Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File:                     Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier:          HaNGilLulpObw8HKJKV48Xs/hcKo1Xzg4sfRiBddj4Q=
Subject key identifier:   C5:0B:2B:66:C6:E5:B5:3B:60:0E:B2:8D:37:87:94:63:32:75:57:06
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer:       /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial:       01962FAB50133B684519513683F32F4E6021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: hHbI+1DBCb0aX7h03CIcMqwYSP15kREWveSoyJLJhY4=)
                          2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:50:13:3b:68:45:19:51:36:83:f3:2f:4e:60:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=c50b2b66c6e5b53b600eb28d3787946332755706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:92:01:05:24:38:4f:62:c4:01:18:5a:5b:
                    fc:e0:cc:5e:07:4b:44:c8:05:cb:c6:91:1f:63:59:
                    ea:1c:6c:f5:a4:4f:f4:cf:65:b1:8b:30:a3:71:2a:
                    77:53:d1:50:a4:6e:15:a1:fc:8a:f4:d4:05:a9:de:
                    c4:5c:aa:98:21:1e:44:f0:4e:6f:62:82:7b:db:d1:
                    08:1a:60:ef:33:27:0a:75:10:0b:8b:b4:c3:e5:92:
                    0d:06:33:85:31:f6:b7:41:ae:52:f4:6f:9b:fc:35:
                    68:8f:3e:30:62:07:43:a0:40:5c:3f:51:ec:99:a1:
                    28:e2:87:6b:a6:ef:8a:d9:34:db:d8:5b:6f:c2:c7:
                    3b:66:13:1a:9c:99:3d:47:a3:9d:75:d2:b7:1c:61:
                    95:b9:f4:31:a6:d4:fc:05:1f:d3:d4:67:8e:0c:d6:
                    b5:1e:b7:73:cf:e0:f5:86:e4:0c:e2:10:43:50:0c:
                    c5:99:60:12:32:51:85:a3:91:f7:7a:de:04:bb:98:
                    88:f8:6c:1c:ca:70:d3:d6:cf:53:3e:e5:9b:b5:58:
                    eb:d4:ca:ae:7e:8e:f2:ee:cf:7c:e3:60:d2:79:ca:
                    48:23:ed:67:ae:09:e5:a9:64:3b:49:72:5b:4e:a7:
                    bd:fa:c4:b6:2f:b1:fa:dd:12:a7:a0:53:88:87:df:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0B:2B:66:C6:E5:B5:3B:60:0E:B2:8D:37:87:94:63:32:75:57:06
            X509v3 Authority Key Identifier:
                keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:a7:67:33:59:d1:40:1c:2d:3c:60:07:e4:30:aa:ab:32:
         e5:a0:d3:58:20:43:ae:c9:3c:cd:12:f1:f0:ea:35:8a:f3:e7:
         33:00:56:ca:01:ba:96:90:dd:b3:78:25:83:e8:0c:5a:fc:30:
         64:02:97:32:f6:fc:6e:4f:44:82:a9:0b:96:fa:d2:9f:c3:3d:
         37:30:83:93:34:c7:52:e2:81:f5:11:83:77:64:c8:26:37:b3:
         93:2c:93:17:b5:ba:da:97:e4:7a:47:9a:69:a3:6e:14:77:33:
         8d:b3:de:3f:fc:5d:a0:07:2f:a1:f2:fd:39:73:7b:c3:02:78:
         a2:69:c5:64:28:5d:a2:e8:5e:97:c0:2e:14:30:89:c3:7e:26:
         69:80:7d:c7:ea:6e:fd:21:34:e4:07:e8:be:56:60:fb:ca:c5:
         67:ed:f1:8e:67:d7:48:70:5f:4e:0c:2b:c2:77:c2:33:8f:71:
         f0:35:15:a0:07:49:c8:77:3e:e0:ea:df:48:a7:da:da:0d:29:
         9e:72:4b:55:2d:5e:1f:98:b1:64:12:dd:30:55:39:ce:eb:31:
         dd:5d:b4:b4:a9:8b:48:92:80:d9:ea:58:52:ec:72:d8:f3:fe:
         6a:50:ac:06:0c:92:1e:82:db:fc:31:16:9a:8b:ff:af:ef:16:
         20:9d:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----