Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File:                     Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier:          FuY781/jddjO45vdHD8YY2aB6Qgyj9E2Vu4SdxD6i/I=
Subject key identifier:   EC:6B:7F:87:9D:43:F9:BD:FF:7D:6E:2A:10:EF:22:71:15:81:F4:74
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer:       /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial:       01962F747FE0891B9C20A25922609C1E5072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number:          0509
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
                          2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: 9mwPv3z5lmx6M0fBukG7zgS4rkv/vA2yPhNRBKUznog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7f:e0:89:1b:9c:20:a2:59:22:60:9c:1e:50:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=ec6b7f879d43f9bdff7d6e2a10ef22711581f474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:b2:7c:5f:e8:68:96:f1:b5:32:08:28:4b:
                    18:e4:97:c3:a9:9e:e4:f6:6a:7b:51:54:4b:e6:ba:
                    21:1a:35:3c:b7:88:30:41:2b:ea:b7:a1:4b:e0:d1:
                    4d:0c:75:a7:97:12:e2:09:0f:96:a3:e5:a5:59:66:
                    ca:bf:c3:af:5c:aa:48:47:38:b8:56:ca:a0:ff:15:
                    cc:a4:8a:1f:c1:b3:19:cf:3a:65:b9:8f:1b:d8:d7:
                    c0:4a:ed:a1:ae:f7:d8:c9:7e:ee:ee:15:e1:5e:52:
                    91:ff:05:97:02:d5:e5:0d:5f:39:64:62:5b:b1:64:
                    a1:ea:da:b8:d9:16:be:c6:57:db:17:3e:fc:dc:7c:
                    a7:2f:d1:ff:e5:57:11:1d:42:2d:e9:ec:b9:8a:db:
                    33:aa:79:b6:38:65:f9:79:79:87:a2:f9:cf:4d:39:
                    2a:5a:aa:89:b2:7f:b2:55:c8:26:66:15:da:7c:87:
                    79:f5:a3:28:62:1e:29:9d:6f:30:7d:0b:ac:72:f9:
                    e2:99:95:ad:9c:1a:1d:e4:b4:86:3d:46:e9:a0:6c:
                    e2:20:44:07:33:ef:23:a7:67:2c:06:ad:81:ca:ff:
                    46:12:86:f3:92:11:36:08:91:f8:5b:88:81:1c:99:
                    a4:eb:76:93:91:ba:cf:5e:99:79:20:f8:d7:f9:82:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6B:7F:87:9D:43:F9:BD:FF:7D:6E:2A:10:EF:22:71:15:81:F4:74
            X509v3 Authority Key Identifier:
                keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:33:8c:67:3f:9b:a4:56:d7:b0:0e:84:bc:a2:89:05:24:
         df:0d:71:f5:a5:68:d4:0d:37:1d:d9:09:61:f4:5a:02:93:35:
         a6:9d:01:22:e9:79:e5:77:8c:d6:6d:d3:68:da:8e:1b:90:59:
         14:87:88:17:c7:8a:66:87:42:72:05:c6:8c:05:31:89:85:1d:
         9f:05:55:b0:14:e1:54:da:68:46:7d:9c:ff:a4:84:26:a9:d6:
         b0:d6:e1:45:1c:2f:7e:80:6c:a8:88:5b:f6:80:a1:f8:e5:a5:
         cd:9c:9d:23:ce:2d:2a:5c:09:99:51:f4:1c:eb:0b:b8:24:0c:
         7b:88:c4:9b:7e:2e:d4:22:1c:e8:44:37:4d:82:85:ed:8a:e2:
         e8:96:d0:4a:ee:b6:2c:d0:49:0c:13:b8:82:c0:33:ea:23:4a:
         07:7d:d4:a4:50:a3:0c:ba:fc:98:ec:fa:78:6f:0e:ca:84:cf:
         3d:47:28:7d:bc:65:5b:ed:d3:5a:e8:2c:a2:e9:80:8e:3f:a6:
         ab:80:03:a3:aa:0b:9e:e1:0f:eb:ec:0b:1c:ae:fa:be:89:a9:
         1e:8a:8c:66:7b:c0:17:2a:21:95:f0:20:96:48:a9:bf:35:13:
         d6:70:89:3c:93:60:73:a1:84:db:ac:99:48:80:8d:08:d2:83:
         e5:1e:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----