Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File:                     6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier:          OCYu7IzDyH0ltcht6oKhNhzCwbJ2sLRxRIvgC48aMM8=
Subject key identifier:   8B:57:F3:58:4D:6E:73:D5:BE:26:8C:03:FD:8B:95:D0:47:F0:9D:B6
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer:       /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial:       01962F3D5C7CEC77CA72A327271661DC6DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
                          2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: LnIvUKXoFsCUghewcnBejIwP+EuC37wAxnnazYNkrQM=)
                          3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:7c:ec:77:ca:72:a3:27:27:16:61:dc:6d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=8b57f3584d6e73d5be268c03fd8b95d047f09db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:4e:a6:f4:86:94:3e:be:90:49:33:99:9d:
                    d2:4a:b9:9f:5f:2d:e0:6a:d5:f4:af:d1:0d:1b:db:
                    44:94:83:b9:f4:23:fb:fb:03:22:e6:9c:3f:4e:a8:
                    ad:ca:d7:33:2a:e7:52:a3:98:28:75:5a:2e:4d:95:
                    cb:51:0c:b2:26:c9:ac:93:50:bc:d0:ee:68:53:30:
                    5c:f3:0c:43:20:56:62:7d:83:0a:92:ec:e3:44:31:
                    1d:e9:3c:9a:b2:a4:77:e7:05:9d:0b:97:81:9c:af:
                    ae:96:ba:1c:ae:a0:fe:8a:f7:77:c9:5e:8a:82:c7:
                    be:5a:9e:8d:17:42:b2:26:4a:c0:6a:16:1a:22:6d:
                    32:15:52:ac:db:01:ad:d0:33:c4:8d:06:3d:62:24:
                    dd:2e:98:d3:09:84:d4:fa:fd:72:64:57:58:7a:9e:
                    c7:39:66:4d:e2:f4:b9:4a:bb:fe:45:8f:66:97:65:
                    2b:f5:db:ee:d9:cb:02:e9:81:0c:89:15:92:d2:48:
                    46:32:3a:76:6e:45:a8:43:65:00:32:a3:60:24:6a:
                    5f:10:8e:bc:d6:e3:7a:47:17:65:cb:55:3d:5c:ff:
                    2b:e3:c0:a1:83:37:66:28:49:a7:2a:50:ac:aa:65:
                    c1:1b:74:42:9b:25:27:f2:10:f3:f2:71:c6:3e:38:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:57:F3:58:4D:6E:73:D5:BE:26:8C:03:FD:8B:95:D0:47:F0:9D:B6
            X509v3 Authority Key Identifier:
                keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:cb:2c:cc:b2:1f:ec:05:d2:b5:f3:a5:30:75:35:8a:75:
         0d:c1:e9:18:1d:64:cd:2e:a3:c9:7f:17:ad:45:5a:0f:ed:2d:
         a1:c9:09:88:e7:5e:5a:44:aa:ee:c9:7a:26:1e:9b:e0:e2:64:
         5a:0b:f6:82:0e:86:32:ec:cb:e0:e4:52:00:4f:0a:e1:59:bf:
         38:1c:8f:12:b3:29:61:d9:8b:78:a4:ec:9d:16:05:32:fc:2a:
         20:bf:27:40:74:0b:b2:08:0d:0c:0c:d4:39:11:da:14:c7:12:
         a5:53:e4:ed:9c:de:7f:c5:09:63:90:34:57:7e:ce:d4:6b:78:
         2a:09:16:61:5e:dd:e6:01:46:e3:d4:a9:84:d1:24:85:30:8c:
         c9:b0:79:ca:5d:4e:9e:cc:39:10:9a:b9:34:d4:96:f6:c1:b9:
         84:da:06:48:1e:b6:1b:55:2f:dc:f9:8f:d6:80:95:4f:f6:09:
         1f:cf:5d:00:a0:71:14:5d:6b:e2:94:07:fb:de:13:05:b2:bd:
         35:cc:ec:2a:35:87:b1:9e:bf:83:80:55:e2:98:57:1e:4f:55:
         b7:7f:16:47:7e:7d:9f:c7:d7:fd:ef:b0:ce:16:c7:b5:0b:6d:
         7c:38:63:df:b5:df:b8:c4:b4:05:b6:92:2b:f2:ec:58:c7:ba:
         fd:84:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----