Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
File:                     6ySQqKEzr8STmogtt1JsFfiS6Mg.mft (raw, json)
Hash identifier:          j04g0/S3UYn2LHsGYyLmn/oF2SaoXFCReZP8tz5fMMg=
Subject key identifier:   03:2B:4C:AB:FA:CD:A1:A7:26:E1:30:4B:47:3C:7C:7C:3B:AE:A6:C0
Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
Certificate issuer:       /CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Certificate serial:       01962DF3EDD33284B8B4D307DDAD82EA1F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 6ySQqKEzr8STmogtt1JsFfiS6Mg.crl (hash: QKWdD7y0mqaGSCTFwIO2zI7xcAj2xYnAGOC8o7ZtmHg=)
                          2: dp2EkQj5_zKrlsEr5C_rrbMhRyA.roa (hash: mX2VEnqBHs2wq24qAd7nrxxeH5xEJp3U/9aLReWzccA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ed:d3:32:84:b8:b4:d3:07:dd:ad:82:ea:1f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=032b4cabfacda1a726e1304b473c7c7c3baea6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:f0:ff:be:93:45:c0:4b:c8:06:7f:8b:9b:
                    d6:4b:ab:7d:ef:f2:7a:c0:6a:93:b0:89:b3:27:b3:
                    e1:a3:01:94:bc:f8:e8:57:60:50:e8:1d:f4:c1:2e:
                    09:5a:66:6e:66:d4:81:d0:3c:4f:bb:c9:3f:35:d3:
                    3e:2c:9d:37:c2:d0:a4:2b:42:0d:2b:ea:74:86:81:
                    e3:c0:f8:f6:08:0b:f1:b0:44:22:be:91:67:9e:71:
                    36:d5:0f:03:a5:86:60:4f:53:2d:81:54:51:92:f1:
                    ec:00:8e:01:cb:11:6d:52:24:c6:05:3a:2b:6d:1d:
                    7c:3d:ba:4d:d7:ab:ef:86:ab:8d:89:66:fd:ad:e6:
                    a4:b0:58:cd:f3:61:c1:06:23:0d:9b:f1:13:a1:fe:
                    53:0c:a8:32:bd:19:ab:88:54:89:c3:ce:2c:a4:c7:
                    93:16:e9:11:25:e9:c9:06:c4:3e:55:84:d5:46:ce:
                    ec:25:4b:cc:b8:d8:bc:69:72:c0:56:c9:49:75:53:
                    d5:6b:7e:10:58:34:c3:45:39:ec:1b:ab:5d:9b:4e:
                    25:87:3e:02:29:f8:76:71:2d:00:97:49:80:f8:d7:
                    bf:f6:46:bc:2d:15:e1:fb:9e:07:2f:0e:e3:f3:93:
                    3d:20:82:4d:e1:ce:58:8a:0e:86:97:b2:cf:3f:b6:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2B:4C:AB:FA:CD:A1:A7:26:E1:30:4B:47:3C:7C:7C:3B:AE:A6:C0
            X509v3 Authority Key Identifier:
                keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:37:90:3a:81:ce:c5:8d:ae:d0:e1:43:d3:61:47:d0:8d:fd:
         88:da:70:06:89:ac:b3:64:45:9d:31:11:a2:19:61:b3:70:bd:
         76:73:ce:7b:9b:6e:b5:d7:4f:1a:5e:87:aa:b8:78:19:3a:5c:
         28:71:5b:57:f5:c0:01:14:f4:dc:57:e1:8d:f4:71:79:bd:d5:
         4b:c6:a2:bf:51:6d:db:6f:8b:4a:54:b5:a3:fa:ea:5d:7c:50:
         9e:61:1e:c2:59:45:d6:34:42:29:87:be:82:e3:b9:e6:9e:dd:
         ae:75:6b:51:bd:eb:f2:82:77:b6:31:f7:a7:3e:c5:4a:04:3e:
         d6:6a:32:4f:57:f4:35:84:a6:95:98:86:d5:49:3e:b6:04:ed:
         f9:db:58:62:66:5e:e3:1c:60:45:55:63:ab:77:f1:ac:40:c3:
         38:c1:4c:a2:47:a1:1b:73:17:51:13:2d:28:1e:fa:cf:46:92:
         bd:c5:a7:9e:49:8f:5e:09:23:75:2b:1b:35:98:45:f7:49:86:
         b8:7d:1f:31:f8:c9:85:7b:01:6c:fe:b6:ba:64:d2:3f:ba:a8:
         84:27:11:2c:e4:30:f2:90:2e:27:08:67:53:3e:73:f6:19:18:
         36:42:fc:5c:a6:4a:ba:38:db:2d:6a:b4:79:16:55:62:d6:ec:
         5e:19:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----