Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File:                     aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier:          o99wiK3svMiiR7SyWPv9DiI8PVeECDK9xAvEomXEOz8=
Subject key identifier:   9C:92:69:DA:C1:4F:FB:AB:4A:20:F8:5B:35:B6:27:C9:FD:B2:18:23
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer:       /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial:       01962F0678360C2AB71CCD1320A7835BA637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number:          7D
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: OXOnare6dVM-zLYHWOSVEGQTw18.roa (hash: dcwy2HRQRShbBLQYZ7Zn1DYc8vKW+hy7H3ObhuzMkSQ=)
                          2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: b/pkrdclNChBBHpANgK1iqRpLJwZp+MydJAA8BgMTvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:78:36:0c:2a:b7:1c:cd:13:20:a7:83:5b:a6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=9c9269dac14ffbab4a20f85b35b627c9fdb21823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:30:5c:06:57:1c:63:49:35:8a:33:b3:aa:
                    10:c1:5e:49:98:23:80:fb:7b:10:f8:44:11:7a:eb:
                    ad:12:6e:84:77:4e:1f:5f:32:c3:e9:10:3c:5f:28:
                    e7:73:a0:d2:cb:43:e5:8b:5d:37:1d:3c:38:ec:d6:
                    f6:85:4d:bf:4c:ab:df:e0:69:ec:1c:c0:95:02:b4:
                    ac:52:12:e9:bd:ad:0f:85:c0:95:5e:eb:83:db:18:
                    97:af:0f:5e:62:60:8d:ce:ab:1d:16:98:00:c4:4e:
                    c1:43:71:0f:31:cd:2a:4b:21:33:07:a0:3d:b7:4f:
                    23:79:14:df:a2:68:89:22:97:5b:3e:72:19:4b:6d:
                    4b:be:f5:ac:41:5b:3f:0d:81:b1:95:3c:a0:07:fd:
                    83:9a:35:d7:32:b3:8d:20:69:7f:0a:fa:1a:51:fa:
                    80:b3:b8:bc:fe:8e:68:1a:41:61:9f:98:e9:23:48:
                    f7:a8:41:94:68:69:53:ba:54:a0:40:21:4e:4f:42:
                    f3:d3:8c:69:70:44:d2:f1:d9:81:75:13:aa:8d:a7:
                    81:c7:a9:d9:f0:f9:44:88:d5:02:80:83:d3:25:d8:
                    2e:7f:98:4a:82:72:e1:00:15:d6:8a:83:e1:01:e4:
                    9a:e6:8f:f3:be:ee:8e:93:3a:66:14:09:a7:2a:31:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:92:69:DA:C1:4F:FB:AB:4A:20:F8:5B:35:B6:27:C9:FD:B2:18:23
            X509v3 Authority Key Identifier:
                keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:26:f3:ca:85:fd:a3:1c:75:b0:77:24:05:6b:ff:57:04:d6:
         75:8c:ab:cb:d3:ea:38:78:b4:9e:03:e1:75:4b:c6:ac:59:cb:
         7f:3d:47:a0:82:e1:2d:14:15:b4:49:f2:0e:4f:95:47:df:4e:
         bc:8b:a5:78:dd:0f:48:1c:b2:62:79:48:74:ce:fe:54:b7:d7:
         c4:8f:76:2e:0b:a9:2b:96:a2:71:6b:f0:4a:91:10:d2:bf:e5:
         75:64:37:16:d8:f1:2d:bd:2f:7b:f4:91:01:da:41:4f:18:59:
         42:af:37:8c:0e:0a:9d:e0:6a:84:82:82:7b:79:dc:aa:61:2f:
         77:a4:5b:30:1f:4e:a0:6c:ef:e4:ce:6b:8a:da:9f:03:24:d8:
         45:81:5d:6c:6d:b1:4b:5f:d2:d2:27:a5:f1:92:4f:d0:5a:59:
         70:bb:6c:c6:a6:35:ab:89:73:ad:86:ed:ff:64:89:12:75:7b:
         57:c2:6f:a8:8f:45:0f:1e:52:47:20:bf:be:ba:fd:73:04:44:
         ff:e3:54:5c:64:b0:d0:c3:74:b8:1c:d8:4d:fb:28:f6:84:23:
         8e:e6:9b:90:eb:e8:15:34:94:8b:23:94:ef:17:de:7d:09:22:
         c3:25:32:de:ce:0f:6c:61:97:d2:30:a7:3e:e9:12:62:6b:64:
         05:d8:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----