Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File:                     6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier:          INL8rjM1NBayTLR8iJo+GFMe3cHZS7uXqv+1W/rYUVM=
Subject key identifier:   C8:B5:7C:A7:57:57:2B:88:2C:BE:33:0F:6A:88:B6:E1:92:71:9A:15
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer:       /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial:       01962E2AE8C12957EFB16F834515AC113726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: 1AP6DAgTewORTr2zaX5hUEeDuCboDtjNWf5TAtve1kw=)
                          2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:c1:29:57:ef:b1:6f:83:45:15:ac:11:37:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=c8b57ca757572b882cbe330f6a88b6e192719a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:a0:db:16:56:a3:4c:90:06:4e:05:a9:da:
                    87:0e:53:43:0c:e4:e5:ab:27:01:b1:1d:49:b1:23:
                    35:c0:02:13:6a:37:17:42:1e:97:a2:a1:dc:2e:b7:
                    bc:01:09:e6:5f:15:8a:03:d2:54:4a:06:b6:bb:22:
                    37:53:84:70:bb:07:48:23:82:f0:f6:9a:49:ee:68:
                    b0:c7:13:ee:91:2b:42:73:ab:c2:b6:d8:71:94:1f:
                    30:e7:dc:04:b6:0c:cb:58:e2:27:55:67:97:77:a8:
                    6a:d4:8e:44:08:a5:4d:68:06:15:12:d8:f7:b6:a8:
                    5b:1c:b4:50:a8:d8:b0:43:39:71:c2:15:aa:8a:e2:
                    ea:fc:1a:be:51:ce:ad:4f:e2:f1:26:4d:ea:c7:e2:
                    65:0a:c3:56:ac:58:e6:c6:87:b9:25:45:0a:eb:ce:
                    ad:a5:af:8b:0d:b6:f4:5c:8c:06:67:d4:be:1d:a3:
                    1c:c8:f3:22:b3:5c:c9:a0:10:ec:ed:b9:1d:8b:1b:
                    b2:c8:43:52:7b:e8:90:f2:e8:d1:97:00:02:18:fe:
                    bd:b8:ac:b9:42:ed:6a:f3:6d:8c:69:39:05:6a:e0:
                    0a:0a:64:fc:88:fa:84:be:d8:0c:31:cf:44:9d:ff:
                    b0:d7:09:e3:03:38:61:14:5f:fe:af:40:21:a1:bd:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B5:7C:A7:57:57:2B:88:2C:BE:33:0F:6A:88:B6:E1:92:71:9A:15
            X509v3 Authority Key Identifier:
                keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fa:a4:ad:8e:c4:f3:e8:27:d0:75:25:83:68:87:fa:66:5c:
         aa:aa:98:b0:ad:47:93:41:07:50:03:ef:d5:f8:b3:b8:fc:0a:
         e9:77:18:98:9c:74:6d:7a:0a:60:16:c9:86:fa:ab:e4:dd:cc:
         6e:67:5d:fa:8c:80:f6:1d:f0:5e:ff:70:c4:55:ca:a4:c8:68:
         82:2d:dc:82:b5:5a:74:2a:15:65:a1:e2:64:0c:f9:3b:21:06:
         1a:9c:4d:a6:8f:b4:4a:2a:13:ff:3b:9f:89:21:4c:6c:bc:1a:
         fb:71:25:de:c4:f1:29:93:64:41:cf:6d:c9:2e:c7:18:00:e1:
         d7:f0:99:41:fa:64:51:f3:c7:f9:a5:d3:60:d1:a5:52:18:57:
         32:ef:ec:ca:8d:29:83:c2:a8:8d:82:1c:64:e6:7c:be:39:db:
         72:c0:41:ec:11:ea:d9:4a:d8:6e:68:5b:a5:26:3d:50:3f:44:
         59:43:43:7c:e9:00:fb:ee:56:07:fe:06:f2:c7:f5:fb:a1:0f:
         ed:a5:f5:e9:2b:b4:4b:4d:b6:5c:77:3b:88:61:04:19:ce:8d:
         9c:a9:cb:5e:fb:38:17:bc:2a:a1:f7:45:91:96:13:0d:ec:03:
         8a:1b:ec:53:dc:4b:77:dd:5c:7d:73:06:73:71:07:1d:6a:a8:
         27:37:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----