Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File:                     b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier:          Oo8wVRRecIWjh/x8mZYUq8YGvh5y8+YHLge/US+GD+M=
Subject key identifier:   9D:49:3F:F7:23:0B:4F:6D:67:B6:44:4D:01:8E:D2:E5:34:68:0E:82
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer:       /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial:       01962FAB817B9CD2C9B4A8A23AC5516F9C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number:          0341
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
                          2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: RQNqGBTKawmMoOOMyZBp+pS1AgoB2LeINlPEZ48AQLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:81:7b:9c:d2:c9:b4:a8:a2:3a:c5:51:6f:9c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=9d493ff7230b4f6d67b6444d018ed2e534680e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:8c:33:ef:31:58:6b:ff:63:9d:9b:28:26:
                    b0:9f:d1:5d:7d:90:15:ca:3e:f7:ef:3a:58:5e:65:
                    07:9d:84:62:1c:66:70:d6:e3:3a:39:5d:e1:81:fc:
                    7d:fe:ee:54:55:b0:f6:3f:69:98:bf:a3:16:5e:fb:
                    1b:30:2a:5b:e7:96:cb:52:00:80:c5:6f:78:98:ff:
                    68:45:1c:f5:c3:d6:05:64:80:af:18:e0:3e:0a:fc:
                    36:5a:0a:c3:4f:5e:75:74:b7:69:87:bb:92:0b:c6:
                    a0:77:6e:dc:f1:a6:ab:ff:92:ce:9b:15:c3:7c:eb:
                    e7:1d:b0:ba:83:db:6e:65:32:e2:bf:c3:81:62:bc:
                    8a:4a:d5:df:03:61:c4:29:9a:2a:a6:6a:6c:3f:15:
                    7d:2d:59:33:08:00:b4:96:86:e6:65:7b:34:e0:5c:
                    08:ea:d4:38:0d:b9:71:d5:6c:48:18:b5:b8:bf:2c:
                    2c:8e:fc:1b:1f:95:3b:c9:d0:6e:9e:80:f4:3b:6a:
                    cf:85:8c:a5:7f:89:ab:05:d8:16:07:b6:7c:82:b5:
                    10:b9:ed:6a:76:a8:5a:29:ac:66:6c:4a:b4:e0:3e:
                    25:ed:df:ac:03:32:b4:0f:53:6b:21:e1:e2:c1:bc:
                    83:3a:5b:25:b2:d6:e4:8a:38:b9:f4:ac:41:38:0d:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:49:3F:F7:23:0B:4F:6D:67:B6:44:4D:01:8E:D2:E5:34:68:0E:82
            X509v3 Authority Key Identifier:
                keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:d4:f1:2d:0c:68:9b:b8:74:3a:e9:c8:c3:9c:4c:43:b8:
         9f:ec:9b:58:60:d3:43:f0:6d:d9:01:72:b3:60:77:af:23:d8:
         a6:33:ff:5c:f4:4b:32:f6:6b:44:1a:ce:75:5b:37:83:54:86:
         6c:a5:c7:7e:9d:58:3c:21:d8:bd:52:d2:75:a1:2b:26:91:40:
         cd:ab:6e:b9:78:33:13:bf:d4:2b:d9:ac:c0:4e:66:99:3b:d4:
         37:8f:b1:6b:63:bf:df:59:e7:73:1b:07:6d:f5:82:f7:2d:d4:
         36:bc:49:6d:f8:da:75:00:c4:9c:e2:ab:88:e3:3a:76:0a:2a:
         4c:a7:0a:76:5c:99:d3:ac:84:e5:41:18:6f:3b:bf:f7:b1:3d:
         a4:61:98:6e:0c:c5:78:9e:5f:9f:ee:66:e9:61:7b:de:34:b1:
         b5:f3:b6:51:c2:7b:55:32:31:e2:6f:57:01:f1:ae:ca:a5:bd:
         bb:fc:c5:a9:d3:62:06:93:30:0c:5f:d0:43:8d:c4:32:e4:6d:
         c4:ea:6f:f8:95:e4:61:f1:72:53:89:5b:5e:1e:70:d2:7d:db:
         43:d5:38:cb:7c:47:fe:17:71:92:b6:91:a2:f5:e8:76:59:63:
         35:b2:37:22:43:cd:48:0b:18:90:e5:d3:ce:0d:fd:82:0c:89:
         fc:3e:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----