Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File:                     1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier:          EUCFCw83cjHcdH4/D3W7ED0dy3b8YTkvBQf1+BfumOI=
Subject key identifier:   44:2A:2E:41:9E:54:EC:59:4B:EE:D8:C1:AC:8D:5D:C0:72:26:D5:23
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer:       /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial:       01962E99614F95C11BB7F21F1AABE7827871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number:          B6
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: 3RdJDfVnmXmQZ60q4xB+FVI4A1Lh5QtpLwjOtp/GOdY=)
                          2: KMs7aUSS9LqAFlnC_o5ElLedNIc.roa (hash: /x7zWDBe20WK1XP4EQ8MfhJthk5BD7GGqFW7sL/0M74=)
                          3: hqdB3dvV_dcCWDsTMYzzBUkq1iQ.roa (hash: PqNxdXFESdm3E0fpRf9aF9eGcWyACVXLt/A8w8L4KSw=)
                          4: ntHtztrMmkHjlQm-nR0AF_-ZVFE.roa (hash: Bf849e8DMlDt314X2PPaLUOxw5PYejhf50bcsgAnmcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:61:4f:95:c1:1b:b7:f2:1f:1a:ab:e7:82:78:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=442a2e419e54ec594beed8c1ac8d5dc07226d523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:18:50:4b:89:05:cd:9e:4f:9a:4c:3e:b9:
                    51:49:b7:65:e7:b9:d1:78:e5:3e:c8:ad:41:b1:7d:
                    71:d9:5d:98:41:a0:12:d3:b0:92:1b:9b:d4:bc:80:
                    7a:f4:89:c7:21:a0:ea:05:77:83:24:e3:2b:98:19:
                    40:c4:c9:79:71:9f:47:e3:f3:3c:3c:5f:59:b4:d5:
                    7e:23:02:2a:c8:ab:43:2f:3d:36:15:9a:31:0b:01:
                    c2:dc:18:5d:ab:93:82:d1:05:85:e7:49:ca:db:78:
                    fb:b0:b0:6a:3d:d2:17:42:d6:2b:04:12:bf:33:fd:
                    93:f6:24:6a:81:0f:40:9d:cd:19:85:e7:0f:e2:2a:
                    d4:83:9b:b9:7d:58:0a:4d:25:18:5f:0c:c9:17:de:
                    d5:78:16:b0:8c:43:1b:f6:83:b2:4f:63:75:58:e3:
                    a0:77:ec:1d:d2:27:1b:e1:b7:1f:68:e0:0d:f8:3f:
                    81:af:e1:bd:8a:12:9a:34:02:a5:13:68:7f:ae:fe:
                    97:02:02:da:34:ab:2f:5f:57:cb:cf:e9:49:05:6e:
                    ab:00:49:8e:e5:68:bc:fc:64:99:1c:e4:96:bb:40:
                    b3:6c:99:7e:56:c6:36:90:47:61:22:d5:df:aa:d7:
                    4d:a6:da:ff:5b:a1:23:88:72:53:b7:08:6d:62:b9:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2A:2E:41:9E:54:EC:59:4B:EE:D8:C1:AC:8D:5D:C0:72:26:D5:23
            X509v3 Authority Key Identifier:
                keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:73:12:2a:3d:5c:73:07:47:9a:6c:77:68:96:47:49:49:01:
         9f:d3:d4:11:0e:3d:12:9b:b5:ba:45:3a:e7:43:7d:4c:2d:18:
         ac:ed:e7:17:97:f2:f8:09:66:67:24:88:40:6b:fd:0d:9b:be:
         5f:3f:39:ae:35:40:3d:b7:0a:2a:19:f4:0a:a8:37:eb:b6:4f:
         29:5b:69:ec:98:2c:dc:c5:73:90:1a:5d:fa:28:0a:87:50:0f:
         64:9e:f9:72:35:83:96:1c:17:f1:55:76:8e:39:c5:fa:0f:65:
         39:e0:80:72:cf:81:ef:d5:ff:43:f6:97:02:ee:d7:9f:88:2b:
         31:2d:1d:1b:e1:bf:dd:18:5f:7a:c2:29:da:3f:3a:ff:9d:d1:
         97:25:fc:e3:28:06:5a:79:e3:60:1f:02:24:b1:b3:ad:83:68:
         cf:b2:62:95:1b:11:ea:32:0c:e5:89:66:a5:70:20:b0:81:af:
         c8:52:a9:8b:12:c5:47:5e:90:38:94:a4:8e:2a:33:fa:7e:72:
         94:7e:1c:67:fe:99:0b:48:2d:ce:f2:2c:be:75:00:e5:e3:51:
         04:e3:2a:55:b9:14:89:bc:c7:78:93:b2:7d:bb:cc:75:9d:2c:
         98:ea:4c:8d:a3:c0:a6:45:ea:28:ca:1f:14:39:8d:81:f9:57:
         91:8c:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----