f:63:24:
                    20:3c:6e:0e:e7:f9:a4:b5:28:9b:0c:3d:80:34:fa:
                    12:4a:93:71:3a:f1:0b:63:43:c8:cb:91:49:3c:ee:
                    6e:33:23:4f:ea:ce:dd:06:4f:39:0c:3d:22:95:94:
                    94:3f:cc:24:e1:08:5b:3d:de:29:c6:58:01:b9:94:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:79:29:EE:D3:4D:DA:33:46:53:10:75:B7:F9:7E:91:16:F7:E8
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:ba:4d:65:a9:24:8b:b1:d9:c9:c9:89:ed:94:af:82:e5:
         19:4d:a4:09:11:5d:f0:04:3a:a3:9a:a9:27:9e:40:13:ae:03:
         3a:d0:1a:db:48:de:a0:b0:74:ce:6c:57:12:54:7c:61:68:b1:
         c5:a3:06:34:43:7a:30:8c:75:7f:75:1f:a5:78:29:61:d4:71:
         77:9f:c2:ac:a1:10:b0:b5:bc:6c:29:d0:eb:69:ce:81:9a:93:
         37:cc:74:07:9d:ec:cf:61:b0:f4:85:59:91:84:75:cc:4e:18:
         09:86:09:4a:75:de:9d:4d:48:ed:cb:60:ef:e7:99:36:60:77:
         a2:bc:de:57:3a:0c:83:64:88:17:4d:ce:6f:b9:1e:9b:4e:e3:
         3b:2b:bc:c0:2b:4e:2e:e0:dc:10:01:51:9c:ca:11:6e:6d:0a:
         cf:8a:7c:0a:b8:5b:5f:d9:c8:62:9c:e7:05:b8:2c:c8:8e:54:
         33:06:1e:cc:45:1d:ec:0f:0b:56:5c:08:be:7a:87:66:a5:21:
         5d:e3:5c:c0:a9:35:4c:14:05:c1:6c:4e:7d:84:84:79:41:31:
         d9:8f:58:30:6a:fd:a5:f3:83:2d:4e:b1:59:e9:db:82:0b:be:
         93:10:8e:18:8e:61:d4:eb:ba:84:da:7f:60:49:c7:94:da:ff:
         b7:14:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----