Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File:                     axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier:          ba43oBTrclv7TmhTmd4KwszMckbvaG86yPLSTT1Zr5E=
Subject key identifier:   D6:33:F2:2E:91:F3:C6:6A:1B:EB:98:E8:1A:CC:92:98:96:A7:DF:54
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer:       /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial:       01962F069FD2797B940AFE3126DFA9DEADD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number:          1201
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
                          2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: kG37xaKVFwxc/vkQ/H4dxjJoFmEXxMr8uiugACulOVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9f:d2:79:7b:94:0a:fe:31:26:df:a9:de:ad:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=d633f22e91f3c66a1beb98e81acc929896a7df54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:d7:54:18:4d:bf:b7:5c:d1:73:0a:06:cc:
                    8f:3a:7a:1f:80:75:74:09:71:c6:02:6e:6e:5f:bd:
                    7c:3f:38:54:5f:92:f1:3c:02:57:6d:1f:e9:9b:de:
                    24:a6:50:7d:ad:63:b9:a0:af:8c:8e:df:d1:8f:55:
                    3a:05:f6:e7:ca:c2:b9:b9:f4:b2:f8:ed:23:bb:f3:
                    8b:c3:20:c7:8b:1b:ae:86:16:28:3a:b1:18:37:af:
                    2a:60:a8:ef:5b:d2:2e:e0:d7:41:f4:9e:cf:34:81:
                    25:b9:da:de:1c:be:c5:e5:45:a1:27:8e:52:bf:4d:
                    08:b7:1d:e8:27:ec:49:4b:f5:5b:ce:0b:a5:ae:cd:
                    66:b2:7c:42:e3:8d:ec:95:41:00:e2:d0:f3:d9:ec:
                    7b:93:67:9d:31:c0:0f:60:4c:d0:01:03:9d:6e:b6:
                    c3:59:25:72:fe:b3:32:5c:40:62:f9:d1:9b:69:20:
                    11:08:bc:c6:1c:de:e3:f5:d8:17:28:a5:88:9a:2d:
                    7b:80:3e:07:fa:5e:81:6c:a3:0d:a0:12:0d:5d:b7:
                    15:39:a5:77:c5:54:39:a1:57:e7:b0:6f:61:ce:47:
                    f6:bb:6c:82:e2:1d:31:1f:09:c0:27:ff:40:f1:05:
                    b5:27:23:37:5c:af:72:a6:02:62:5f:1b:11:cf:cd:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:33:F2:2E:91:F3:C6:6A:1B:EB:98:E8:1A:CC:92:98:96:A7:DF:54
            X509v3 Authority Key Identifier:
                keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:c5:18:3b:c8:7d:3a:9e:81:cc:f5:d3:db:0c:d2:5f:22:
         e0:26:6c:b2:4b:51:fb:c0:5c:cb:f6:fd:02:3a:5a:3f:a0:43:
         1d:f2:6b:1e:76:36:5c:04:8d:79:34:40:7b:ee:d1:47:26:01:
         fc:2b:d9:5a:17:a8:13:ee:50:d3:63:8b:cd:5b:0c:5e:69:2a:
         2b:6a:77:fa:dc:86:43:a6:86:2d:c4:17:5f:90:ed:22:8a:d2:
         2a:43:4a:6d:1b:e8:e1:4d:4a:46:d7:38:7a:4e:5e:56:d9:d5:
         10:67:a6:9b:86:90:7c:e1:7e:bd:a4:55:c2:ef:7b:a2:cb:2e:
         25:87:0e:cb:7c:6a:50:c3:14:e2:8d:95:ff:e8:60:c1:b0:2e:
         ff:e3:7d:b5:de:5f:2a:03:65:5d:fa:fb:38:62:f5:df:25:4b:
         1e:93:1c:fb:e1:e5:8c:39:5e:b5:bb:fd:45:6c:7c:03:59:04:
         19:b6:8c:15:58:41:3a:84:74:6a:3e:06:31:9f:5c:de:db:08:
         e4:aa:cf:43:47:01:94:7e:b3:5e:10:46:7c:5c:b6:6c:24:6a:
         91:32:18:32:d9:2f:9b:64:bd:fe:ee:c9:29:80:f8:e4:c5:31:
         54:58:f5:82:bd:2c:1c:15:b8:dc:f5:94:ce:60:ae:ac:ff:bb:
         8d:3e:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----