Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File:                     6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier:          uISkr4JokowR0HPndA+5dB3I+KLEbp0kuXaiLu4POMQ=
Subject key identifier:   73:F9:69:1C:B4:75:BA:28:90:ED:6C:4F:73:8A:E6:11:E3:ED:B4:37
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer:       /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial:       01962E61B959E668DC756C89D88221392239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: NqZj6O5LNJWNBSoJh3paivc5WhtGkMNHQZy6Fhu2bEc=)
                          2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
                          3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:59:e6:68:dc:75:6c:89:d8:82:21:39:22:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=73f9691cb475ba2890ed6c4f738ae611e3edb437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:cb:39:b7:5f:33:4f:a6:09:7c:27:e4:a4:
                    fd:71:d4:24:c4:83:85:9e:80:93:ac:57:bf:32:25:
                    69:44:31:48:da:e3:ed:89:ac:e4:64:ae:c7:e3:71:
                    bb:3a:7d:4e:69:b7:75:f6:02:4e:fa:fd:58:fb:1a:
                    9f:64:8b:83:4d:69:ee:a5:c6:ed:68:2a:f3:57:16:
                    6a:52:91:d7:44:f6:e6:23:d7:c2:fc:ef:d4:69:51:
                    da:a8:ac:42:3f:84:6f:36:68:ce:99:5a:96:a4:eb:
                    c8:b9:d9:99:8b:6f:8c:13:60:f6:4c:0d:72:3b:b1:
                    8a:95:22:48:a7:c2:49:98:e2:7d:f5:1c:e7:75:4e:
                    ac:19:78:62:42:65:ef:89:fd:f1:ba:26:72:bd:ff:
                    d5:82:8b:de:48:5a:5a:08:a4:64:5c:59:66:47:87:
                    b6:54:ef:f2:a6:02:f5:cc:a9:59:88:e3:1b:68:cc:
                    5c:3b:ce:61:74:b3:a4:78:f8:76:a8:a3:96:b9:c6:
                    f0:78:fd:99:ae:7c:62:ec:e6:8c:41:55:a1:93:6f:
                    75:c7:ee:7d:b0:de:b3:22:2b:f9:70:88:f7:04:56:
                    e7:2b:a4:fd:56:d4:c3:f8:d9:c5:86:cf:40:c2:bc:
                    51:75:b5:31:f0:03:f6:ef:c9:5b:fa:b9:b9:93:f4:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F9:69:1C:B4:75:BA:28:90:ED:6C:4F:73:8A:E6:11:E3:ED:B4:37
            X509v3 Authority Key Identifier:
                keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:84:97:ff:f5:b4:bc:be:03:c5:cf:56:85:3a:1c:30:dd:
         56:61:80:fc:8f:45:ad:5e:d5:ea:0c:9f:57:ab:09:81:b3:c0:
         9d:7f:34:b9:d4:b8:21:1c:5f:69:50:92:13:71:29:93:a2:b4:
         4a:1a:6c:86:a9:46:7b:3f:6d:c9:43:41:36:5c:9c:41:e5:1b:
         ad:88:0c:57:1d:d8:6b:b1:c0:07:03:0f:10:d3:03:4f:9d:ba:
         f7:80:d8:7c:05:74:52:2b:ea:48:1d:ee:29:fb:f2:ab:47:15:
         20:71:4f:fe:27:86:b6:8e:50:8f:db:e2:ad:84:c9:57:fd:49:
         6f:58:3d:ce:4b:65:1f:09:e3:ed:04:f2:80:88:bc:0f:41:ff:
         2c:48:84:64:a9:a2:d1:97:5a:34:48:b3:54:a4:11:d4:2e:95:
         90:71:c0:41:55:4f:a6:57:35:38:6c:d0:33:0a:c1:a6:aa:5d:
         23:67:71:ec:24:c7:63:56:86:56:b1:a3:ed:2c:a9:74:92:6e:
         25:78:07:c9:84:a9:05:b3:91:fb:0b:0c:b4:c0:f1:bb:6e:4a:
         ac:e8:8a:6c:83:4b:13:a8:54:c7:db:63:59:3e:ce:16:b0:e0:
         33:06:82:d7:cd:e4:8f:5c:d8:e6:bb:a4:3e:ca:c7:47:05:ec:
         2f:aa:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----