Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          +/uD6yJMxUSX5l22Vzx5Cscy0malY57Kmm9vCoAn8QI=
Subject key identifier:   B6:1B:A3:C0:28:48:35:63:3F:B6:38:9E:E6:5F:AD:BF:93:E7:AC:6D
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       01962E61F0BB99A1A228E55AC51D33A63057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          143F
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 31Lnqd98aILf2Q9ICfWlWSchBQQ.roa (hash: DcqcrHdJNZRvLJWfvAXOgG6RHZHxR0/3JTue0isYM5w=)
                          2: 4AyXvezl-yqEPm9B7grorGuuaCU.roa (hash: nr0Tbymm5gT2Px5I4yZcmfEB00Mwgpc5V9ZF1AUNTUw=)
                          3: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: xiaZ4EU18SuEJuaI8L/Q4YHd+zuTEUyoeFPbPSl6uw0=)
                          4: MVj_UryY6usDMGQf7jrICRKU9Xc.roa (hash: TvJrrNTxB79t+M5iqPy3C87lEZr00PLUFyfmpQY3E3Q=)
                          5: ptaM1onrhJcKal0fw9HXf-WMHZY.roa (hash: O+DKgB5l1bVNFuSJ+/nDkTvI9UVJFEJCp07K7RKqMQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f0:bb:99:a1:a2:28:e5:5a:c5:1d:33:a6:30:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=b61ba3c0284835633fb6389ee65fadbf93e7ac6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:4d:cf:4c:d6:bb:18:cb:c0:87:f6:97:a4:
                    da:48:5d:a2:3b:07:8b:af:5e:ae:10:b0:98:16:9b:
                    e0:c6:4f:d2:04:93:4d:14:89:9f:e3:97:a4:de:38:
                    9d:e5:03:0c:7b:fe:4c:16:ab:69:2c:a4:7f:e2:9c:
                    c4:e1:e7:75:e9:51:d4:c7:ef:74:f4:67:05:fd:41:
                    1c:45:18:61:81:43:3b:2b:2a:4e:d4:00:15:d3:4a:
                    01:29:85:83:45:12:3f:af:d8:6e:d3:d8:e2:29:a7:
                    e4:59:9d:d7:78:55:61:49:51:4e:72:c1:3e:09:75:
                    e3:75:a1:e5:f3:fe:a9:0d:f3:40:b5:3d:35:88:8e:
                    09:72:e1:38:1d:1d:3f:09:72:64:61:6a:e9:f8:46:
                    e8:e8:7a:13:d0:af:db:b5:b5:1c:40:8c:de:97:cb:
                    05:53:1d:93:62:90:a9:53:05:cb:6c:9e:0c:72:d8:
                    7c:2a:e1:c7:e8:fa:f0:d0:9a:07:e2:bb:85:ac:98:
                    b4:b2:51:1d:0d:b0:e7:04:58:86:01:80:d2:fd:ef:
                    8a:e2:e0:65:e2:b7:f5:8e:a0:2d:b4:ac:0c:53:46:
                    09:4d:70:64:86:62:1d:b3:b9:2c:29:7a:f4:7a:9d:
                    33:b5:40:b3:7b:76:dc:81:76:89:2c:43:90:ca:43:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:A3:C0:28:48:35:63:3F:B6:38:9E:E6:5F:AD:BF:93:E7:AC:6D
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:36:2c:7b:bb:c2:89:49:8b:19:fd:64:8c:0d:25:8d:8a:
         60:8d:af:07:29:2d:d0:61:bd:d4:9c:02:40:6e:5c:30:41:ab:
         0d:94:11:51:3d:19:13:7e:11:1c:a2:3e:ae:8b:49:ef:61:92:
         67:5f:44:e8:8d:16:0a:b6:71:60:1b:a2:46:4b:d4:ca:01:75:
         49:ab:64:97:42:84:08:63:05:3b:e3:b3:c5:c2:7f:4e:82:41:
         61:13:94:05:48:32:8b:3e:a7:a4:6b:19:5a:53:d8:54:1a:96:
         3a:dd:9c:d2:6c:bf:d1:95:1b:3e:79:66:8c:30:88:de:42:90:
         5b:c3:6d:f7:ee:a4:45:25:30:d9:69:f4:8d:59:1f:f5:ce:9e:
         a3:46:f3:b6:13:09:7a:db:ac:65:44:c4:4f:34:a4:ad:2a:42:
         a9:d0:1a:35:d9:7a:e2:cc:19:39:56:73:d9:6a:1a:53:73:67:
         6c:76:4d:2c:ed:20:2c:d2:25:c5:ce:69:c8:0b:ad:9f:e5:bf:
         6b:02:0b:8e:b1:4c:9c:55:d3:99:90:b0:85:03:27:59:96:7c:
         e6:ee:dc:47:3f:22:bc:6a:06:4a:1f:d7:34:02:a8:7e:c4:e0:
         5a:64:70:aa:df:78:1b:f0:1c:0b:b7:28:fa:64:fe:db:e5:fa:
         32:84:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----