Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File:                     md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier:          ljOhamab0Z4VgSv0k39dxAV9qKNeUkltb/w18TC2AjI=
Subject key identifier:   92:56:A7:C6:30:6A:EA:DF:3C:7D:DB:FE:B7:22:BD:36:09:71:09:08
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer:       /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial:       01962F74D60E5BF20267BD38116B016A40D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: G9mF37Fb91r0jC33-YcK9r4IAmk.roa (hash: MaEVR8Nlqavgaakwb2T4C4sUXoGT+mVODKAXw14Vucs=)
                          2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: EtozX7Ip3DItbLeYURowWarGhw504VGo2hOffyWnDtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d6:0e:5b:f2:02:67:bd:38:11:6b:01:6a:40:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=9256a7c6306aeadf3c7ddbfeb722bd3609710908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:68:5e:80:a0:59:b1:7b:40:3f:b3:b7:18:
                    a0:3c:0f:7e:62:7c:33:86:c4:bb:d4:cc:50:1e:61:
                    10:04:a4:08:f1:d7:07:a3:b1:ac:f6:89:7a:95:b1:
                    03:12:80:a6:de:67:54:10:15:a1:ac:1c:84:4b:25:
                    45:5c:5f:52:df:bf:bd:c0:07:f2:1d:c3:a6:b2:bd:
                    39:86:1d:17:e3:37:13:46:92:4d:55:15:8c:8b:d1:
                    8a:78:a9:5f:9d:67:61:1b:03:78:4d:cf:97:aa:2e:
                    eb:23:8e:37:d9:ba:a7:72:17:72:56:fe:62:cd:90:
                    1c:ea:6d:32:e3:b2:1b:a5:a4:8a:07:c7:91:6a:f8:
                    b9:fc:57:a6:37:a3:69:8e:11:cb:26:f8:2a:b1:39:
                    79:07:21:7e:13:d3:2a:ae:5c:52:db:bd:47:bc:d9:
                    38:66:9d:36:bc:42:0a:bd:d7:b6:d6:0c:14:df:10:
                    0f:42:e6:68:47:6b:a1:f2:77:35:50:16:c6:cb:28:
                    78:b7:02:df:28:15:b5:5d:a0:37:bd:1b:d8:0b:f0:
                    46:77:8e:b8:1c:34:5c:94:92:a6:fd:c6:13:d7:c7:
                    d3:b1:db:9f:b8:0c:1e:1c:5a:f3:c6:0d:20:1e:d1:
                    63:f5:93:39:e6:29:6d:a2:eb:54:8c:37:1f:43:03:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:56:A7:C6:30:6A:EA:DF:3C:7D:DB:FE:B7:22:BD:36:09:71:09:08
            X509v3 Authority Key Identifier:
                keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:0f:3e:ab:5f:29:55:c8:65:43:99:46:1a:de:eb:ff:d1:
         18:97:78:be:88:c1:51:c1:a9:54:22:c9:c7:4a:0a:51:95:1e:
         63:39:9e:be:d8:c2:31:b2:c6:2b:56:8c:0f:07:b6:71:d0:1a:
         79:7c:16:ee:4e:87:17:b8:70:21:68:c8:ae:26:bf:79:69:7f:
         58:e6:e7:d6:6a:2e:b5:45:0d:65:b0:ad:d9:a9:ed:17:46:90:
         6d:84:df:80:df:a6:16:2b:f8:e8:8e:5d:9e:90:f7:b3:23:34:
         64:3b:06:72:8f:5e:82:ec:70:a2:dd:1f:7b:ba:90:48:56:f0:
         f5:86:a3:44:7f:2b:87:8f:2f:93:d5:a1:14:89:9f:6b:88:1c:
         e7:b0:3c:2e:97:c1:fe:61:95:dd:a4:59:3a:a9:47:3e:03:d2:
         9d:b5:fb:70:07:7a:38:a0:67:94:2c:1c:f3:42:d8:e8:cf:2c:
         f3:d4:3d:e1:6d:f0:76:55:76:3b:cf:b5:b2:6e:96:e2:f0:af:
         3a:f7:d6:8a:9e:19:26:52:33:a9:5a:94:78:91:fe:43:d0:64:
         e3:dd:e8:79:da:cb:bf:c4:34:ab:6b:af:a6:62:ce:f9:fd:ce:
         ee:38:24:bc:b8:90:37:66:50:81:bb:b4:b3:d9:3f:c8:b3:6d:
         5f:91:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----