Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
File:                     fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json)
Hash identifier:          GZ5TNAQNz7cnzHEtsZJPikVmP1Gxy/A7lHibqJKOWWc=
Subject key identifier:   6D:E5:39:2E:DA:97:F4:17:FB:25:FA:65:8D:B9:DE:C3:3D:B5:23:78
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Certificate issuer:       /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial:       01962F3D6018A18DAD40DB87F03F7D43FABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
Manifest number:          0EBB
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 70vKh_nRIlsGDeCCWIWnJDoMQow.roa (hash: 9/IlxykCR8D1ob5yM4nNThKcpH35vFsHMDpOK44EfG8=)
                          2: AuElns1VObrRDqT4NIwMY9EmyGk.roa (hash: 29nayPFK3cRbhQvKtMw0ZoiHbzL8FhraQfBFRLxRMzQ=)
                          3: E_fV2_-LSoXs8TNNVud176N90DM.roa (hash: pEduf01l+IkFgVqqHIULEF/rXEiD2nJYC04Z+8oaaWE=)
                          4: GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa (hash: BfdX5BDfo9Z5mEIhjqpFA0KNYyZ0ceyNKC3cFcLwZOU=)
                          5: KZA4jnri-aL9nYHoTsoeJH-R8gI.roa (hash: ioRykNk5tHi0fFciV5Ce58v9OpltJE9aSwwdhuLkNB8=)
                          6: L8uCW7ekm32Krnf3ks9jQXZfbb8.roa (hash: SiCaRGvu/k2o4TpiftW9aHSETXjCe5Up3+wi7DpgEqg=)
                          7: NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa (hash: YbW4L3XomgDTTG2VVXMsP5shedyMXIrMiyf4jWJ1fEY=)
                          8: UhVjPeN5rpuwAHSinKlE_8JwegI.roa (hash: VDbFVWwq0zh0SzqRtSX72R3GUx9GyGy9DQZPLPYdjM8=)
                          9: ZZmhbXaiwnlvoTzrIPKT393zeQY.roa (hash: h/DL+p5qUcE0X2Aplnohyf125A4LIxDH/WhCa+Rudu4=)
                          10: bb5iI1WPbNppyqoKFGHl592smj4.roa (hash: dMEHaektgDSjptnb5y/mJH+mUC58u3E+XvJ+oyJwb/c=)
                          11: e6N6L0TksO19CdNdYB-tsG35AfY.roa (hash: 5Eq8sf7loiQQlTHE2kyCxUeEW9AcUU8hd5bLQ2BYbvg=)
                          12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: uYNoB85AIGITZYbcNfPsadM3++0El7pCK3u0EMgNFzA=)
                          13: kyyUo6K8PDgAQyp4iZti_acVmX0.roa (hash: P5dyK+BgcQrXfvVfNCSYxNqLjNECInMEbMjQNhR6C5A=)
                          14: m8_r0VZgeMf9CD7ftR8A5KG9850.roa (hash: rBBdrLVM7ya1VIISU7w74srUfPPOKneCLGZB6/hqiV0=)
                          15: qhiL7bExacXUsCTM7Vb9ImRHg8c.roa (hash: S3bNWosVJfDx7XwIB4xM9qZIrywdYlw1VXpMCxOUW7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:18:a1:8d:ad:40:db:87:f0:3f:7d:43:fa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=6de5392eda97f417fb25fa658db9dec33db52378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:54:d5:1d:d5:14:de:87:5c:ca:dd:a5:d3:
                    53:5d:d7:23:7b:12:5a:c0:7b:9f:12:a3:e3:d8:ef:
                    ea:b6:b1:c2:3b:cb:a4:57:82:6e:e2:e7:03:33:df:
                    f9:01:ba:fe:9f:6e:d4:d6:d8:25:71:4d:ca:e3:9b:
                    d7:4a:b9:8d:43:7c:6d:d9:ef:73:91:b9:ff:5e:38:
                    69:d4:3a:3a:e2:d6:eb:7a:6f:3a:cb:49:38:3f:3b:
                    79:ca:0e:99:cf:3f:c5:87:d5:43:77:2e:48:0e:8e:
                    d6:9f:3f:bc:ef:de:a2:d8:7c:c6:b5:12:d6:76:1e:
                    89:a1:4f:76:43:5b:bc:ed:7c:9d:dd:d5:13:6a:ad:
                    39:00:e7:6a:6c:d8:b6:50:52:b9:ae:01:bf:0c:95:
                    29:54:ba:6a:cd:8a:6c:97:4f:ac:db:37:c6:e7:7f:
                    f0:59:79:70:ea:84:30:b8:e3:3a:f8:24:c6:b7:d1:
                    2f:dd:df:68:6c:ba:de:a4:40:51:4f:19:a8:c3:58:
                    a7:3b:86:19:46:3e:5b:73:d9:ee:7f:59:e6:2e:00:
                    76:b7:f8:a1:d2:2a:af:0c:f6:aa:17:d0:4d:a3:f7:
                    65:d3:76:5a:83:f4:9c:c7:90:cb:0b:52:15:35:a5:
                    f5:87:a7:d6:a3:ae:27:15:e1:8e:df:b4:af:91:84:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:39:2E:DA:97:F4:17:FB:25:FA:65:8D:B9:DE:C3:3D:B5:23:78
            X509v3 Authority Key Identifier:
                keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:51:b2:33:2d:f3:2a:d2:9e:88:c2:50:88:08:79:79:24:75:
         3b:e0:d7:68:ad:6e:c8:cc:50:48:ae:08:d3:ef:ba:60:dc:68:
         fe:c5:13:67:c0:c1:b1:08:cd:e2:44:cf:fd:32:14:ba:7c:6c:
         0a:3f:66:92:f9:63:3c:7f:bc:05:8c:6d:d6:c9:cb:61:ce:83:
         23:35:6e:d3:61:5f:91:49:fb:bc:9f:2e:ec:5b:b9:1d:25:af:
         14:37:60:63:32:a8:57:f2:86:43:e4:4f:9f:12:5a:24:70:9b:
         91:81:10:9d:a4:9c:86:80:b8:5a:e1:ec:dc:6a:d8:4a:fb:47:
         a0:1c:31:48:10:8c:e3:52:48:59:b6:fa:e4:27:30:7b:92:a9:
         ea:13:3f:e1:14:52:66:62:99:6d:bd:e2:cb:35:2d:3c:dc:9c:
         ae:f8:7a:38:cd:a9:5e:aa:c9:2e:c3:c5:b3:18:5d:e6:af:d8:
         eb:4e:a7:ec:2f:74:d0:7a:37:ac:2f:72:1b:00:c7:51:11:57:
         e9:49:c0:7c:bc:ae:79:c8:99:dd:3e:7d:18:1a:e2:6b:03:fd:
         5b:77:36:46:4f:74:d4:e3:1a:47:a8:9b:67:99:b8:89:ca:34:
         d7:12:63:e0:4d:ce:bd:7f:92:f1:61:7a:e7:45:aa:ab:51:16:
         47:ec:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----