Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          xBjLcg05pFC4ed8wILTeHvth3rHd1DUdU4ZjwM3gQYM=
Subject key identifier:   B4:25:D0:46:AB:4F:6F:B0:D6:C1:09:24:A7:E2:EA:B9:56:F2:CA:18
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       01962E99511E95855893A323FBAD18518650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          10FF
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: hSzD5pwKpWf8YwDopHX4ibzdnR6lL6PvnfxFWm9vzcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:51:1e:95:85:58:93:a3:23:fb:ad:18:51:86:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=b425d046ab4f6fb0d6c10924a7e2eab956f2ca18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:82:18:e6:b5:36:f3:78:ea:e8:99:36:90:
                    2c:a5:34:22:bc:86:f4:9d:7c:64:ff:a8:cb:7e:8d:
                    31:9f:d6:2c:1a:a5:56:ed:35:f6:bf:d6:9b:fb:9c:
                    cb:62:1c:90:af:20:02:90:ec:a8:e1:af:af:91:24:
                    90:7b:94:4a:07:75:13:06:54:6a:27:1e:53:f2:11:
                    54:3e:06:69:8a:ed:9d:5a:ac:c9:6a:c7:da:e3:21:
                    44:68:e8:62:99:99:4f:23:f2:d7:fb:a8:34:4a:7b:
                    15:1a:84:d8:a1:d2:9f:ac:ac:8b:73:35:cd:16:59:
                    ab:a5:00:29:a1:f8:f9:ce:15:6a:35:3d:fc:5a:11:
                    3a:02:fd:8e:87:5c:fb:ce:b7:48:21:d2:f4:a5:35:
                    4c:87:65:08:91:69:a4:77:f1:bb:9e:3c:f1:82:45:
                    21:36:a4:e8:e4:3f:f7:e9:3a:78:0a:5c:f8:f8:53:
                    9e:8f:f0:cd:71:0b:8c:36:03:79:8e:68:4a:03:28:
                    fa:e8:c3:e1:84:7b:23:74:53:9d:a1:a0:1d:2d:fd:
                    fd:10:cc:55:9c:c9:ee:f6:93:21:26:84:83:dd:1c:
                    14:8d:06:71:ba:e1:7a:c3:9d:ec:8d:60:2d:8f:3a:
                    b0:1f:f0:5b:1d:e8:b1:76:e3:c4:15:61:76:a7:45:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:D0:46:AB:4F:6F:B0:D6:C1:09:24:A7:E2:EA:B9:56:F2:CA:18
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:a0:12:38:10:be:2d:2f:bf:6b:f9:8e:da:21:8a:74:a5:
         39:90:7b:df:e2:9d:60:5d:ef:fd:ad:a7:d3:d0:0d:ba:34:8e:
         47:f1:3c:22:e8:53:1d:dc:aa:28:db:f1:7d:54:6d:ba:23:7e:
         74:7a:ba:ba:e8:b7:a3:c1:33:12:5c:f0:7b:61:2c:df:54:f1:
         e1:71:b1:ae:2a:1d:ba:f8:43:dc:dc:e5:68:32:5f:0e:7c:83:
         8c:92:18:68:b5:6a:88:f7:46:31:e2:d4:9d:74:88:38:60:49:
         6d:2a:d7:e9:b9:ad:4b:01:67:6e:ee:1f:75:bb:c1:b6:4f:9d:
         ab:04:82:eb:81:20:03:b3:8c:5f:3a:55:3a:8c:79:8c:f6:87:
         e8:e7:75:55:e1:bb:ee:c6:55:fa:34:20:32:7a:09:23:cc:e5:
         6c:d6:8f:91:ae:5f:8d:f0:89:44:89:c1:ef:92:fd:9f:3c:08:
         27:0e:a5:37:67:6e:e1:92:5f:e4:7f:b2:da:39:b1:01:32:2d:
         3b:69:0b:28:ab:b2:25:2b:5f:50:b8:99:b2:d6:32:12:14:67:
         88:95:ba:fc:41:93:82:13:40:69:d9:37:2c:8b:87:41:c1:8e:
         e2:f1:22:6f:d5:3c:cd:cf:fb:28:99:33:5d:05:46:34:44:9f:
         89:91:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----