Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
File:                     a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json)
Hash identifier:          WRYLiRrx44XTHI6OeLN9YcG6FSQbzpQ2l3ya37lfFWY=
Subject key identifier:   01:BB:B7:07:F9:E5:58:7A:C7:48:BF:B4:CD:80:B2:38:76:FD:8C:83
Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
Certificate issuer:       /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Certificate serial:       01962ECFAD5841BDCA6B4283F35A6E5F0225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=)
                          2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: Gt5XjrJSUlL49kaHM78IkkEv+kMJUf1Yu2BBxRKvZAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ad:58:41:bd:ca:6b:42:83:f3:5a:6e:5f:02:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=01bbb707f9e5587ac748bfb4cd80b23876fd8c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:1f:4f:00:14:37:57:dc:4c:2b:cf:fd:f6:
                    19:58:1a:3d:46:f5:30:3c:2f:45:0a:fa:37:7b:39:
                    89:7c:92:56:a1:26:02:26:e6:9f:34:f2:33:87:ed:
                    86:da:0f:21:2b:13:2e:5a:fb:7e:18:4d:14:59:a5:
                    ff:6a:4a:06:9b:76:44:e6:e9:8d:29:68:0a:5d:3d:
                    d8:cc:be:6a:5a:d9:dd:55:09:5a:f1:66:0d:d3:85:
                    64:64:cc:67:fe:58:ca:d1:53:89:fa:00:55:d9:bc:
                    89:bb:0d:00:5a:14:fd:8a:ed:08:af:06:83:42:68:
                    57:24:24:6b:0f:b1:cd:0d:4c:af:95:59:55:47:0d:
                    99:02:a9:3a:be:8e:b5:e3:95:cd:48:39:0d:b4:bd:
                    ab:75:87:93:66:c1:0d:74:39:72:aa:06:63:10:a0:
                    df:e1:78:66:cd:f0:c9:18:41:16:0b:09:6f:77:1f:
                    12:28:bf:4c:45:b0:80:c1:a2:37:77:0b:80:cb:8f:
                    58:e1:aa:83:38:6f:ef:50:84:31:6e:ba:c8:63:bc:
                    be:bf:93:4a:6f:b0:32:aa:6a:68:97:51:89:98:1d:
                    53:ef:3e:4f:a2:57:e3:ea:e9:8f:5b:1c:78:a5:e8:
                    77:99:7f:46:d9:07:84:18:ec:62:1f:b2:7f:4a:e5:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:B7:07:F9:E5:58:7A:C7:48:BF:B4:CD:80:B2:38:76:FD:8C:83
            X509v3 Authority Key Identifier:
                keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:aa:e2:b2:94:cc:61:ce:3b:aa:6f:45:b4:a1:da:2b:23:22:
         af:83:70:f5:2f:38:68:a6:30:fd:fe:86:ec:02:45:82:87:b0:
         d6:4e:fa:01:e4:2f:d8:9a:9f:81:c1:cd:8f:89:c2:e6:80:d4:
         42:dc:e6:d5:ce:f6:f2:a6:b4:c1:b6:4a:7b:48:2c:ff:b0:c1:
         5d:48:a7:fb:a8:4d:bd:a1:54:ea:de:ca:c9:96:0e:b7:44:47:
         54:1f:10:31:4f:46:4a:fc:6e:6c:a1:cd:23:94:33:87:26:8e:
         7a:6f:53:92:36:bb:8a:93:57:24:4e:bd:76:5a:bf:0e:d4:9f:
         09:5f:02:d0:16:9d:e1:cb:16:7e:0d:5c:36:fa:38:99:d2:88:
         41:fb:16:73:70:3d:16:b7:72:c9:2d:a9:38:7b:19:01:1c:cc:
         14:ea:66:b0:ec:a9:90:cb:8a:ed:5a:5f:2e:ec:1f:4c:4a:28:
         4a:cb:be:18:fa:1d:48:6c:69:9f:19:1d:dc:ad:9f:13:52:61:
         6f:e0:c9:a5:4d:d6:22:e2:b4:05:96:16:cf:60:ed:ff:3b:1b:
         e3:e1:26:7d:94:c6:0a:41:4d:c3:b2:7a:c0:7b:50:3f:9a:6b:
         cb:c9:8a:16:55:35:42:46:c6:ba:7a:af:d5:66:96:12:a2:3a:
         12:60:91:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----