Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File:                     a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier:          jpGHUkVGEpl6M1fkFASWKPhoC11K+GxuOTBbig4ssKM=
Subject key identifier:   D3:EC:EB:D1:FE:CF:64:80:71:46:CC:DA:7A:A0:66:38:07:F0:E2:E3
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer:       /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial:       01962ECF8EBE528A2B9369F88B4F77717924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number:          0C57
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: cn8nkfMUIv2HSI2pjn0Sx/d6Q/OrK2sn0xMyE1CZixU=)
                          2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:be:52:8a:2b:93:69:f8:8b:4f:77:71:79:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=d3ecebd1fecf64807146ccda7aa0663807f0e2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:58:81:6a:49:5d:b9:d2:28:0b:50:e6:6d:63:
                    b5:b7:b3:e7:f8:66:64:b6:27:68:cf:d9:e4:57:10:
                    60:06:d9:df:16:2a:51:aa:e4:5e:2a:94:00:ba:fe:
                    e2:22:cb:ed:56:b7:75:fa:81:a9:be:71:41:d0:6e:
                    f0:c2:39:14:85:f2:01:d5:a4:4b:e3:a2:6c:35:93:
                    61:5c:0e:42:34:f7:50:96:4a:cd:ae:e1:d4:b1:ae:
                    e4:9c:f5:97:b8:30:bb:a7:00:32:d5:4f:0f:e9:6c:
                    09:cd:98:03:79:57:bb:1d:26:03:61:15:e1:f6:ce:
                    4b:c0:fd:f4:54:64:49:7c:86:5b:9c:1f:e5:c8:45:
                    87:57:4c:09:13:9c:6e:10:79:66:a5:06:34:b7:1a:
                    1c:2c:c0:c6:3f:37:9b:e3:87:3a:e7:ad:f5:84:76:
                    a2:cd:0e:4a:a5:be:25:59:40:27:bd:88:ac:09:b4:
                    ef:1e:aa:5b:16:56:aa:9c:ee:e6:9f:80:e5:d7:f8:
                    5f:0e:68:a5:9f:40:14:66:ef:c7:e2:02:c3:78:5c:
                    33:4d:0c:4b:6e:d2:c8:13:04:af:2d:e8:c5:48:c0:
                    f3:db:04:bd:42:22:47:fa:a9:11:12:86:5e:d5:41:
                    c0:3b:29:b2:5b:ef:c4:a7:e5:33:a6:bd:9a:b2:f5:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EC:EB:D1:FE:CF:64:80:71:46:CC:DA:7A:A0:66:38:07:F0:E2:E3
            X509v3 Authority Key Identifier:
                keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:28:70:22:5c:d6:56:56:89:79:ad:9f:e8:90:4f:51:93:28:
         b9:dd:6b:f6:a4:ff:9a:bd:8a:5c:f9:77:d0:00:54:41:bf:10:
         59:da:6f:dd:ab:2d:af:43:9e:bd:07:82:5d:da:88:10:23:ac:
         65:51:79:8a:da:92:f5:eb:d1:1f:ad:28:f7:15:83:9f:08:49:
         fc:9a:e2:26:ad:f4:6d:86:f3:d5:57:c0:5e:81:63:1d:e4:40:
         31:ba:6e:78:4c:63:6d:f7:30:22:56:71:0a:37:3d:a2:36:0a:
         78:64:05:9c:e6:3c:53:a3:c3:e3:d3:33:9d:d8:6a:16:92:2e:
         c8:fb:29:6a:7a:1c:4f:1a:b6:75:13:9c:e2:f5:f0:96:8a:b7:
         ff:56:5e:29:25:5c:c5:ad:5b:b8:96:31:cd:78:18:1e:1a:81:
         69:45:4f:2e:f9:d2:de:f3:49:77:ad:ff:e2:9c:88:1e:de:2f:
         e2:61:96:15:4d:31:a9:68:e3:b3:3c:ad:6e:21:f4:4d:42:f7:
         ac:74:aa:ad:90:b9:bf:3b:b4:f2:20:db:19:a2:83:42:d6:8d:
         d2:3d:43:22:89:f4:bd:d4:28:8e:d3:75:b8:e2:79:53:8a:01:
         ec:8f:62:33:46:a8:18:e5:6b:a6:bc:ef:2f:bb:3e:f8:3d:f7:
         26:1b:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----