Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File:                     byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier:          yZXJ5eMSbsjYeNBDcbGJWUO34mGXuRYiUnO2oAJDAaE=
Subject key identifier:   F4:B6:2C:75:2A:D7:A8:BF:DA:28:DC:86:29:6A:1D:B9:05:EF:47:66
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer:       /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial:       01962E2AF85EC8DB1C164F89869F41CB7663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
                          2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: CV2E+xB4I8nWqgQbcvYwLvi5yHeUO3ZD2bNkbt1auGc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:5e:c8:db:1c:16:4f:89:86:9f:41:cb:76:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=f4b62c752ad7a8bfda28dc86296a1db905ef4766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:f1:f5:83:d9:4b:74:d1:a4:fa:ad:0c:38:
                    24:d1:c3:e6:b5:c4:a9:19:21:ec:15:cf:b4:2e:c4:
                    f0:c1:9d:92:75:a4:31:25:3b:7b:51:c8:74:05:ce:
                    a6:ff:7d:5e:6c:71:52:08:a2:88:79:ba:32:31:33:
                    54:2b:1c:ea:c2:6d:20:6f:6f:e9:08:9f:01:28:78:
                    0e:64:0f:b0:e5:b7:e0:9e:6e:c5:28:c3:ef:9b:93:
                    2c:05:06:f9:7f:4d:4b:aa:25:da:22:2a:19:bc:7a:
                    bd:e9:fc:c6:7f:69:3a:f0:85:7d:62:c5:3f:75:12:
                    ce:16:01:8f:25:bb:ea:0c:94:83:65:04:60:df:06:
                    0a:61:6f:93:48:a3:18:b5:d4:f6:4e:75:24:2f:e0:
                    c4:c0:e7:ab:46:63:be:ec:f1:cd:ec:fc:04:2a:7b:
                    bc:af:0f:ae:a5:97:71:93:69:57:4c:f2:3f:25:d0:
                    f2:57:e0:19:67:89:7d:2d:a2:16:92:b7:43:43:a0:
                    6c:97:52:e1:7c:bc:8f:67:08:b5:c6:04:f7:40:d2:
                    e7:6e:cd:c4:d9:ab:02:a0:66:18:1f:0e:d1:51:b8:
                    e4:c2:11:26:5c:c2:d4:d4:5b:bd:83:24:eb:05:1f:
                    34:fa:9b:d4:ea:68:57:75:22:eb:06:80:16:c3:fc:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B6:2C:75:2A:D7:A8:BF:DA:28:DC:86:29:6A:1D:B9:05:EF:47:66
            X509v3 Authority Key Identifier:
                keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:86:48:75:3d:92:95:3a:a4:fa:ba:41:2e:51:cb:75:6a:34:
         2e:d2:ea:1a:9f:33:ef:87:2b:ae:da:d0:d3:bf:ab:bf:38:69:
         9c:06:e3:24:8c:80:7a:a6:15:00:dc:54:0a:50:ad:6a:33:b8:
         2f:52:51:9a:fb:46:64:88:dd:58:36:81:6d:ad:44:69:99:12:
         40:83:99:37:b8:1e:42:1a:06:c2:d1:bf:61:f9:48:96:9e:3e:
         8a:26:2c:50:ce:fe:f4:b9:dd:ab:11:c8:ba:16:e5:25:1c:11:
         cc:62:c7:32:d0:b9:4e:ab:b3:e7:7e:07:c6:2a:47:cb:72:b0:
         b8:be:17:8c:b0:65:7a:b3:b8:d7:b3:27:08:07:46:5c:05:23:
         11:ff:e2:e2:c9:27:98:ed:20:89:3b:f0:75:57:d4:78:6c:e2:
         04:dc:dd:77:06:07:f8:8e:1a:6a:a0:38:a7:a6:c9:17:00:d9:
         2f:94:f9:8f:bb:b4:ea:25:0e:8b:69:e7:1f:96:aa:73:c3:c9:
         e2:81:50:4e:13:1a:ea:1a:3c:56:aa:af:59:7c:94:38:55:1f:
         17:77:ce:c6:2a:4e:7d:bd:04:44:79:f2:b9:b2:43:2f:2a:8b:
         92:ec:e7:6d:d9:49:41:60:1d:9e:e3:ca:42:4f:d7:25:fc:ee:
         b9:1c:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----