Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
File:                     6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json)
Hash identifier:          QDYedO9VgOc7dimO23ASo/ncfJj444JEWlv+iqzMNCs=
Subject key identifier:   DE:19:99:32:F5:FB:82:89:4C:A3:4E:B0:DA:24:A2:A6:8D:84:66:0A
Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
Certificate issuer:       /CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Certificate serial:       01962F3D492B0690546E623E458439447227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
Manifest number:          10
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: a9x0+4XfAPBySX6ZKj/bJf4j3E9Z6WhdO1OaZOmxS2M=)
                          2: gPEIYB37Zc_OzakKWk3m7XL2shI.roa (hash: ogeQ+ihI5RkgX54TXQ3mk3J6Yi4w+GDOualWoIRTMes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:2b:06:90:54:6e:62:3e:45:84:39:44:72:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=de199932f5fb82894ca34eb0da24a2a68d84660a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:c7:54:c3:f9:70:15:2a:93:71:5a:67:fe:
                    e8:e9:52:ad:f3:df:d6:a5:a3:26:46:8f:93:4a:e3:
                    6b:72:3e:32:fd:85:ed:46:d5:07:f5:20:d6:79:62:
                    f3:a1:74:db:1b:7d:de:90:d3:01:5b:46:8f:22:ff:
                    5f:fc:21:6e:f6:1c:76:36:1e:33:30:30:93:45:c0:
                    eb:31:06:ef:53:7a:a6:5d:30:63:62:2c:04:0b:6d:
                    e8:5e:7d:39:f8:aa:34:4d:44:e4:96:02:d8:91:39:
                    c2:62:c2:f7:24:ac:ae:1d:d0:48:ea:5d:43:61:b7:
                    4c:37:b1:81:73:f9:85:63:fb:44:02:18:dc:ea:43:
                    72:64:f2:19:f5:6d:8e:ed:36:d1:9c:51:8d:22:74:
                    20:52:da:52:a6:cc:19:40:f2:b3:1b:39:96:0a:56:
                    ad:c8:86:19:f6:ef:3c:ce:ad:26:6e:54:82:e3:f8:
                    f6:56:2f:78:30:00:b2:05:eb:88:ab:72:9d:63:b4:
                    9e:66:a7:f7:ab:0d:c3:73:f5:93:88:07:94:b7:24:
                    75:97:cc:08:b6:e4:86:da:4e:e6:2f:41:17:2f:c8:
                    f9:f2:c2:8a:45:7d:cd:3d:5a:ce:a2:4b:e6:48:f3:
                    c4:b6:71:3d:4d:dd:99:66:67:d7:61:af:75:91:d4:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:19:99:32:F5:FB:82:89:4C:A3:4E:B0:DA:24:A2:A6:8D:84:66:0A
            X509v3 Authority Key Identifier:
                keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:95:4f:54:9a:f9:1d:bf:45:87:9d:0e:c7:fb:81:dc:a5:c6:
         6c:48:ed:db:c8:8d:d2:41:b1:06:eb:cd:68:ca:67:c5:45:89:
         fa:f6:f8:87:d1:e3:8c:c8:2f:79:71:00:4e:b1:d6:75:8f:00:
         64:d7:bf:ab:e2:5c:fd:8f:7e:61:af:f5:c0:bf:75:0a:3c:50:
         57:f0:8c:4a:7c:cc:8e:54:94:8a:73:cc:42:4d:67:ec:2d:37:
         68:24:e6:93:33:3a:4f:23:a2:e1:52:67:1e:a8:2c:00:78:9f:
         49:10:43:02:88:f9:31:91:28:0b:58:eb:24:12:c6:a3:de:64:
         29:51:92:16:42:cc:15:ee:9b:99:f2:5d:27:ae:bc:d8:6e:15:
         a3:e8:e8:7f:9f:02:fc:0e:d8:37:53:09:76:b3:ff:a9:b2:60:
         5d:10:99:5f:76:aa:74:59:ef:94:f1:a6:97:f3:6c:2d:a4:e1:
         95:8c:82:5d:4e:ca:f7:4c:ef:58:6c:0d:b5:26:2b:12:74:bf:
         f7:ee:df:66:d0:f7:a2:19:82:3b:12:fb:85:9b:c0:d1:63:8d:
         bb:da:eb:89:ee:bd:49:0b:9b:71:67:ab:63:24:17:b4:bc:cb:
         92:ce:34:9c:63:1c:71:5a:74:6c:54:3e:2b:75:31:4d:1c:18:
         4e:0b:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----