Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.mft
File:                     6_crz1uZLihY-13P3fSpQyGCSss.mft (raw, json)
Hash identifier:          W9U206hxIcRXR7bpH34nct0kRvQq3dWNxI2il/EztJc=
Subject key identifier:   41:FB:DC:D3:32:64:0F:BF:14:51:6F:07:E1:4A:61:90:3A:E9:C3:65
Authority key identifier: EB:F7:2B:CF:5B:99:2E:28:58:FB:5D:CF:DD:F4:A9:43:21:82:4A:CB
Certificate issuer:       /CN=ebf72bcf5b992e2858fb5dcfddf4a94321824acb
Certificate serial:       0190FC01B93B2165CE18F6199723919538FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_crz1uZLihY-13P3fSpQyGCSss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.mft
Manifest number:          0C6C
Signing time:             Mon 29 Jul 2024 01:01:29 +0000
Manifest this update:     Mon 29 Jul 2024 01:01:29 +0000
Manifest next update:     Tue 30 Jul 2024 01:01:29 +0000
Files and hashes:         1: 6_crz1uZLihY-13P3fSpQyGCSss.crl (hash: T5KDW0q0nNQbJ33u2fwcapVMxmgudREltxbOXVMPkdU=)
                          2: Hox-uyyTgzfaRUusy-4J9HYlq3Y.roa (hash: LuTwmQfJtIbP80icQl65spZTfgTsgR+McaBUnWlr1cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fc:01:b9:3b:21:65:ce:18:f6:19:97:23:91:95:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf72bcf5b992e2858fb5dcfddf4a94321824acb
        Validity
            Not Before: Jul 29 01:01:29 2024 GMT
            Not After : Jul 30 01:01:29 2024 GMT
        Subject: CN=41fbdcd332640fbf14516f07e14a61903ae9c365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:2a:45:22:a4:4e:50:54:4a:fc:25:f4:59:
                    d7:18:0a:99:54:c8:74:f4:61:ed:c0:8b:05:4e:b1:
                    af:5a:09:df:0a:89:6f:7d:db:46:fa:9c:b2:21:1f:
                    b4:d9:86:9f:9d:69:de:97:f1:12:07:2c:c1:23:85:
                    80:84:60:3b:d5:79:e5:3f:3a:22:68:21:42:6f:c1:
                    6a:cf:19:6c:18:00:72:7d:e4:66:3e:85:c7:ed:12:
                    d5:b9:f4:67:ad:f2:0a:8b:05:28:c4:fe:98:ef:4f:
                    bd:63:c4:85:51:36:ba:9a:58:bb:ef:46:ce:be:0f:
                    25:84:83:c4:90:e7:ee:b6:25:f4:ff:b3:6d:ed:f8:
                    ec:94:6d:b4:9a:9f:f1:37:3e:32:d6:6a:ba:4c:7a:
                    a1:bb:26:01:4c:af:cc:42:66:c8:76:e5:6b:6e:a6:
                    cb:99:09:c4:d7:0b:93:56:19:5e:0d:0d:e0:57:2b:
                    d6:34:28:5b:65:8c:8a:c8:16:93:e7:3b:25:14:c2:
                    d1:62:13:85:55:c9:ce:f2:a7:87:d5:16:87:d4:30:
                    11:9a:96:56:80:5e:cf:c2:be:5f:33:38:42:54:10:
                    20:eb:95:34:20:5f:1d:45:04:02:2c:fe:f8:86:7b:
                    0c:4e:e6:99:37:bd:2f:0d:8a:65:7a:be:40:58:54:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:DC:D3:32:64:0F:BF:14:51:6F:07:E1:4A:61:90:3A:E9:C3:65
            X509v3 Authority Key Identifier:
                keyid:EB:F7:2B:CF:5B:99:2E:28:58:FB:5D:CF:DD:F4:A9:43:21:82:4A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_crz1uZLihY-13P3fSpQyGCSss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a3:b8:60:31:0b:69:96:52:d7:46:41:a6:9b:95:b0:fd:83:
         2f:88:96:66:f0:3a:10:bd:f7:f3:da:14:54:a1:52:8a:12:8a:
         36:b4:6d:31:49:a9:b3:f1:a3:fe:a0:ea:15:48:4e:99:03:51:
         3a:ed:42:30:e9:40:e3:d3:7d:4d:8f:29:2d:76:e3:c7:4c:d8:
         1c:00:fb:76:4f:4e:58:c1:a5:2e:34:00:7b:cc:70:22:80:fd:
         39:6e:92:fb:d2:6c:30:75:70:8e:96:30:67:c4:1e:3e:ee:d0:
         2d:24:57:8a:c6:98:2c:17:75:1c:26:73:4b:07:06:ad:2d:be:
         48:c1:f2:d7:26:46:3d:c2:8c:e2:e9:14:db:bd:2f:b2:a8:03:
         36:cf:84:ef:40:e2:69:01:cb:a8:f7:32:14:5e:ee:00:be:47:
         49:08:0d:4b:05:c4:31:8a:fc:02:f5:2c:29:05:e0:e5:ea:7b:
         f7:64:3c:29:03:0b:45:fe:eb:e8:a5:db:d5:44:e5:2b:ed:28:
         1e:fa:c8:bc:67:2c:6d:07:af:04:59:8e:d4:93:2e:e9:2f:4e:
         88:37:ee:0b:5a:a2:0d:d1:e2:02:b0:0e:11:8b:dd:76:11:b1:
         6a:86:99:c6:ef:16:86:20:97:30:f0:85:68:19:e5:5a:13:4e:
         1f:7a:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----