Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File:                     6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier:          lwOJ99PeWDjVHR1UHmYRI8ea8tdtIsH9MBaar7VwhoA=
Subject key identifier:   65:D4:6B:0C:FF:CD:7A:87:11:A0:62:51:E2:F9:7C:CE:0C:41:5C:70
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer:       /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial:       01962E2AFB15DE0D0D54AC6DF009B320E5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number:          0275
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: dWk3+EIpcoSBDgpt32n4L/l9ajlSX5RLPxt6Qu6XR6o=)
                          2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fb:15:de:0d:0d:54:ac:6d:f0:09:b3:20:e5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=65d46b0cffcd7a8711a06251e2f97cce0c415c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:5e:4c:58:80:d4:5c:46:5a:3b:45:f9:97:
                    f3:1f:95:f4:5d:5c:e3:98:0c:ba:43:9c:de:90:bf:
                    76:75:df:87:b8:28:bd:af:5e:1a:7e:07:2a:11:93:
                    bb:83:a3:4a:bd:18:37:1f:db:b3:fc:5f:9b:d4:f2:
                    fc:56:10:d1:95:b4:cf:f6:ad:35:1e:65:23:4f:63:
                    0a:03:00:90:e8:4a:7c:b9:91:80:67:81:0d:0a:3c:
                    e7:22:f9:e2:ca:cb:91:e9:21:1d:d4:8c:ca:aa:a5:
                    38:d5:bd:01:b6:9d:96:bc:f7:36:ac:85:30:1d:1a:
                    16:b6:21:79:c5:53:ab:a5:66:b0:f4:c5:70:f0:e1:
                    3e:41:57:a0:0e:7f:50:e5:f1:de:2a:b0:0d:e5:c8:
                    d8:cb:af:be:82:ea:69:0f:d2:8b:50:f0:7a:2e:6e:
                    ee:23:c2:05:d2:b2:20:6c:94:f2:db:1d:5e:9b:76:
                    dc:61:a9:39:ad:45:87:1a:47:c9:0a:88:9f:0b:bf:
                    72:b8:6b:93:ea:7a:8a:e1:df:4f:3c:53:da:a0:80:
                    f1:3c:1e:05:17:53:ba:1c:8a:fb:24:31:fa:30:8c:
                    8c:da:ea:b3:4e:d8:3a:ef:1b:79:b2:83:b8:a9:c2:
                    56:3e:66:5b:ab:e7:21:59:8f:73:1c:7c:28:84:bd:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D4:6B:0C:FF:CD:7A:87:11:A0:62:51:E2:F9:7C:CE:0C:41:5C:70
            X509v3 Authority Key Identifier:
                keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:32:d8:47:ed:c1:50:63:2b:0e:1d:63:5d:00:2b:7b:9d:
         b3:9c:e1:46:43:6b:34:26:05:22:4a:27:7d:97:9a:63:9b:ea:
         27:c7:f6:47:dd:8e:02:a4:b7:54:73:44:c6:14:30:36:15:1f:
         24:28:aa:ac:e8:e7:47:a7:2e:99:7c:04:98:71:6f:be:85:06:
         f8:d9:7c:e4:09:16:cc:cb:cf:ec:99:f5:f7:76:3a:37:e5:23:
         f0:01:90:85:c7:4e:b0:d4:eb:30:d9:3f:98:00:32:e8:7e:4e:
         9c:35:75:8b:fc:07:49:fe:eb:f3:72:d6:39:13:ee:8c:49:57:
         52:fd:82:d3:10:0f:cd:8b:0b:fd:be:bf:c0:77:19:15:e2:b5:
         5f:cb:f6:a9:d8:ca:cb:69:20:33:b8:03:93:a9:f5:aa:ee:b6:
         bb:05:94:10:34:fe:e8:5e:9f:5f:e1:5c:9f:0b:6c:43:8c:4c:
         d4:59:e0:0c:c8:6a:c5:e1:be:e9:9d:0d:a7:22:54:89:d2:5d:
         d0:81:69:4c:21:e6:bd:17:32:3d:0e:be:b2:68:e6:a7:25:70:
         3e:37:7e:b7:f1:37:39:95:c9:2a:ed:c9:c1:76:39:07:a7:78:
         99:3a:cb:0f:6b:62:6e:b9:62:21:85:c3:70:a3:ff:14:08:21:
         18:b1:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----