Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
File:                     bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json)
Hash identifier:          uO+Vf4tmWneSOWyhaGU827JCoM3T10OLw/fUiXtlOOE=
Subject key identifier:   3D:85:23:9E:B4:87:84:AC:CB:18:01:FF:3C:D4:CC:59:5F:24:9D:93
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       01962E98DD030ABDB52BB178AA4AE3D4E9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
Manifest number:          11A6
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=)
                          2: 8AIOf5iiWGq0P893PCbTNf2BkGU.roa (hash: HBMubVYts6z6OX4Jo+t8Ek09rhVu9H6F5CshJadR9AA=)
                          3: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=)
                          4: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=)
                          5: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=)
                          6: VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa (hash: l7M61/tXdMzCop4fGPoOrVeYzOpgSiZ8UEnps3mMyhQ=)
                          7: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=)
                          8: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: llfUnhAjtUFRqXplYPW9s05PAI2FE4eCGOyT1toX/fA=)
                          9: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=)
                          10: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=)
                          11: lytgc_AFskoSPGUZi6kP67WVCLU.roa (hash: dnsTqSN8v/NE3YKVgJGW35iPeddPANKJv7U+UECznkc=)
                          12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:03:0a:bd:b5:2b:b1:78:aa:4a:e3:d4:e9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=3d85239eb48784accb1801ff3cd4cc595f249d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:cb:37:86:8a:54:78:a7:a7:dc:7b:ef:45:
                    da:f8:76:f1:de:e7:7c:cf:6d:c7:e8:90:2c:a5:f6:
                    68:37:1a:ab:c3:15:6d:73:3e:54:f4:5b:77:09:8b:
                    29:be:26:08:95:bd:6a:9e:0b:38:04:cb:3c:d5:a9:
                    25:70:cf:a1:c3:be:a8:3d:08:21:81:fa:2f:37:d0:
                    c8:29:1a:03:64:5c:3c:73:e6:bc:b3:85:ca:be:9f:
                    92:ec:56:fa:73:9a:ca:95:bd:29:64:dd:b4:45:40:
                    55:6b:53:65:5b:72:88:23:73:f8:94:94:b9:97:4b:
                    bf:88:9c:12:94:41:8d:37:69:11:5b:34:42:b8:22:
                    89:89:cd:5f:e1:b1:4c:32:e1:a2:dd:52:5a:e6:01:
                    14:12:20:10:e5:9b:65:cb:6a:35:ff:71:32:98:44:
                    0f:7a:bc:69:dc:ce:b2:4b:ca:e3:d1:c1:a4:0e:e1:
                    c8:1e:44:c8:df:70:a9:d0:12:d1:85:09:f4:96:66:
                    a4:84:0f:32:19:ee:55:8d:31:de:0d:87:e1:26:38:
                    6e:d9:d8:b2:af:67:df:4a:eb:bd:e4:84:d6:1a:dd:
                    59:2d:0e:08:cb:85:06:30:15:6a:ca:07:a4:13:8a:
                    62:e2:a0:e7:5e:9a:bb:8c:de:bf:4c:fa:38:d0:c7:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:85:23:9E:B4:87:84:AC:CB:18:01:FF:3C:D4:CC:59:5F:24:9D:93
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:11:58:54:2e:93:ce:8b:fd:2b:29:1a:01:07:65:0b:1b:f9:
         70:84:71:94:10:1f:83:8d:74:22:e3:a5:95:f7:97:7d:f9:47:
         8c:72:94:cf:22:d8:88:3d:ab:d0:23:73:9c:42:66:d6:15:3b:
         6e:e7:e4:12:89:14:23:94:d0:76:44:e4:42:33:c8:ac:dc:cd:
         dc:a1:d0:17:d0:0e:d7:8a:dc:08:8d:64:d5:6f:53:18:80:64:
         d5:06:4d:41:56:c5:f9:f3:7c:3a:a8:26:65:21:5c:60:3f:05:
         13:3a:c8:0f:3d:d3:ab:3c:9b:7b:fd:b7:27:5e:6c:53:8f:1f:
         b7:a6:34:eb:35:ea:a1:9d:19:a0:e9:27:ad:3f:84:9d:1a:7a:
         cb:6b:e5:e5:eb:50:ea:98:cf:70:f0:ed:fa:a2:f6:97:53:63:
         25:bf:96:bf:17:8b:3e:a2:5f:0a:9e:79:f7:36:f1:8f:29:04:
         a7:51:33:06:a2:aa:5a:04:7f:cd:93:17:fb:e7:26:d4:98:98:
         1e:30:4c:ce:cb:c4:43:2b:fa:2f:79:00:94:67:8f:77:43:34:
         ad:60:8a:35:bb:3d:f4:86:59:ba:72:52:45:d2:80:34:68:d8:
         00:1b:4d:c0:44:ea:c5:d4:e5:f1:ef:b6:ed:b4:c3:6f:71:14:
         31:6e:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----