Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File:                     6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier:          Zg5GWAhJBAJ5Bk7RcAEjfF2RcnnefRABICMn/7KxutU=
Subject key identifier:   79:20:5D:9F:9B:18:6B:44:DA:BE:39:24:9A:C6:1A:02:2E:C2:1E:7D
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer:       /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial:       01962F06551FDD14964BE59B0F98C00F5F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number:          0555
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: IsCOJ2yrFIPdxk7N/OtNs3yc0KHj/XfDcDWX0BD6ICk=)
                          2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
                          3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:1f:dd:14:96:4b:e5:9b:0f:98:c0:0f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=79205d9f9b186b44dabe39249ac61a022ec21e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:91:77:be:ed:79:d1:53:75:4c:d1:15:0f:
                    09:3e:9a:c3:3b:bd:30:28:69:bb:a6:3f:42:b7:32:
                    21:f3:8c:ce:73:f0:e3:35:48:c2:fb:a5:8a:b3:58:
                    0e:64:c9:8a:cb:0a:75:2f:cc:ba:66:8a:48:c5:26:
                    c8:92:3e:43:b5:3d:45:31:10:6b:d5:cd:c5:50:73:
                    cf:28:6c:a9:c1:9e:20:26:0b:70:90:5e:9d:f7:ea:
                    a3:65:a2:2f:10:67:97:c1:72:51:50:46:ba:51:95:
                    0d:7e:00:39:e4:42:b4:1e:67:a4:71:83:3c:90:0d:
                    be:41:f7:95:50:20:ef:d8:98:a2:c2:67:66:d0:7c:
                    1b:08:f0:7e:31:60:48:cb:3f:00:db:8c:b5:c6:5f:
                    ef:ea:ae:09:2e:c3:8d:4d:fe:54:0c:be:e0:9d:b5:
                    67:bd:35:06:91:d1:ad:df:d8:50:f4:d5:97:fa:c2:
                    4e:fe:9b:f7:b1:10:b7:80:db:b4:0c:ce:20:fd:f9:
                    b5:59:44:83:d5:c5:32:35:cc:03:63:25:ba:2d:3d:
                    6a:a4:81:1f:b1:1c:a1:e9:63:4e:d8:e1:94:26:2c:
                    b4:c6:ad:80:17:c2:63:65:73:e6:da:79:c7:89:7e:
                    e5:e8:ab:8e:8f:05:11:6a:09:d5:84:6f:36:a7:26:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:5D:9F:9B:18:6B:44:DA:BE:39:24:9A:C6:1A:02:2E:C2:1E:7D
            X509v3 Authority Key Identifier:
                keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:34:27:6e:fb:d1:cc:eb:6c:69:33:62:01:05:ea:37:a7:86:
         27:8d:3f:57:7c:bb:14:3b:9c:5b:f8:06:cd:85:c1:e2:a6:48:
         22:b2:be:82:b2:dd:f1:af:21:33:17:71:a2:22:d1:d0:ff:b4:
         60:90:d1:9f:9d:fd:cb:84:1a:8c:83:cf:58:ce:ab:12:34:ab:
         75:7b:fa:47:e7:19:12:35:f6:b4:cd:c8:3b:a9:1e:0b:7a:64:
         71:e5:4d:44:f5:04:43:91:72:c0:96:95:f2:5d:db:82:fe:a5:
         b1:58:ae:dd:89:50:ae:10:0d:6d:67:1e:46:6e:14:62:5b:b1:
         0a:99:e4:ce:f8:82:e5:d7:d3:10:46:83:1e:90:01:8a:f7:b2:
         12:89:0e:dd:2b:af:40:3d:e4:45:b8:b2:42:53:e4:1d:57:0e:
         84:15:e6:c6:91:25:36:5e:29:ad:ba:d6:56:4f:2d:f2:e0:48:
         02:7d:97:2e:1e:ff:e6:65:cd:89:6e:4c:f0:01:cc:5d:3b:d3:
         96:ba:51:99:d7:e3:6a:0e:52:d5:7d:2e:94:92:24:51:94:d2:
         90:ff:bf:3b:d9:d7:82:9f:c2:61:52:e7:dc:89:ee:4c:8f:ad:
         42:51:7a:1d:54:16:80:ae:49:c0:03:50:87:46:e7:d7:67:a7:
         82:12:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----