Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File:                     b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier:          0SezOy20Visov57LMKap5HQybMy82vpD58+R8JuWkP8=
Subject key identifier:   AE:4C:BE:81:0D:1E:0A:69:EE:23:FA:FD:CA:D3:9A:F2:EC:D6:75:2E
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       01962ECF86C5E060AB2FFF250FAC081D6A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number:          0540
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: HzyW06_qFMHD7FoonuBI96cfqI0.roa (hash: tww5NCEvuHGOvnxV6oYkbLx4biv3u6Go3vXrACuAJA4=)
                          2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: xaTzXp5iWeWmxga56jor+tkUxXpkpyivRrXILz0TKKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:c5:e0:60:ab:2f:ff:25:0f:ac:08:1d:6a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=ae4cbe810d1e0a69ee23fafdcad39af2ecd6752e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:2d:d8:19:f7:ca:40:3d:10:b7:e3:f7:4f:
                    b9:7a:76:4d:76:cd:90:99:a8:ff:8f:0f:19:a9:50:
                    39:ac:c9:c7:33:77:47:78:f7:96:bc:93:d4:06:34:
                    ad:2b:72:6d:57:5b:d8:71:90:5e:fb:ce:20:eb:aa:
                    f8:57:48:5c:87:2b:1e:f7:06:c9:05:c8:1c:73:30:
                    8c:15:19:4d:97:73:de:44:a9:14:9c:25:69:68:f6:
                    da:a4:3b:0d:cc:e8:f0:bc:10:45:57:97:ca:38:5e:
                    76:ce:3e:65:52:b4:f7:e0:0c:0e:4d:43:c2:70:8a:
                    57:0a:ff:df:74:af:b3:c0:43:ca:98:9b:19:e7:37:
                    c1:7d:c0:5a:e2:d9:c5:1f:18:36:68:81:96:d1:0d:
                    74:34:b5:58:17:fc:18:93:de:b1:09:5e:14:5a:6e:
                    68:09:7b:29:82:2f:e2:d2:57:ab:4a:4b:f6:4c:4b:
                    b2:84:0c:65:06:e6:73:27:6c:20:d5:94:57:d0:09:
                    d3:38:33:d9:46:f1:ff:de:43:c8:72:71:a5:96:d0:
                    4f:99:e1:78:e4:1f:a1:4d:e4:7f:12:f0:01:1c:87:
                    f2:a1:97:e6:53:c1:98:45:c5:c5:f8:22:8c:7c:82:
                    70:0d:77:09:8d:20:ae:72:e8:2e:dd:62:b3:1b:c2:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4C:BE:81:0D:1E:0A:69:EE:23:FA:FD:CA:D3:9A:F2:EC:D6:75:2E
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:46:52:a5:97:3b:cb:4d:75:de:76:87:c0:c6:9d:ff:56:
         c2:c2:b1:5b:1f:87:c7:da:18:e9:84:2a:6f:e8:07:b9:19:6f:
         5d:01:a2:92:82:ae:be:75:05:d9:15:4f:f7:a7:c6:69:ae:1b:
         f4:c4:f7:fc:d7:42:73:cc:de:81:bf:01:f1:c2:ef:de:7e:ff:
         ff:50:ee:da:6c:86:ca:1d:46:a8:c9:3c:2d:c3:fe:15:80:f5:
         66:49:fa:df:15:93:48:cc:f9:75:92:a7:4a:28:67:55:85:1e:
         d5:1f:92:be:a4:7f:06:1f:5e:6f:f5:2a:28:02:28:c8:8e:43:
         21:38:c9:24:d9:19:ed:f2:ee:d9:ad:a9:1e:16:51:a5:69:b5:
         c2:67:f0:f8:80:89:82:f8:fc:83:75:44:71:7b:d6:39:62:65:
         c8:d6:e5:51:4d:f0:47:a9:a1:82:47:5b:40:55:09:46:6e:59:
         c1:92:14:c4:44:84:06:81:ea:30:b8:5c:9d:48:19:b0:9e:65:
         93:b4:b3:0a:fc:ac:68:9c:48:73:10:a5:09:c7:43:2d:76:11:
         cd:ba:24:c4:56:52:dd:cf:4d:16:d2:d6:54:d1:86:a8:78:ee:
         0a:6e:0e:6f:51:96:e6:83:e1:da:25:b0:d7:e1:06:cb:0b:9a:
         80:34:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----