Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File:                     a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier:          YUJdKosk+9mgljwfYG2etCMWEeICx4yV7nZycs2uHEc=
Subject key identifier:   A9:1B:9F:8F:80:51:F1:59:1E:77:B5:C5:01:DC:CF:7F:15:39:F2:F6
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer:       /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial:       01962FAB625F52AAF591ED687AA1432214C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number:          0511
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: N+jzCX2UwZq49Y9FwsMc+5xdNPL2C5dgD7czShhSZeI=)
                          2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
                          3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:5f:52:aa:f5:91:ed:68:7a:a1:43:22:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=a91b9f8f8051f1591e77b5c501dccf7f1539f2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:48:d5:cb:e4:86:09:58:51:07:77:bf:d0:
                    5a:07:7f:a3:e1:3c:98:91:3f:41:12:71:68:69:a2:
                    dd:78:ed:0f:24:9e:88:fd:fa:b2:69:fc:9c:76:60:
                    39:52:f7:fb:0b:22:64:9f:f4:72:8b:18:5d:b4:75:
                    76:21:d8:ff:15:db:37:12:12:84:75:0b:97:41:29:
                    9d:f4:6c:cf:1c:1f:33:b7:b9:6d:b2:23:ec:31:90:
                    c0:01:45:b2:6f:e9:e9:d9:3f:3a:29:a5:c1:4e:51:
                    f1:2b:16:21:c6:54:31:25:c7:a3:f0:d5:18:91:08:
                    94:3f:fb:07:43:5c:95:73:5b:6c:3c:13:73:a6:aa:
                    73:4b:b4:75:83:ac:b1:4d:8b:74:5c:f8:e9:aa:55:
                    ae:cf:27:27:df:b5:2a:cd:81:03:05:a3:4d:08:fa:
                    98:a6:3a:c6:f7:64:8f:a5:d2:19:f1:a2:76:74:fe:
                    cc:ee:c1:27:f0:70:fe:09:a3:2e:a0:76:78:da:ad:
                    5b:bb:15:14:7e:a1:a8:f3:a8:2b:41:c8:ba:f4:b0:
                    e3:1e:c5:e8:41:ba:78:ab:7d:92:95:16:b8:3e:63:
                    7e:bf:f3:7b:73:02:8f:52:af:c4:28:45:b9:37:b5:
                    1a:29:9f:c3:a7:26:13:6a:76:e5:fc:7b:55:f6:14:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:9F:8F:80:51:F1:59:1E:77:B5:C5:01:DC:CF:7F:15:39:F2:F6
            X509v3 Authority Key Identifier:
                keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:36:d0:3e:2d:c6:4d:4a:d4:c7:ed:0f:0c:e2:22:79:cc:
         d1:fa:cf:4f:35:34:31:5c:65:69:f3:ab:1b:10:4c:76:72:d9:
         53:d7:5b:45:af:4b:b4:f8:65:26:1d:4d:3e:0a:55:45:b3:83:
         6c:89:67:4c:77:a4:e2:83:98:d7:39:ad:31:cd:1e:5b:25:a3:
         62:4b:0e:82:4d:38:c7:30:b1:bc:6b:12:15:ac:57:04:c0:95:
         28:5d:64:bb:9d:44:e2:73:cf:f7:e0:d4:52:bb:0b:41:35:36:
         dd:6d:44:02:01:7e:8a:2e:98:52:16:cc:d9:40:e1:d4:9b:5e:
         b7:63:25:80:7a:5d:a8:b2:0b:50:6f:fd:89:96:fe:fa:d2:8a:
         bc:8b:7b:f6:d5:6f:6f:2e:31:3c:f1:c9:25:bd:45:13:9a:33:
         b1:e4:51:73:b5:5b:ce:81:ae:ea:b7:e6:63:a1:76:cb:33:39:
         23:00:33:96:3d:7e:d5:9c:a5:8f:de:b5:77:b9:66:c0:6b:e5:
         6f:79:b7:d2:6d:a2:03:f8:37:bf:47:03:24:49:86:6c:74:b0:
         b7:c9:02:48:42:9e:ba:51:bf:4e:a4:d3:67:da:ad:dd:37:b4:
         44:31:8d:3f:4f:ee:7e:97:b2:9e:e3:23:53:09:8d:37:9c:cd:
         33:02:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----