Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
File:                     6wkUma3HabD7qf7TKEVDp0JcI1E.mft (raw, json)
Hash identifier:          9RKnGzVUBTNOD9ttY/JIWhI98FUV+Awoor6PkEuKj24=
Subject key identifier:   3E:40:9C:38:F7:8A:3B:14:CB:EF:26:F0:D7:58:54:C4:44:41:B2:29
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Certificate issuer:       /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial:       01962E9949FBD2C0189575C7914CC4054505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
Manifest number:          14DA
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 6wkUma3HabD7qf7TKEVDp0JcI1E.crl (hash: uiCMfq9hqkr6MYR7lcA8q2ezYe67Pdi73gcnHbsJ0uI=)
                          2: GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa (hash: Ns47X0wI0O3MuVbdsHwm7ba7lckhv6ZFSEeB9gRrT7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:49:fb:d2:c0:18:95:75:c7:91:4c:c4:05:45:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=3e409c38f78a3b14cbef26f0d75854c44441b229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:e0:24:9f:d3:a8:0f:52:8a:ea:a5:6f:6a:
                    7c:f9:83:1f:74:6d:43:a0:be:ca:5b:41:99:33:d8:
                    59:cc:d5:58:83:e6:b4:39:e7:6c:39:49:3b:34:e0:
                    a3:8a:02:87:34:ab:89:7a:05:7f:15:85:2c:ba:57:
                    97:fd:a2:bc:89:67:ac:f4:01:8b:d6:17:fd:c4:b8:
                    ad:70:ef:7e:4d:dd:32:dc:bf:bf:c5:09:9a:3a:b4:
                    9c:e7:f2:11:a3:b2:ff:83:bf:a8:44:53:81:b8:66:
                    23:53:1b:35:0d:15:74:cc:6a:52:e9:b4:d0:6d:f4:
                    df:3e:1e:d5:c1:90:3f:b6:2d:85:92:5c:9a:d6:f7:
                    95:24:92:04:00:56:97:af:9b:14:65:ee:09:fb:eb:
                    3f:f5:00:95:9f:af:79:3d:64:b2:d8:84:58:1a:ff:
                    c6:aa:f8:e5:54:02:d5:79:94:c5:76:7d:82:99:0e:
                    c5:d7:ec:bf:af:be:2d:30:66:2f:66:52:67:4c:1a:
                    ae:18:bd:d3:4b:68:a9:82:30:97:f4:01:6d:bd:59:
                    7d:73:b0:72:66:23:7f:a8:e6:56:6c:c9:3b:6c:fa:
                    fe:07:1c:c4:a9:44:ae:40:ae:c8:c2:43:3b:ac:b9:
                    b5:6f:79:29:2f:b6:cc:7d:d6:5a:79:95:03:7c:8c:
                    56:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:9C:38:F7:8A:3B:14:CB:EF:26:F0:D7:58:54:C4:44:41:B2:29
            X509v3 Authority Key Identifier:
                keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:dc:0c:b5:67:da:39:41:62:8c:86:f8:c1:90:a1:4e:11:
         2a:2a:6f:59:12:1c:f2:30:3b:46:4e:69:b7:3b:8e:12:46:5d:
         40:3c:e3:4c:f0:0e:a6:bd:e1:7e:d8:ea:42:cf:8a:8a:03:8d:
         1a:43:c9:37:01:28:8d:96:83:da:9f:12:8b:b8:20:0d:3e:b3:
         73:31:1f:7a:0d:36:70:ce:25:4a:25:75:0d:b3:f9:5c:22:f4:
         06:9a:c4:d0:95:6a:55:5a:4b:d6:e4:fe:c2:0e:25:eb:ec:f8:
         be:b1:78:26:39:51:9e:f8:c6:82:30:d2:d1:42:8d:f9:86:00:
         ba:c7:f1:a1:07:ab:bd:a2:e7:90:b8:03:e0:e9:eb:55:6d:5a:
         ff:58:34:a0:92:65:6b:96:d7:1c:ff:8a:81:bb:62:9b:19:fb:
         8f:69:19:dd:80:d2:61:74:6c:c8:08:37:33:fd:40:bc:28:f9:
         95:93:c1:d0:c4:a5:a7:02:07:51:2d:89:bb:ab:5a:75:5d:08:
         3e:b6:7e:d4:4a:a2:51:a5:a8:a8:db:b3:b3:05:d4:6a:1a:1c:
         b8:03:6f:ca:1d:46:6f:64:21:62:38:8e:3b:89:54:a9:58:18:
         47:cc:40:a7:73:9b:17:53:c8:47:15:cd:e5:d7:a4:e8:a4:32:
         87:81:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----