Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File:                     bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier:          EU7Re3+F0D0jSQivBfcpH8bd+Y8Syx3275QBlQMlhso=
Subject key identifier:   12:4F:69:12:2D:33:D0:26:3A:0D:64:A1:87:FF:D2:2A:F2:A1:3E:ED
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer:       /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial:       01962F7470FF650237EA2C6B1AEC16DCE54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number:          0843
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: mk6ZYC5ozfggTEATXCwSNbdiDc/QGNpPnrjcyryJPCI=)
                          2: wnX8Ya1rxnPViUevxG2zASimD4s.roa (hash: 5yf/GiJRJl+zzQb5QiL4xkgJStGYufgJG3+rwqnEksA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:70:ff:65:02:37:ea:2c:6b:1a:ec:16:dc:e5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=124f69122d33d0263a0d64a187ffd22af2a13eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:46:26:ab:71:85:cb:6f:70:91:8c:bd:fe:
                    07:8b:ef:42:1a:99:03:ac:21:48:4c:34:0f:54:22:
                    ca:bc:81:c0:ff:1d:0f:50:66:4e:b5:fe:47:46:c9:
                    97:a1:ae:e8:c7:62:f5:81:f8:40:86:6f:94:d6:a1:
                    94:c6:1f:e8:18:56:cf:2a:1e:2b:e9:65:d2:77:0a:
                    f2:f1:82:d0:a9:60:73:00:2f:a0:52:bc:25:a1:2a:
                    3a:16:30:53:7b:eb:a0:44:f5:df:7e:e0:db:98:ed:
                    02:6b:56:fb:ce:03:91:7b:cf:a6:ab:fb:df:2b:d9:
                    42:8c:90:cc:f8:0a:ca:99:7a:8b:0e:12:1f:d3:5c:
                    a4:03:2e:d1:4b:5e:8f:22:b1:e1:65:1b:f4:cc:19:
                    d0:5d:ef:f0:80:4b:81:f1:0d:13:15:95:9f:21:e6:
                    d8:ba:73:d7:fc:29:64:19:3f:f3:3a:97:72:38:e7:
                    d0:ae:42:fc:0d:bb:30:41:e7:9b:73:cb:90:4a:64:
                    b0:94:92:9f:55:25:d6:46:d7:17:40:38:35:01:da:
                    e5:55:8a:f8:ac:fb:a1:46:cf:72:64:14:10:42:34:
                    3f:d1:c5:78:46:31:10:4f:3e:d7:9c:3b:3a:43:64:
                    3c:24:44:42:28:ba:5b:c4:c5:f1:1f:81:21:84:10:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4F:69:12:2D:33:D0:26:3A:0D:64:A1:87:FF:D2:2A:F2:A1:3E:ED
            X509v3 Authority Key Identifier:
                keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:7f:22:47:72:5b:a3:46:7a:5e:77:5b:f8:41:0f:0e:d2:54:
         b6:86:87:68:0f:c1:77:7d:0e:41:b2:7c:59:e9:76:3e:f7:62:
         49:c9:ed:ed:41:c2:c1:dd:24:65:30:b7:83:36:24:31:a7:dc:
         95:a3:9e:ea:d3:b9:e6:29:ad:ab:7e:6a:e4:f1:cb:39:a6:8e:
         a1:e9:e4:10:53:f2:7b:ac:2e:98:bd:d3:e7:bb:29:a9:08:76:
         0c:13:3f:52:4e:55:b0:39:a3:d6:d2:99:24:c9:05:9f:44:0a:
         7b:b8:d1:ff:b6:59:5e:0f:82:bd:18:e3:3d:93:fc:3d:74:26:
         f8:03:4e:c1:1d:4c:61:72:93:e5:36:17:31:ce:79:fd:26:40:
         02:97:95:c1:87:2d:25:82:66:e5:81:06:80:9b:35:18:6d:a1:
         99:76:82:b0:db:19:62:8b:ad:90:66:c0:b2:3a:5b:54:1a:25:
         bb:22:ce:ec:82:6b:da:3e:ce:1b:15:e8:f6:fc:73:71:a3:8c:
         28:3b:40:f0:1f:b8:c0:68:a1:3d:ef:44:ac:6c:ff:41:d7:08:
         89:4b:02:62:bd:ff:78:d1:78:af:17:b6:0a:78:67:f4:10:83:
         7d:68:1b:3e:67:ed:a8:e9:a8:22:82:55:8e:6b:c6:5c:dc:61:
         36:67:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----