Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File:                     a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier:          8JJwnWMkaKYHKyqCCROubdSdLBCIPDLSFUM7CzPL3tY=
Subject key identifier:   4C:48:6B:59:00:55:55:2E:DA:7A:F9:DB:99:B3:4C:22:DF:14:46:45
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer:       /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial:       01962E98742B0382440368DF5F4D8BF84B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number:          0A33
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
                          2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: n9aZAOmhfBrr7Y2IVN40uUf0sdpW2c00N6He62nRmz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:74:2b:03:82:44:03:68:df:5f:4d:8b:f8:4b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=4c486b590055552eda7af9db99b34c22df144645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:03:e7:f1:9e:3f:63:93:44:b4:c4:0a:ec:
                    43:5b:a9:9b:59:f1:07:dc:c5:50:01:7d:42:79:dd:
                    77:7f:0b:c2:22:93:24:f0:2b:63:01:55:2c:9b:6e:
                    2d:b5:b7:e0:dc:f9:5b:f7:b8:1a:ee:eb:fc:89:a4:
                    0b:34:2d:69:76:7f:87:a2:f5:c0:8b:9f:48:72:e0:
                    49:5e:b2:e8:d3:45:d1:14:6b:aa:f3:8f:d9:48:55:
                    19:af:14:03:3a:f2:1a:ae:3a:f4:bc:78:a2:e7:5c:
                    65:35:30:3e:e2:9b:f9:3a:0f:6d:4b:15:5a:3b:35:
                    09:70:fa:f1:09:4f:67:1f:01:53:70:75:00:7b:a1:
                    5e:b6:ae:72:9b:2f:0f:52:76:12:f7:7a:72:03:69:
                    b7:d7:5e:10:a7:33:d6:02:7a:e5:af:18:06:10:b0:
                    a9:25:21:6f:e8:45:52:0b:7a:0b:4c:58:16:bd:2e:
                    89:4c:23:fb:cb:fd:2c:31:a8:df:6a:75:fa:ef:c2:
                    51:5a:48:9a:85:bc:f7:64:69:55:10:45:88:06:a3:
                    6b:da:b2:5d:a9:0c:04:09:c9:48:15:3b:f9:7e:1b:
                    4a:46:94:f0:2f:d9:e6:95:02:38:25:a7:fc:25:0d:
                    b0:fe:c5:59:e9:4f:c2:9a:e3:be:76:48:b6:50:d9:
                    f3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:48:6B:59:00:55:55:2E:DA:7A:F9:DB:99:B3:4C:22:DF:14:46:45
            X509v3 Authority Key Identifier:
                keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:98:fe:66:fe:d8:cb:58:34:06:2b:26:49:8a:59:d3:e8:73:
         41:a0:d1:4a:c0:ff:6f:98:80:53:47:a5:9a:97:72:4e:bb:2b:
         40:41:de:62:23:c2:47:49:0a:17:9c:5d:f8:2f:98:c3:7e:ff:
         f4:2b:b8:37:c0:13:54:10:70:8f:dc:a7:a5:92:44:ed:5b:a1:
         3c:fe:35:ac:3c:9b:bc:df:c9:ba:dc:59:6f:a7:f0:89:af:8e:
         b0:d5:d1:28:2f:6c:ed:c4:fe:8b:e3:a1:c6:6f:34:50:a0:5d:
         af:68:3c:4b:1e:61:a9:7e:67:80:09:57:9c:8a:f8:5e:62:cb:
         7f:c0:75:94:45:f2:34:bf:b0:c6:56:43:c1:58:a0:05:a8:58:
         b9:1b:5b:09:9d:c2:44:d5:52:a0:42:e1:f6:59:3f:48:c6:70:
         66:de:fa:1d:7c:79:ff:1e:e7:de:a3:44:dc:6c:93:c0:e7:69:
         78:70:ff:c5:ae:0f:7d:a4:15:7e:ac:ad:e8:f7:a7:1e:c7:0b:
         91:5f:ba:f3:08:48:c1:c5:e0:ae:c5:8d:0b:bb:4b:b1:95:65:
         dd:98:7e:c8:48:40:ce:da:d1:97:a1:b7:0c:f6:60:43:5b:5d:
         ac:a7:6f:c5:53:9c:09:30:45:69:0f:c3:85:b2:b4:60:40:e2:
         b1:e7:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----