Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          h6m3sP/WP5x8lWFuP4ZXdOFP9N9o+PQVo3tVWQFYFmc=
Subject key identifier:   70:4B:7F:83:7B:24:7E:1D:CB:09:74:E8:B5:7D:3F:9A:D4:46:B9:6B
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       01962E993F4F12C95248EE1EB2F16AECB6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (hash: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=)
                          2: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: F6d8mXnckd+dU0qKPP53hmM9DqezvJsHy4kmiUkN0gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3f:4f:12:c9:52:48:ee:1e:b2:f1:6a:ec:b6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=704b7f837b247e1dcb0974e8b57d3f9ad446b96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:83:ce:f6:b7:ec:7b:94:f5:dc:1b:ea:2b:
                    42:cc:20:23:01:a4:a8:7a:8b:8e:de:91:5a:96:e6:
                    c1:10:63:42:6b:47:e1:4f:74:b6:5b:cb:c4:40:5f:
                    32:2f:3d:12:21:b9:02:f9:68:e5:54:ad:36:57:df:
                    7d:48:cb:0e:06:35:76:15:67:d1:64:4e:da:63:24:
                    25:52:ec:38:1f:95:da:18:27:de:b9:31:48:68:d4:
                    6b:dc:2c:97:28:81:36:df:49:07:a6:f9:24:bd:90:
                    87:41:6b:bc:2e:10:ef:66:86:df:9f:08:ae:25:ed:
                    24:d6:95:b8:9a:94:9f:cc:b1:bb:9f:94:9f:39:68:
                    bc:89:ad:80:c7:e1:ce:61:da:90:21:09:8c:82:35:
                    d4:ce:b5:84:0f:7b:c7:a5:94:44:e4:20:7a:49:63:
                    00:54:a9:0b:7d:3f:6e:ad:0c:4e:39:77:3b:a9:6d:
                    aa:b4:45:14:54:6b:d3:da:c8:3c:d8:f8:9c:19:d3:
                    c7:80:db:6b:70:9b:62:c3:3a:06:af:60:96:e3:8d:
                    ad:ec:ca:bd:fc:cd:fa:14:05:41:2c:c1:84:7c:08:
                    61:0f:eb:54:be:57:13:1a:35:8d:c4:11:ea:b4:b0:
                    05:3d:be:88:7e:3e:f9:5d:66:df:09:22:b3:f6:92:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:7F:83:7B:24:7E:1D:CB:09:74:E8:B5:7D:3F:9A:D4:46:B9:6B
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:73:5a:80:b2:6d:44:14:a3:4d:12:13:ca:b8:a2:ab:01:cd:
         63:1d:7a:62:a9:c3:c8:ae:54:66:bf:8a:ea:6e:b3:bc:2e:b6:
         76:fb:65:07:33:53:46:c6:2d:13:e8:db:ea:ae:d7:99:cd:76:
         6b:9c:15:05:bf:17:ff:3b:f6:ab:e3:9d:7d:97:62:96:b5:31:
         96:d0:d0:f4:c0:4c:87:22:0d:59:bd:2a:83:7b:32:51:44:e4:
         00:ae:80:e9:d3:76:77:eb:92:af:3c:54:15:5a:b8:78:06:1a:
         d9:cc:0f:a6:82:55:18:3d:a6:30:79:46:ea:64:7f:a7:b9:0c:
         3e:68:15:b0:e9:ef:7c:b9:0e:cf:d6:2d:3b:d6:64:80:a5:97:
         6d:c1:36:ea:f9:75:cf:81:1e:eb:0c:b1:a8:08:c1:9f:f7:15:
         ee:49:b9:33:76:00:bb:77:ee:5b:fd:09:c6:b6:0d:0d:cd:c4:
         dd:6e:14:57:a7:5d:07:4d:32:26:43:4d:12:0f:2b:ac:84:b2:
         2e:7e:09:e9:fe:d0:9a:ba:5b:42:63:c2:30:73:5b:9b:17:31:
         b5:9a:11:44:9e:83:b1:fd:73:aa:09:b0:cb:80:ea:14:30:09:
         f0:b4:9c:d7:a8:a3:a1:12:04:f1:a0:02:73:51:2c:3e:7f:69:
         82:08:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----