Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          43QpWsFcqNCcLup4WL7CVQAQA2YHEV7af9sBHf1EhUE=
Subject key identifier:   70:FF:89:1C:F6:A3:50:67:AD:30:0F:CB:15:34:EF:DC:A6:1E:77:04
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       01962F06A82DE7819BC2A2B68BAEE84CCB06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 6jvE_XHjlnNI6-FtCPVCq0YmsqY.roa (hash: snOYWWn9LAXIRFMHKtV6wAS6uhRRwhXxfRK2VSExR1k=)
                          2: Dmq6rzRBY22zQprWtgsSucnmPfw.roa (hash: 53HdmBv78dIaQNhdTstURpa3FkH5iHS78bcTm103dts=)
                          3: Vfu8orab-u2hq4PDCFONf8-ELfY.roa (hash: 4g53e8SQJ6evWk5P2AQfilbVciXTa/dqHlUA6U7ixfc=)
                          4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: x4D1htivRz2rc+U7+7rXshTQWoPoK4eEtWDNQWCBbWg=)
                          5: c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa (hash: v2eej8TLgNyCOcTzYSfQkKDLdsnqMKtNEWYP6ylBCUQ=)
                          6: gCqBeQcxeP4mgIeC8gxfXD2ihNA.roa (hash: M8yQO0ZHmNcXujVHcxJQENuFmwi7ywPsRmKiyTk43dA=)
                          7: j_oVR8giIGJ9TAqquqYifkLeIjM.roa (hash: 5Tkxpz+Z+2HB95vYCH8LtVhmoPXDta/4SPNsrM3AuI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:2d:e7:81:9b:c2:a2:b6:8b:ae:e8:4c:cb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=70ff891cf6a35067ad300fcb1534efdca61e7704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:52:7f:d7:02:5a:e1:01:1a:9e:50:94:91:
                    dc:02:1d:ff:63:2f:e8:bb:23:1d:e7:dc:16:3c:6e:
                    d2:bd:34:9d:52:92:84:55:37:8e:42:fd:c6:45:dc:
                    e3:3a:69:cc:f8:85:9c:a5:fe:cd:f5:a0:af:cb:f5:
                    80:ef:d3:5d:18:a8:a0:0b:29:93:b0:10:da:d8:f2:
                    87:56:c5:2c:bb:fa:92:82:5a:4b:0f:00:b2:9f:a8:
                    a7:b4:b5:02:14:41:2c:68:5a:e1:46:aa:dd:dd:d2:
                    5e:d6:92:d3:1e:0a:36:85:9d:d1:b6:ee:2f:f4:28:
                    4e:01:98:bf:a0:e7:83:97:3f:27:31:89:80:0b:a3:
                    f5:c4:d1:35:e6:a9:a3:c0:d2:89:b4:03:83:aa:a0:
                    50:46:de:f2:08:ac:2e:3e:e0:01:31:2b:78:8a:1c:
                    54:ff:ac:9c:cc:d0:8d:b1:06:87:a2:73:ce:b4:54:
                    76:5f:1a:26:bb:b3:b6:c9:b3:30:61:de:9b:a5:e2:
                    f0:df:7e:d0:5c:e1:29:29:18:e0:f5:d3:05:59:5a:
                    f2:23:57:9d:46:23:6b:bd:4b:b3:2e:7e:6d:68:9f:
                    59:73:23:e7:0c:b8:6a:22:16:17:2b:20:4f:36:0f:
                    ce:82:cc:2b:e3:af:34:54:4f:c8:bc:47:71:f3:92:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FF:89:1C:F6:A3:50:67:AD:30:0F:CB:15:34:EF:DC:A6:1E:77:04
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:10:ea:02:e9:65:b7:e9:16:5b:bf:29:20:b0:6a:9b:9b:
         b2:f6:4a:42:91:7b:95:15:c5:d4:b8:d7:5d:a4:06:04:28:5d:
         c3:29:67:69:b4:83:66:5d:bb:54:b8:c7:fc:db:a1:01:da:a7:
         9a:a5:37:14:b7:82:13:c3:2c:38:92:01:76:99:33:48:e2:4b:
         10:53:fb:46:ae:67:e4:03:38:13:5a:bf:34:be:71:e0:c6:fc:
         2e:b5:18:93:e9:40:5e:8f:8c:56:bc:01:8c:6c:41:e5:ee:96:
         41:9d:08:a9:86:74:16:2a:05:5b:20:0b:2c:47:8b:2a:f5:e9:
         2f:1c:31:56:74:6b:47:43:28:1e:37:e5:af:bb:07:de:15:cc:
         17:7e:43:48:93:a2:f0:61:63:26:a2:81:28:28:76:34:2d:1e:
         99:2d:93:07:a7:0c:d7:a3:da:6a:33:05:8d:21:60:8d:e8:62:
         45:36:7c:ed:08:3d:9d:ec:e4:e7:24:9a:aa:4b:0e:f5:41:6e:
         91:bb:b3:4a:87:59:d8:92:c0:30:69:58:c9:6b:fb:89:d7:bf:
         62:7c:f5:c7:44:0e:a1:72:41:43:68:79:6d:28:83:45:5a:97:
         e9:08:6c:36:79:65:ac:ac:91:2f:64:92:d1:07:19:55:f0:79:
         1f:1c:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----