Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          DFVcGQ6T7V04Hg16zu7WA2rxF7d6GUwgN8j6N9x5TII=
Subject key identifier:   59:45:55:64:0E:CF:CC:65:4E:37:61:24:AC:23:3F:49:91:D4:74:E0
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       0195E0EAF82BE1E8642DAB4BBE9F8307B2DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 08:00:50 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:50 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:50 +0000
Files and hashes:         1: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: CKe1wi+Xb8kGQB+flhN+qh+O9429i7IEJR9mwZaivK8=)
                          2: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=)
                          3: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=)
                          4: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=)
                          5: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=)
                          6: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=)
                          7: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=)
                          8: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:ea:f8:2b:e1:e8:64:2d:ab:4b:be:9f:83:07:b2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Mar 29 08:00:50 2025 GMT
            Not After : Mar 30 08:00:50 2025 GMT
        Subject: CN=594555640ecfcc654e376124ac233f4991d474e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:dc:4f:20:e1:4c:40:dc:a8:b2:45:98:52:
                    6b:db:97:d8:62:b7:f7:f5:ea:1e:b5:c5:89:24:74:
                    8c:22:8f:bb:1d:f2:7d:84:3c:37:4c:11:01:d3:ee:
                    d8:f3:c7:08:aa:2e:94:6d:16:3c:19:a9:83:f1:b9:
                    a9:9a:15:17:d6:1d:46:21:19:94:ee:42:75:55:67:
                    6b:23:6c:7d:ad:b5:ea:14:f6:ae:1c:55:a0:b0:05:
                    68:45:f2:9b:73:4d:ce:19:ae:9d:d6:f8:71:0c:82:
                    bc:10:dc:58:ec:e0:63:94:e2:36:5b:7c:e8:57:d6:
                    be:ca:8c:e5:3a:36:4b:0c:e5:89:f7:24:d7:49:af:
                    09:b4:56:dc:fb:1c:4a:62:45:29:80:0d:f0:43:d1:
                    2a:93:67:0c:7b:93:59:f3:d1:63:77:51:07:06:aa:
                    45:cf:29:22:c0:ee:58:52:62:0b:88:3d:e5:ce:a8:
                    bb:13:82:66:0d:2b:49:93:50:0a:1a:d9:4e:80:5e:
                    f9:e5:8f:ff:7c:1f:2e:84:a9:53:d5:32:d5:ae:1e:
                    02:31:0c:4d:01:c6:56:31:7b:f3:a3:a2:59:ef:c2:
                    18:6d:b2:7a:11:d4:84:a3:1f:0f:88:42:d1:dd:d6:
                    0d:ce:a2:de:51:35:35:4c:22:c6:86:0b:a9:7f:0f:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:45:55:64:0E:CF:CC:65:4E:37:61:24:AC:23:3F:49:91:D4:74:E0
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2b:fc:6f:5c:49:35:3c:8d:c0:02:98:54:95:67:eb:84:cb:
         32:88:0f:6e:45:35:2a:43:11:96:53:e9:d7:fd:19:90:04:74:
         e8:84:cd:94:ca:25:70:c8:d3:70:9e:a0:4c:ed:26:08:f8:42:
         70:85:b7:ac:99:fe:8f:eb:4b:85:6a:62:95:1e:ee:7e:0c:27:
         fd:ce:dd:ac:2a:ee:bc:0d:84:4e:b4:06:50:2e:05:a0:32:1a:
         72:df:e5:1e:be:5c:36:f0:f2:40:ac:e1:d1:53:70:e5:ba:89:
         e6:f9:c4:4e:5f:37:08:99:ac:b4:11:05:b6:a9:82:8a:52:c7:
         5c:d1:bd:f7:19:54:48:cb:65:12:56:06:db:bd:98:7a:77:71:
         00:67:6a:d7:3b:47:81:ad:7c:95:b7:cb:08:69:99:ef:00:a2:
         a6:90:78:78:da:fc:47:de:d1:78:55:8d:ab:8e:71:cc:24:b5:
         34:cc:9f:87:0f:16:a4:ed:89:16:3f:c3:23:28:8d:c7:11:48:
         06:5e:bd:88:33:47:d6:4a:8c:cd:ca:bc:54:56:a6:6d:9f:04:
         45:f2:05:40:77:62:38:99:16:86:48:05:82:f6:63:5c:20:08:
         5e:70:b2:f9:84:16:04:79:07:47:f7:12:5c:da:7e:c7:98:5a:
         ca:2c:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----