Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File:                     are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier:          PseoImmvxNv6slqvfVThrp9sA8iZde8TnEqi6DBNOvE=
Subject key identifier:   E2:DA:64:D2:42:17:CA:2A:39:C2:7E:0A:E6:BD:CE:30:22:74:65:ED
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer:       /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial:       01962DF3E9FE3435740CDD2F2B88C6359E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: BFGJmraQBgGavzIeZHO0bfSXFRI.roa (hash: e3IZCe3SbuLp2264XxRVhIYJHbqFuU1UA3gCIN6FJhs=)
                          2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: IsnC+WV2yP1Sx0PUshdWv+PwzeqwNSlFiqymKA/kkFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:fe:34:35:74:0c:dd:2f:2b:88:c6:35:9e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=e2da64d24217ca2a39c27e0ae6bdce30227465ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:d2:78:f1:20:6c:41:04:33:8c:b4:11:51:
                    ca:90:fe:3a:c1:d2:62:cc:18:9f:b4:40:09:b0:16:
                    d5:e1:44:39:d0:af:0c:98:98:f5:1d:74:f6:21:35:
                    e5:41:fb:e8:75:91:65:f9:26:cd:dd:0e:0c:77:60:
                    09:89:ee:7a:98:f5:26:8d:9a:de:02:4a:8f:05:9f:
                    85:c6:f0:db:70:ca:dc:e9:d9:fc:24:df:71:35:f5:
                    37:da:fc:41:08:ae:43:13:81:72:ca:cf:16:30:ce:
                    de:0f:72:48:9c:08:ed:4c:c8:98:66:2d:88:77:3f:
                    f7:87:79:ac:97:52:d5:70:d7:00:f4:31:46:14:50:
                    9e:e3:c9:0b:d9:48:03:e1:a9:70:1f:08:cf:2a:28:
                    07:43:a5:51:27:18:88:e1:e3:b9:ee:62:6f:00:6f:
                    53:d7:0d:63:60:b1:d5:b1:fb:86:c5:54:3c:65:e2:
                    5b:73:5d:02:ce:1e:e8:47:91:47:14:a1:6e:10:05:
                    80:fa:0e:5a:ea:3c:a2:01:c7:35:c9:9c:4b:26:11:
                    3c:ae:e6:b6:73:7f:de:a1:9a:1f:a6:d7:8d:ee:7c:
                    f5:30:c7:54:7a:14:ee:c6:1b:c2:87:0d:78:d3:c9:
                    87:94:92:3e:cc:a2:39:82:13:eb:61:f3:f0:9f:e4:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DA:64:D2:42:17:CA:2A:39:C2:7E:0A:E6:BD:CE:30:22:74:65:ED
            X509v3 Authority Key Identifier:
                keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f6:04:28:e3:e5:b9:c1:95:72:f9:63:e9:6e:26:08:dc:31:
         39:99:3c:c9:b4:94:bb:38:48:39:6c:56:ba:d5:56:92:7f:31:
         b4:4b:46:01:40:26:6a:3e:34:79:93:ee:d6:d7:86:ba:68:77:
         e4:8c:0c:73:b6:f4:a6:d7:99:aa:83:a9:93:25:cc:b2:61:7f:
         7c:1e:3c:89:60:34:28:f4:d6:2c:f8:70:72:86:a9:5a:e6:f8:
         74:bd:90:4d:ff:6b:92:25:ba:77:0b:27:cc:ae:98:41:ed:27:
         d8:2a:39:6e:06:35:85:e9:20:01:18:31:b7:57:27:64:3e:77:
         86:56:9e:e8:92:00:9d:80:9f:86:c8:7a:12:d1:7c:d1:c7:34:
         04:4e:41:8f:8a:cb:cc:83:fd:b4:58:20:aa:55:05:b8:11:1f:
         10:c6:ce:5f:19:27:b7:ef:f3:7c:bc:19:05:9a:25:af:94:47:
         f9:8c:a5:17:88:f9:1a:d2:02:26:3d:4f:51:51:f9:37:3b:60:
         20:b4:db:18:04:3f:49:8a:c2:a4:44:47:ad:b8:52:51:70:e6:
         21:54:41:f3:4e:7a:4b:25:c3:34:16:80:3e:81:a3:00:eb:b2:
         b7:59:9b:2e:6f:76:a4:55:86:df:e9:da:f6:0f:c5:ce:43:2c:
         04:5c:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----