Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          YTc3kvZTK3BM0drzpAxno0ofLsPlbIGD0Wd6szuwjTQ=
Subject key identifier:   A1:54:EE:9C:42:48:47:04:CB:E4:F5:38:F3:C3:AF:82:32:A1:72:1F
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       01962E61C79475A266953CC9271E90A5DE37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0803
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: +5R+jEdx6QC4diLsJoS+bMazgz4fvsgTqPqXpzWAYU8=)
                          2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c7:94:75:a2:66:95:3c:c9:27:1e:90:a5:de:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=a154ee9c42484704cbe4f538f3c3af8232a1721f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:8a:08:c1:76:6a:98:da:ed:2d:3f:6f:01:
                    c1:a0:1b:81:e1:d1:0d:73:5f:3a:9d:eb:35:e7:6b:
                    be:41:c2:50:41:e3:b2:5c:a7:24:82:1f:42:26:19:
                    39:48:5c:18:2b:c2:1e:a9:90:61:25:76:04:4b:23:
                    bf:4f:bc:ec:6e:a1:b7:4b:04:cb:0b:82:12:64:d3:
                    d4:69:c8:6c:40:3e:a3:e8:c7:22:8d:9e:36:9c:f1:
                    3e:47:33:a7:85:10:77:f3:d6:fb:4f:1a:eb:97:44:
                    32:cc:cc:29:70:81:fd:64:9b:55:34:20:e3:6e:68:
                    1e:02:94:3a:d3:f1:c2:3d:e7:39:bd:a9:9b:76:ca:
                    ba:7c:52:25:80:88:61:4f:1d:a2:74:5e:bb:12:47:
                    23:28:59:e4:aa:e4:54:08:13:66:34:63:70:59:01:
                    91:0c:fd:a6:58:69:5d:b0:3c:05:c1:3a:cb:eb:7f:
                    95:dd:9e:c4:5b:ec:e8:cb:48:5a:25:63:b2:8a:6c:
                    c0:1e:93:9d:24:35:01:94:52:fb:64:36:ea:a3:92:
                    03:60:77:02:dd:bb:ae:56:aa:b0:d0:a0:7b:fa:b2:
                    81:37:16:de:3b:c4:95:11:ff:d2:11:90:01:68:2a:
                    8f:bf:61:76:20:12:78:19:5c:fb:77:a9:ef:2a:0a:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:EE:9C:42:48:47:04:CB:E4:F5:38:F3:C3:AF:82:32:A1:72:1F
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:c7:2a:9c:c4:4a:68:87:38:54:44:d2:94:61:0a:f2:b4:
         cd:4c:e4:19:a0:00:b4:4d:f4:c8:23:4b:cc:a3:eb:c2:ee:ba:
         68:d8:9c:73:d0:90:8f:d9:a7:8d:bb:6e:e7:8b:4a:a3:0a:e7:
         6d:8a:00:88:3a:28:fb:2d:c2:ed:f0:90:93:10:b6:24:c7:97:
         c4:a3:d4:77:43:6c:7f:06:50:ee:8c:5d:05:24:42:d3:f2:d3:
         93:be:05:e0:8f:b1:d0:44:a7:6c:e8:31:11:8c:79:0c:ad:67:
         27:06:af:6c:e1:de:8f:57:4a:52:0c:7b:66:25:4f:c6:8e:5f:
         5b:68:89:1d:87:8a:7e:68:64:7a:db:4e:33:8d:63:42:69:4e:
         67:8a:04:97:33:ab:e4:3e:33:ad:ed:c6:bb:55:c5:ec:8f:ec:
         4d:42:c3:89:c8:8b:18:3c:48:53:bf:e9:6e:02:fb:4b:6e:40:
         45:d8:af:52:d3:c8:22:73:dc:d4:75:a9:3d:80:fe:99:3f:b5:
         35:ac:7e:dd:21:18:5e:96:9f:cc:48:f3:00:65:b1:a3:6d:62:
         11:6f:a0:17:ea:56:ca:82:6b:ae:22:fe:53:0d:59:65:7c:be:
         d7:2c:7c:a5:01:a9:ec:f5:60:b6:9e:69:9d:0f:dd:d8:23:b8:
         f4:41:04:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYceUdaJmlTzJJx6Qpd43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGE1MmRkNmYzY2RlYjQ3ODBiYjI5OThmNTAxNjYwY2M5
Yjg4ZmYwHhcNMjUwNDEzMDkwMTIyWhcNMjUwNDE0MDkwMTIyWjAzMTEwLwYDVQQD
EyhhMTU0ZWU5YzQyNDg0NzA0Y2JlNGY1MzhmM2MzYWY4MjMyYTE3MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr6KCMF2apja7S0/bwHBoBuB4dEN
c186nes152u+QcJQQeOyXKckgh9CJhk5SFwYK8IeqZBhJXYESyO/T7zsbqG3SwTL
C4ISZNPUachsQD6j6McijZ42nPE+RzOnhRB389b7Txrrl0QyzMwpcIH9ZJtVNCDj
bmgeApQ60/HCPec5vambdsq6fFIlgIhhTx2idF67EkcjKFnkquRUCBNmNGNwWQGR
DP2mWGldsDwFwTrL63+V3Z7EW+zoy0haJWOyimzAHpOdJDUBlFL7ZDbqo5IDYHcC
3buuVqqw0KB7+rKBNxbeO8SVEf/SEZABaCqPv2F2IBJ4GVz7d6nvKgrzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFU7pxCSEcEy+T1OPPDr4IyoXIfMB8GA1UdIwQY
MBaAFOhKUt1vPN60eAuymY9QFmDMm4j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYt
YjI2OWY4OTVlN2Y3LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYtYjI2OWY4OTVlN2Y3
LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw3HKpzE
SmiHOFRE0pRhCvK0zUzkGaAAtE30yCNLzKPrwu66aNicc9CQj9mnjbtu54tKowrn
bYoAiDoo+y3C7fCQkxC2JMeXxKPUd0NsfwZQ7oxdBSRC0/LTk74F4I+x0ESnbOgx
EYx5DK1nJwavbOHej1dKUgx7ZiVPxo5fW2iJHYeKfmhkettOM41jQmlOZ4oElzOr
5D4zre3Gu1XF7I/sTULDiciLGDxIU7/pbgL7S25ARdivUtPIInPc1HWpPYD+mT+1
Nax+3SEYXpafzEjzAGWxo21iEW+gF+pWyoJrriL+Uw1ZZXy+1yx8pQGp7PVgtp5p
nQ/d2CO49EEEgA==
-----END CERTIFICATE-----