Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          GoX9O5EufPrpRdXzVO6FV3B3eF74Q8W/h/S0EB40JWE=
Subject key identifier:   AE:FE:62:1D:EC:91:46:0B:6F:68:56:09:D5:D1:C8:B1:13:B1:F5:FD
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       01962F0723C330507469EB79B5C8829F6E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          4: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          5: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          6: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: 6LejMqpCQUKKZ9qK3LnL2CsrCSUUNwMun/lrvuFsIoY=)
                          7: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:23:c3:30:50:74:69:eb:79:b5:c8:82:9f:6e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=aefe621dec91460b6f685609d5d1c8b113b1f5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:9a:d0:06:2e:42:47:41:91:03:9d:2d:28:
                    41:e3:ab:c9:15:9e:ba:ab:12:0b:7a:bc:ce:03:08:
                    65:35:c6:55:69:8f:cd:71:6a:87:ce:39:21:c2:59:
                    be:c7:d5:bd:3f:bd:eb:02:eb:d9:0d:c4:02:63:88:
                    2d:ba:4b:db:86:6b:ec:26:55:f5:69:7b:69:26:58:
                    ce:7e:b2:3e:22:b4:80:18:42:c1:eb:5b:70:a7:83:
                    0e:23:3a:77:d4:cb:a7:7c:8a:06:66:cf:00:74:21:
                    76:ad:98:be:de:ad:9f:7e:a3:35:cd:4e:44:bd:40:
                    ab:50:44:8c:58:73:23:1c:be:50:db:9f:ee:83:7b:
                    d5:23:f2:bf:13:10:0a:ad:dc:b9:40:d2:26:ca:22:
                    bf:01:f0:75:a7:04:c7:30:e9:c8:97:ad:db:21:bf:
                    6d:41:b2:1b:a7:0f:8c:02:3c:25:b9:68:6d:97:e4:
                    90:85:de:7f:ba:87:89:05:6e:5a:05:e5:69:6e:6a:
                    94:64:aa:fd:11:cc:f7:be:a9:7a:61:d3:64:0a:84:
                    5c:f5:18:f7:3d:ac:7b:2c:64:8c:f7:57:0b:6a:ab:
                    9b:27:38:8e:c6:2e:ea:f8:18:d2:fe:83:e7:87:ea:
                    f5:91:f0:76:0e:29:f3:a1:e9:55:d4:79:36:73:cd:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FE:62:1D:EC:91:46:0B:6F:68:56:09:D5:D1:C8:B1:13:B1:F5:FD
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:b7:a3:4a:92:78:43:14:cb:7a:78:6c:3b:b6:f0:e1:ae:
         b1:29:9e:03:c4:f9:29:66:0e:47:42:d9:92:dc:35:5d:0f:47:
         99:e9:91:94:3d:4c:89:21:5c:0b:85:f2:3b:eb:d6:a3:ad:cd:
         e5:67:9c:06:c8:2e:1d:4c:9b:d8:07:b2:58:1b:8a:e6:98:61:
         b4:3f:2b:28:6b:ed:e4:ea:e3:b9:23:9d:d2:99:87:f5:9d:f4:
         72:63:b1:3c:9a:6d:c6:61:b1:2f:06:e7:a3:dc:c3:13:46:bc:
         5c:f6:1d:e5:72:e9:00:c2:a1:e5:04:d0:8c:70:78:10:e1:bb:
         f9:10:e5:3f:1f:62:c9:ed:01:d5:67:45:86:f7:a9:6e:80:5e:
         80:f5:43:5b:28:40:ec:bf:9b:fb:bc:f7:16:8b:d9:ed:74:37:
         42:f3:a8:73:0a:4e:17:d2:33:57:6e:6b:70:36:c5:71:79:8a:
         8f:4d:3a:ec:95:fd:eb:32:1e:ab:c6:55:1f:23:34:c9:e0:de:
         9b:3a:58:6e:5a:1b:c3:7a:cc:19:fc:46:18:f7:e8:87:41:2e:
         a0:7e:0a:64:57:9f:31:82:da:a7:d3:cd:91:d0:63:4b:82:b7:
         ab:36:7b:74:24:a1:07:44:c7:6f:08:6c:2b:cf:32:7d:92:4b:
         88:3b:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----