Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File:                     6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier:          n5Arvq24/uWaNN7++WaO5bNrI3ZRwd+t4PiiNwBwcig=
Subject key identifier:   19:91:46:DC:19:77:37:26:4F:7D:7F:49:32:93:B4:FE:5C:C1:62:28
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       01962DF3B42C7E1704F8A7EB12A0DBDC18CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number:          0840
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: 5rIQA1UqGn8bEunx/H8c0A1LyJSi4u8+EBVvtGbYnq0=)
                          2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:2c:7e:17:04:f8:a7:eb:12:a0:db:dc:18:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=199146dc197737264f7d7f493293b4fe5cc16228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:fc:e6:3f:1a:9f:5f:a1:86:51:27:2d:1b:
                    70:ef:3c:49:62:06:29:93:07:00:f8:9f:80:68:88:
                    07:94:e8:a0:f7:31:86:26:c8:07:bd:50:0a:f5:0d:
                    cb:14:b3:9a:54:bf:95:9a:4e:dc:d5:67:93:40:f8:
                    ed:72:82:55:d8:19:e0:8f:4d:d1:92:89:27:94:48:
                    98:1c:c5:f7:b2:54:d5:e5:27:17:f8:5c:a9:c0:e9:
                    a2:49:72:ef:bd:98:b3:31:5e:57:4c:1c:c0:56:68:
                    25:03:a9:8a:58:73:b2:d0:e7:4c:17:8d:1b:67:13:
                    2d:86:1b:09:a1:0d:a5:66:ff:6c:d3:dc:13:23:3a:
                    4a:35:c6:df:18:bf:5c:a6:54:17:de:ae:2a:af:f6:
                    a1:48:b9:35:5d:f0:b8:8f:0d:9b:ea:a6:a4:2a:b6:
                    af:ee:4b:84:0e:45:d8:ae:90:30:88:fc:90:4c:fd:
                    be:ad:f8:e5:44:d5:92:35:09:aa:b4:21:95:bf:a5:
                    1b:7b:9f:a5:26:a6:54:75:4f:0e:88:7d:fc:79:5b:
                    8c:58:84:99:c2:8a:ad:54:b3:03:15:60:f5:5f:d7:
                    d2:8d:f5:1b:46:d7:1c:17:d1:96:57:54:db:b0:d5:
                    c3:ab:a6:e8:cd:f0:70:9b:21:5d:1d:f7:d6:ec:83:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:46:DC:19:77:37:26:4F:7D:7F:49:32:93:B4:FE:5C:C1:62:28
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:da:ab:65:cf:c4:d0:71:46:bc:86:f4:d2:4e:52:76:14:
         b5:39:0e:8f:f8:40:67:a3:e8:bf:0b:59:d0:8b:25:29:83:80:
         31:e5:17:d2:64:28:0d:60:cd:7a:07:f6:f0:32:c2:c3:3c:1e:
         59:23:f8:26:99:ae:79:d7:b0:ad:02:bf:29:0e:3b:ba:12:48:
         15:2e:f9:34:b4:c7:0b:6e:03:f8:e8:7f:56:2d:d0:8e:56:76:
         3b:a9:82:4f:ff:5c:63:8b:d9:be:0a:0a:27:8c:65:32:0b:52:
         88:23:5c:81:25:c4:cb:d0:91:2f:99:7c:1f:77:32:b4:15:90:
         eb:47:41:be:36:28:2e:93:8f:f6:20:00:63:4d:e8:ac:fa:2c:
         79:12:44:0d:68:9a:93:c2:74:d7:df:2f:4c:8d:2e:c2:77:f7:
         d2:d4:be:9e:28:bd:ce:d8:d2:e4:0d:84:5c:02:b5:ac:8b:43:
         fe:84:2e:34:86:d5:07:6d:61:ba:52:ae:28:7c:0f:dc:ad:7e:
         36:2f:2d:58:d7:c4:cf:e4:41:c9:2a:49:2c:41:ff:7b:d0:d2:
         37:98:5a:65:2d:02:94:7f:41:7d:9d:b2:31:a8:b3:f5:aa:35:
         8d:20:a8:33:f2:a4:a5:58:45:f3:d5:11:76:2e:44:1a:66:b0:
         f1:ec:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----