Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
File:                     a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json)
Hash identifier:          y6e2hXClpuMtqlBBPWxUzH4YoObJOdqHF6vPdNh/wLA=
Subject key identifier:   2D:1D:8F:78:5A:77:11:47:D0:A8:02:47:77:01:5E:F0:68:D7:B9:8A
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Certificate issuer:       /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial:       01962F74DA16C5A7AA6F57F492CFEAED058E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
Manifest number:          0B27
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa (hash: VtX3ApkZgzYiR7CYiCSZq34MU+2YZHhoSAVs9vYdqbA=)
                          2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: mLxErKKIeo6K2MI1JO8MCfkmPkxx34NfNjEgHXD3VVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:da:16:c5:a7:aa:6f:57:f4:92:cf:ea:ed:05:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=2d1d8f785a771147d0a8024777015ef068d7b98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:06:91:df:38:50:f7:db:78:d1:8c:15:bf:
                    eb:d6:d9:a2:0c:af:78:34:8c:93:2a:f4:d4:74:a2:
                    1f:8e:d1:84:2f:83:61:ef:23:06:8d:6d:59:d2:ad:
                    2c:11:ae:12:73:3b:b4:b4:7b:c2:72:b4:fb:ea:c2:
                    f4:07:d9:82:06:61:b6:96:2d:4a:6f:11:1a:1c:44:
                    94:72:8a:b3:b2:f1:b4:84:4a:8e:ca:32:93:62:eb:
                    f1:bb:72:52:23:71:1c:87:5f:d4:3a:c2:43:69:01:
                    29:da:6f:64:bb:d0:a6:d9:bb:94:f1:12:c1:80:b3:
                    e3:ab:4b:90:26:18:3f:5c:f3:7a:9a:63:bb:18:9f:
                    03:1e:e7:de:7f:eb:30:aa:8b:c3:5e:7c:d2:9b:d7:
                    a0:13:4c:04:d7:f0:9e:1e:8f:ee:a4:8d:11:d1:d4:
                    d0:51:fb:ad:a5:ed:ce:0f:24:f2:47:d1:62:95:0c:
                    83:92:63:2e:68:df:a5:24:6d:97:79:9f:5a:0b:fb:
                    25:a1:79:f5:be:72:47:38:f4:17:42:a3:75:27:95:
                    42:7f:34:58:75:d9:60:41:25:67:e6:14:6e:29:68:
                    3a:85:c0:b7:af:6e:76:c0:4a:74:c4:98:a6:87:cf:
                    e4:df:cc:f8:2a:6a:22:64:87:4e:ad:c9:10:18:26:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1D:8F:78:5A:77:11:47:D0:A8:02:47:77:01:5E:F0:68:D7:B9:8A
            X509v3 Authority Key Identifier:
                keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:0b:94:9b:8b:36:03:24:9d:a7:64:3f:71:6d:c0:4a:f6:
         76:b9:ff:12:9e:13:bf:39:43:7a:f8:41:6d:c4:16:2f:56:a8:
         02:ba:ab:76:f8:6d:49:14:0d:01:4a:d1:d5:a1:ed:3b:87:19:
         8d:26:44:df:ba:42:34:4a:81:c6:5a:df:99:e2:f8:5a:a2:80:
         8e:0d:17:d6:06:28:05:fc:b6:9b:c0:54:8d:27:56:f5:c5:9c:
         3e:dd:78:8c:10:0a:54:d4:6a:65:b2:b9:b9:24:75:d3:00:9c:
         23:af:26:67:d3:25:7e:45:4d:6b:66:ff:3e:2a:9e:47:77:00:
         a2:86:ba:69:d2:11:0c:b4:07:26:70:2e:f4:2e:77:7b:9a:cb:
         58:81:12:77:92:33:72:4e:f7:4c:d2:6c:2a:a9:ca:98:db:50:
         bb:34:85:fa:d5:eb:a3:1a:de:80:32:ee:53:67:41:94:b6:60:
         12:d7:f3:a4:82:27:48:fb:f8:9c:f7:74:78:7d:07:87:5b:76:
         1e:25:26:05:2b:a6:b6:84:fe:21:78:ae:4e:0a:33:ac:64:af:
         91:a3:4a:a6:1c:c3:2c:8f:27:05:89:8e:e4:43:cf:dd:24:93:
         19:bc:e9:77:41:3f:f8:67:27:b8:ab:3f:6d:c6:bd:35:f8:7d:
         47:0a:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----