Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File:                     akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier:          qpIwRV/Lz9nhbyHKEQgB9XguspQNtk1/W6pqigJE74A=
Subject key identifier:   DE:C9:DB:3A:77:65:21:1B:CD:5F:7E:11:D7:CC:5D:D0:64:D4:70:5C
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer:       /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial:       01962DF3F02AC1E991BE47BF15F521F518A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
                          2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: 6xPTUsYHb9ZBpoSaU2C1tiZLM9P3cqMGV3vsjyHO5F0=)
                          3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:2a:c1:e9:91:be:47:bf:15:f5:21:f5:18:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=dec9db3a7765211bcd5f7e11d7cc5dd064d4705c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:1f:76:17:5f:93:42:d8:2c:ff:f3:ab:89:
                    61:5c:66:48:2e:60:bf:5c:9b:5b:3a:28:f7:5b:64:
                    35:ce:4a:32:1f:e3:00:69:4f:85:94:74:8d:4e:ea:
                    33:29:22:92:b6:51:7a:79:eb:82:06:04:c0:db:a6:
                    71:e9:02:29:e8:d6:ba:10:f2:39:1f:90:45:ed:2b:
                    96:ec:3a:00:0f:79:b3:12:93:3f:fb:94:a3:81:43:
                    63:0d:0a:d5:39:5a:40:c0:7f:8c:79:5d:e0:c7:14:
                    9c:0c:4d:12:cc:86:98:f0:b6:54:26:84:b2:ea:da:
                    76:f7:95:07:45:90:14:0b:13:9e:15:1c:69:b5:de:
                    28:d6:0c:23:4c:98:a6:c9:b3:02:f4:60:33:0b:73:
                    70:b2:5f:8e:3a:0d:d7:59:f2:c8:76:f0:56:1d:0a:
                    fe:38:4d:2b:08:bd:da:bb:1a:0b:53:14:d3:f4:4d:
                    22:b4:64:61:d3:13:cb:39:fd:c5:88:54:e2:7a:66:
                    60:a0:b1:ab:2e:59:80:a1:e0:6d:5d:ec:35:c6:7b:
                    ed:e4:83:5f:be:d6:b2:eb:21:a1:f2:86:4b:66:ce:
                    6c:92:28:98:9b:ed:74:24:0a:f0:06:2a:18:7c:b1:
                    8d:14:37:00:23:bb:47:90:67:df:96:c0:ea:a0:74:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:DB:3A:77:65:21:1B:CD:5F:7E:11:D7:CC:5D:D0:64:D4:70:5C
            X509v3 Authority Key Identifier:
                keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:aa:76:58:fc:6a:10:40:bc:ed:e8:69:39:8e:95:02:2b:d9:
         ac:73:92:0d:9c:63:47:c0:8e:e6:39:bc:eb:cf:d1:5c:5b:84:
         dc:18:96:67:65:77:ff:4d:78:55:18:df:a5:aa:87:b3:25:df:
         11:b6:6b:39:98:2f:98:28:99:60:71:69:82:f8:a2:f9:6c:dc:
         f9:eb:57:b5:e2:f9:19:7d:38:82:a0:73:6a:cd:9b:49:3b:e7:
         e0:ae:50:13:e9:80:67:62:02:46:ba:22:b8:fe:e9:51:2e:dc:
         e6:a2:a8:2c:d3:58:39:1a:29:ba:ac:0d:86:b0:92:84:2d:60:
         32:d7:a6:04:84:f4:f9:06:85:41:d3:90:8c:fb:29:75:ca:3b:
         a1:1d:e7:5b:c0:19:5f:c7:36:97:b5:30:89:47:ca:f6:79:6a:
         9d:1d:fe:db:97:73:0b:c8:c1:69:c9:a6:54:9c:be:f4:09:31:
         1e:1a:39:a3:bf:dc:25:1b:b5:2f:b2:74:d5:32:9d:86:1e:6c:
         94:56:46:ab:dc:78:94:36:68:fc:5a:6f:f6:83:d5:df:09:ff:
         fc:81:b5:4d:53:89:f8:fc:4f:31:dd:ea:17:90:5e:2d:c4:aa:
         9c:12:e7:47:57:23:94:81:93:e6:10:7f:68:dc:f7:24:ed:b2:
         a9:98:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----