Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File:                     6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier:          +7MWJ0mOhKd69z40JVT4FdLy190NLbIjQSS25cWvB6k=
Subject key identifier:   EF:7C:22:3B:C1:B7:20:60:D0:96:E6:5F:38:56:6E:E1:1D:0A:BF:AD
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       01962F747A2337A45AEF986B18A4DB50C18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number:          12E6
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: WU8UP7WxyJG2BLggaEJ4zYOFbcEUfPxh9efpcdrFarM=)
                          2: XMQgiqcPelkjm7gWjsFCVZhyYlw.roa (hash: MplIqGMTS4jdBDFbxET40RGJ8kb7EFW6T8B0/VgkIdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7a:23:37:a4:5a:ef:98:6b:18:a4:db:50:c1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=ef7c223bc1b72060d096e65f38566ee11d0abfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:ae:3e:27:24:35:9e:ce:61:12:e7:8c:63:
                    8d:fc:d4:c6:82:22:06:de:9c:85:7a:bf:54:11:fa:
                    67:05:c6:c6:8b:b7:fa:2e:4a:ee:75:5a:b5:5f:ea:
                    35:9a:6a:e4:69:d5:3d:f3:22:b8:44:cc:b3:ab:7a:
                    c5:92:c6:a1:b4:d9:db:27:fe:01:55:8b:c7:24:fe:
                    fa:72:76:6d:5c:25:5c:38:5b:a6:2c:40:67:83:99:
                    be:b1:e4:44:e8:6d:76:9b:e8:e4:95:e7:49:30:d7:
                    51:22:47:e6:ff:74:fc:5d:12:39:54:14:f6:40:04:
                    f9:1f:f1:49:6e:d0:3c:2c:55:b6:de:c9:30:0e:4c:
                    0e:02:64:78:b0:85:39:3e:96:14:be:09:f9:bb:f5:
                    02:1e:0e:c3:94:bb:88:45:c4:df:47:e8:6a:a5:78:
                    32:83:f5:e3:a9:83:49:2b:4d:a4:69:a1:f3:65:ec:
                    b7:62:3c:59:fe:56:c2:2d:c2:76:fa:16:64:da:d7:
                    65:3d:85:a3:f4:c4:0a:7f:9b:74:b3:87:97:54:76:
                    dc:2f:1b:8f:d4:a9:e2:9d:82:e9:a8:de:4e:cb:7b:
                    5c:c5:1a:f9:cb:e9:34:6a:dc:84:60:75:ce:f0:d2:
                    8d:86:09:b8:92:a1:9c:ab:29:87:f8:65:3b:26:1d:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:22:3B:C1:B7:20:60:D0:96:E6:5F:38:56:6E:E1:1D:0A:BF:AD
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:36:54:27:bc:ff:dc:a9:fc:0e:fc:f7:b9:38:1c:b3:16:
         c7:4a:2a:0a:9a:e6:f6:4d:d5:d9:68:16:89:01:85:ba:ab:e8:
         08:d3:2f:90:fb:82:3a:b7:8b:d6:82:c7:33:f4:c1:a9:8d:e1:
         2d:90:20:02:7b:b1:d7:98:57:11:23:bb:34:37:96:60:fb:86:
         e1:5b:84:d8:f0:07:af:fe:d2:9e:06:e7:c2:d8:19:c2:a2:e0:
         63:88:e7:20:07:52:8a:a0:a1:f4:a4:78:66:90:c2:98:cf:3c:
         7a:e3:ac:78:7c:54:6b:ed:52:9b:1c:52:72:3e:b2:39:12:62:
         96:57:e9:bf:19:a2:90:f6:05:18:9f:0f:e0:61:9a:3d:ce:99:
         56:b6:a1:64:0c:f6:1f:5d:94:b9:5e:2a:7c:46:bb:7d:f7:b7:
         d3:e6:86:c7:16:f0:c8:83:e1:07:04:3c:87:f0:3d:d0:96:bf:
         d0:a0:12:72:53:49:b0:2d:3f:3e:d6:61:6e:91:67:ff:a7:d9:
         4f:fd:0c:3e:55:ec:d1:e0:b3:75:79:36:4d:1a:7b:6b:08:d4:
         e1:2e:b1:5e:f7:17:74:44:fc:e2:13:8a:a2:a8:68:31:c0:d1:
         d7:f7:b9:fb:2f:25:bc:fb:9e:88:55:dc:98:96:ec:a6:c2:4c:
         0f:1b:4f:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHojN6Ra75hrGKTbUMGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjFhNmMwNjE0NTVjMDhlOTE0N2IyODFmYzc0MjRjYmM1
NDVmNDEwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhlZjdjMjIzYmMxYjcyMDYwZDA5NmU2NWYzODU2NmVlMTFkMGFiZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL2uPickNZ7OYRLnjGON/NTGgiIG
3pyFer9UEfpnBcbGi7f6LkrudVq1X+o1mmrkadU98yK4RMyzq3rFksahtNnbJ/4B
VYvHJP76cnZtXCVcOFumLEBng5m+seRE6G12m+jkledJMNdRIkfm/3T8XRI5VBT2
QAT5H/FJbtA8LFW23skwDkwOAmR4sIU5PpYUvgn5u/UCHg7DlLuIRcTfR+hqpXgy
g/XjqYNJK02kaaHzZey3YjxZ/lbCLcJ2+hZk2tdlPYWj9MQKf5t0s4eXVHbcLxuP
1KninYLpqN5Oy3tcxRr5y+k0atyEYHXO8NKNhgm4kqGcqymH+GU7Jh0UbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO98IjvBtyBg0JbmXzhWbuEdCr+tMB8GA1UdIwQY
MBaAFOmxpsBhRVwI6RR7KB/HQky8VF9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQt
M2Y5ZjI2NGNlYjIwLzEvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQtM2Y5ZjI2NGNlYjIw
LzEvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddk2VCe8
/9yp/A7897k4HLMWx0oqCprm9k3V2WgWiQGFuqvoCNMvkPuCOreL1oLHM/TBqY3h
LZAgAnux15hXESO7NDeWYPuG4VuE2PAHr/7SngbnwtgZwqLgY4jnIAdSiqCh9KR4
ZpDCmM88euOseHxUa+1SmxxScj6yORJillfpvxmikPYFGJ8P4GGaPc6ZVrahZAz2
H12UuV4qfEa7ffe30+aGxxbwyIPhBwQ8h/A90Ja/0KASclNJsC0/PtZhbpFn/6fZ
T/0MPlXs0eCzdXk2TRp7awjU4S6xXvcXdET84hOKoqhoMcDR1/e5+y8lvPueiFXc
mJbspsJMDxtPZA==
-----END CERTIFICATE-----