Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
File:                     A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json)
Hash identifier:          rzAZseVLmDP2QxcBou+sS1HUXjRlG2hm9nKa1/Nhlmw=
Subject key identifier:   70:20:59:91:D9:A9:87:24:6B:45:88:6C:C2:96:F5:63:B4:8B:DE:0C
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Certificate issuer:       /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial:       01962F3D8D71FEED6A5C1BF922F0C39B572D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: g0pHGgIWtPr5OrLQYzXwHK56H+QqyZjOc2HnRUfGv9Y=)
                          2: j-WIU7L2E8S8heDN9-EX8jcj-qg.roa (hash: 5/cHSfnAktTRmViDSglDJdChSdXmQUsSiRJP6avGvpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8d:71:fe:ed:6a:5c:1b:f9:22:f0:c3:9b:57:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=70205991d9a987246b45886cc296f563b48bde0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:e0:b9:4d:80:a9:cb:41:6c:cc:fe:3c:99:
                    34:76:2c:e4:96:02:81:4d:0b:35:df:5d:c4:53:3e:
                    57:16:4d:f4:ca:ba:d4:45:96:34:c3:1d:17:bf:66:
                    a6:92:40:eb:8c:fb:21:a7:2f:6b:48:91:89:82:8b:
                    c9:94:67:62:1b:7b:b9:45:02:84:13:10:2e:2f:b0:
                    36:07:5b:3f:4a:46:85:a6:d6:4f:49:13:f4:93:2e:
                    4c:85:c8:53:7c:7c:e1:b2:30:37:85:34:60:9d:b0:
                    2a:0c:68:60:c6:d1:ea:ef:3f:bf:67:d0:ef:48:0a:
                    82:6e:e8:a7:a2:a3:f8:cd:8a:08:a5:7f:60:80:1f:
                    7e:f6:c8:2a:eb:1a:3f:b0:51:a3:45:f5:92:f8:d4:
                    5b:81:a1:ff:fd:24:5d:28:a9:9a:fb:70:44:c1:4f:
                    63:a4:b0:24:aa:9a:88:0e:14:0f:96:38:4d:0b:cc:
                    c1:99:d7:26:c6:43:c3:d7:e6:d3:9a:7b:57:0d:32:
                    4b:a1:a0:35:69:0b:16:ad:fd:7e:d5:84:f9:86:82:
                    f0:21:8f:98:70:e7:29:be:bf:8b:de:35:45:43:c7:
                    b5:89:d8:63:f4:9b:d2:68:62:c1:66:cf:a9:6c:27:
                    e9:f9:95:52:e8:2f:60:89:23:d9:40:0a:6b:57:ef:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:20:59:91:D9:A9:87:24:6B:45:88:6C:C2:96:F5:63:B4:8B:DE:0C
            X509v3 Authority Key Identifier:
                keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:37:fe:9a:4a:15:e2:af:c2:60:b6:2c:65:4b:e5:8d:0a:c0:
         4d:22:62:02:80:39:40:9d:12:91:83:3d:e9:d8:b0:1d:06:17:
         d9:57:5c:08:74:fa:74:38:d1:6e:a5:73:22:ae:61:19:f4:39:
         c2:9f:4d:f0:56:db:ae:20:92:05:7c:94:5e:7d:5f:e5:56:2a:
         39:51:d5:69:aa:b8:6d:6c:eb:72:85:08:10:10:03:b8:38:cf:
         ba:d6:aa:b0:95:c5:93:09:e8:ad:48:cd:d4:38:3c:bf:10:54:
         c0:bd:54:26:d1:4e:ef:7c:2e:85:f6:0c:01:33:f2:38:0d:b0:
         d0:61:1d:d4:3c:f6:6c:69:a4:1a:f8:ea:24:dc:53:51:79:71:
         9f:e1:38:17:6d:5c:f0:50:6a:e1:fd:9d:00:17:72:dc:6a:4d:
         40:af:06:1f:25:29:3c:75:86:fb:c4:34:0e:51:99:13:d0:d7:
         24:a7:b1:66:1a:a5:ce:d1:a8:ed:d6:bb:4b:0a:a5:13:9e:f3:
         46:4c:87:47:06:73:0e:3b:02:ea:83:d5:ca:4f:7e:12:66:46:
         a9:26:f8:74:ba:ea:16:4b:71:fc:cd:fd:e6:9e:d0:a7:c2:be:
         9e:ad:e4:25:72:c4:73:ec:45:44:ef:77:b1:b3:67:d7:8e:e9:
         d0:c6:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----