Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File:                     6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier:          odcXMmeb004awKOZKmpeyBMUWeNg3qHIDouKcJWwcz0=
Subject key identifier:   07:21:EC:6F:AD:5A:D1:B9:71:A2:C8:91:02:9A:12:1F:8F:83:93:6F
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer:       /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial:       01962E990B59BE0661A3511B7C8B0C16BB0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number:          0571
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: SL/RGOOdRen43QVftsoQkNynstk5rifnvuynQgmMqec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0b:59:be:06:61:a3:51:1b:7c:8b:0c:16:bb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=0721ec6fad5ad1b971a2c891029a121f8f83936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:44:4c:27:29:39:73:34:2c:ed:35:88:8c:
                    1d:0e:7f:59:f6:77:9f:86:b6:75:56:be:92:ff:bd:
                    5b:84:dd:31:38:fd:d0:2d:dd:3f:da:c9:69:2c:53:
                    38:50:93:0d:f0:00:45:4c:8f:a7:b6:88:05:15:b1:
                    0c:e4:0f:4a:c8:cd:f2:0f:72:c2:a9:7a:74:b6:02:
                    55:cd:6b:fb:2b:b8:4f:aa:fd:f0:ed:e3:66:6b:07:
                    16:d8:2b:58:68:31:e2:83:18:b4:83:55:49:9a:b6:
                    0e:7d:d4:5e:84:77:ec:87:84:dd:08:92:f0:70:a8:
                    97:e0:64:1a:71:8e:f2:95:81:d8:6c:ff:2f:7e:30:
                    84:69:40:69:68:d0:a7:60:3a:55:c4:8f:7f:aa:2e:
                    28:f4:e5:cd:e2:e8:d8:9f:28:16:c5:25:26:c5:11:
                    50:f0:d3:ff:27:24:d9:56:69:c6:ff:8c:a5:72:f0:
                    2b:d1:f8:cc:51:90:1e:f3:31:bf:e7:b5:b9:fd:0a:
                    07:56:ea:f7:2f:dd:5d:3a:be:44:09:f6:ba:04:a8:
                    bc:08:3f:78:a9:67:b5:0f:0f:7b:10:ad:4b:18:13:
                    7e:cd:ac:db:9e:0f:04:d3:44:8c:17:b7:48:23:e3:
                    fd:3f:fc:20:b7:ce:39:92:96:9c:3a:68:61:40:ae:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:21:EC:6F:AD:5A:D1:B9:71:A2:C8:91:02:9A:12:1F:8F:83:93:6F
            X509v3 Authority Key Identifier:
                keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:0f:a2:d6:7b:61:78:44:7a:59:76:24:67:b2:8f:79:49:
         26:ee:68:64:cd:30:e3:ba:f9:8e:43:90:a2:5b:b1:f7:6b:6d:
         c7:7f:b1:24:ca:2b:27:f0:9f:4a:c9:23:a1:4f:d5:d9:84:ca:
         57:8b:19:d7:71:c8:e6:e4:9f:26:6d:dc:5b:9e:41:99:2e:9f:
         ac:e4:b6:0c:d2:69:c5:5f:50:9a:f2:79:e6:51:5a:2e:e3:d6:
         a0:23:25:4b:3f:f1:76:19:bb:1f:11:ba:45:88:ea:74:5a:8b:
         a4:ba:1f:7b:4f:43:b4:4a:b8:5a:cc:ed:ed:3f:43:b1:ae:23:
         02:c2:20:a8:b3:8a:bf:ee:fc:d2:38:61:ec:e1:e2:95:a9:1e:
         6f:2a:3c:92:10:ba:a2:a3:cb:cc:8a:b2:8f:18:b2:69:44:88:
         47:f6:5a:ae:41:76:72:eb:0f:e6:55:7f:72:ce:cd:f7:93:6b:
         87:33:d7:e0:ec:29:57:fe:d1:96:db:80:86:37:e7:a0:11:c3:
         ca:9f:ad:2d:73:23:01:68:b9:e5:14:ac:10:e2:c4:f7:61:be:
         10:57:f2:57:d2:63:16:28:57:b3:cc:70:13:b5:74:2a:7b:b7:
         75:69:49:4b:e4:dd:99:c2:89:4b:d5:de:01:ee:cd:92:94:28:
         d9:04:5b:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQtZvgZho1EbfIsMFrsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMTcwZmM3NmNiODVmYTQ3NjA2ZDZjNTc0N2M5ZDRhMzg1
OTJiNjEwHhcNMjUwNDEzMTAwMTQzWhcNMjUwNDE0MTAwMTQzWjAzMTEwLwYDVQQD
EygwNzIxZWM2ZmFkNWFkMWI5NzFhMmM4OTEwMjlhMTIxZjhmODM5MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE1ETCcpOXM0LO01iIwdDn9Z9nef
hrZ1Vr6S/71bhN0xOP3QLd0/2slpLFM4UJMN8ABFTI+ntogFFbEM5A9KyM3yD3LC
qXp0tgJVzWv7K7hPqv3w7eNmawcW2CtYaDHigxi0g1VJmrYOfdRehHfsh4TdCJLw
cKiX4GQacY7ylYHYbP8vfjCEaUBpaNCnYDpVxI9/qi4o9OXN4ujYnygWxSUmxRFQ
8NP/JyTZVmnG/4ylcvAr0fjMUZAe8zG/57W5/QoHVur3L91dOr5ECfa6BKi8CD94
qWe1Dw97EK1LGBN+zazbng8E00SMF7dII+P9P/wgt845kpacOmhhQK66cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAch7G+tWtG5caLIkQKaEh+Pg5NvMB8GA1UdIwQY
MBaAFOoXD8dsuF+kdgbWxXR8nUo4WSthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUt
ZTgyODgxYjVlMmQ5LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUtZTgyODgxYjVlMmQ5
LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrgPotZ7
YXhEell2JGeyj3lJJu5oZM0w47r5jkOQolux92ttx3+xJMorJ/CfSskjoU/V2YTK
V4sZ13HI5uSfJm3cW55BmS6frOS2DNJpxV9QmvJ55lFaLuPWoCMlSz/xdhm7HxG6
RYjqdFqLpLofe09DtEq4Wszt7T9Dsa4jAsIgqLOKv+780jhh7OHilakebyo8khC6
oqPLzIqyjxiyaUSIR/ZarkF2cusP5lV/cs7N95NrhzPX4OwpV/7RltuAhjfnoBHD
yp+tLXMjAWi55RSsEOLE92G+EFfyV9JjFihXs8xwE7V0Knu3dWlJS+TdmcKJS9Xe
Ae7NkpQo2QRbHQ==
-----END CERTIFICATE-----