Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          FDXJTSktFzqsWBS6iqRZBbuSmg15+OJMEUR2QKLDI7o=
Subject key identifier:   4B:31:D4:EF:9F:74:90:FD:BB:96:08:20:3D:48:6A:D8:51:A4:E4:86
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       01962ECFC11FA2DE29C3F912ACABE57D4489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          12CE
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
                          2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: +8Laur3UbU9EiIzBFynfZBWHJNG87/QMfyINy5Kiq/E=)
                          3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
                          4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
                          5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
                          6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
                          7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
                          8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c1:1f:a2:de:29:c3:f9:12:ac:ab:e5:7d:44:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=4b31d4ef9f7490fdbb9608203d486ad851a4e486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:d6:83:64:c4:cc:d6:89:c4:88:33:2a:fa:
                    43:9b:c5:50:2d:b9:1b:68:2e:a1:5f:e0:95:fd:92:
                    39:af:96:d8:48:10:25:b7:b1:1a:8e:9e:d2:c9:c3:
                    7a:ee:39:ce:54:4b:1f:e9:35:00:fd:1d:d6:3e:8a:
                    5c:4e:29:52:46:ac:fc:e4:d3:d6:d3:c1:ab:5d:f7:
                    b1:1a:fe:d6:c6:b0:29:76:48:ce:9f:c8:e8:61:01:
                    1d:d2:05:9f:cb:a3:99:33:b4:d5:7f:30:09:2d:e3:
                    29:2b:c5:82:6e:85:4c:34:9d:9f:2d:b7:66:59:de:
                    92:cb:95:80:11:92:3f:aa:27:1e:4b:89:40:ce:01:
                    6b:f8:f1:19:2b:01:91:58:7a:c4:fd:25:7b:43:a5:
                    ae:d6:35:84:8c:a0:2b:80:34:15:19:41:d1:9d:71:
                    73:54:79:aa:55:be:55:c6:f2:d6:cf:3a:b5:df:fd:
                    27:2a:85:78:56:17:88:a3:ef:94:4c:04:d8:4d:6c:
                    ca:9b:82:b0:92:72:6d:82:9d:ef:0a:d0:fa:f5:23:
                    c1:9e:d2:5a:5b:72:0b:b1:8a:21:b6:84:fd:f4:83:
                    10:8b:bc:c0:4f:45:98:52:24:00:18:02:e2:e2:3b:
                    1c:7f:c5:6a:f2:0f:b9:9f:78:85:a8:78:ae:c8:25:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:31:D4:EF:9F:74:90:FD:BB:96:08:20:3D:48:6A:D8:51:A4:E4:86
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:79:52:fe:12:55:26:10:6c:1d:67:60:e5:d6:d3:e2:5f:df:
         4e:b0:4d:50:13:8a:79:d2:2e:f0:0e:90:e2:c9:77:b8:b1:98:
         f4:4c:1a:b2:de:e1:b4:76:47:36:81:78:74:23:b4:7c:ca:20:
         21:e4:6b:07:46:b6:db:e9:02:9e:c1:bb:e3:fe:bf:22:46:04:
         62:68:1b:ac:5b:f5:b6:9c:da:48:18:b6:59:bf:f0:2b:82:c5:
         88:21:63:5d:a2:e6:03:8d:4d:58:4a:98:d3:b2:a3:70:ab:9e:
         f9:68:f7:c9:8f:ba:b1:04:89:2d:d5:48:23:d4:a2:b1:15:c2:
         67:0e:7d:14:5b:13:12:36:54:2d:82:80:64:25:07:ba:9c:81:
         33:06:a6:2f:7d:f6:06:4e:91:d9:03:16:c7:ec:6a:a1:7d:88:
         fb:66:91:36:72:9d:de:14:72:18:fc:b4:f3:14:f4:44:b0:02:
         df:0f:97:da:ca:52:40:14:7c:d6:c7:92:65:63:c0:45:24:8a:
         82:46:6b:3c:7f:e2:f5:47:1a:21:68:d5:ef:b1:51:e9:3a:62:
         02:e0:0b:f5:a0:43:8c:8f:90:13:ad:50:b4:00:f3:ff:ec:52:
         74:3d:8a:c4:de:b0:36:35:06:00:bc:17:b7:f0:ce:7a:f1:4a:
         01:ca:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----