Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File:                     b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier:          nr5YUzDL8W544OJBH9gLjGb1Y71h+hriSdPghNowMuk=
Subject key identifier:   DC:86:6F:B5:79:DD:35:3D:B3:F5:6E:F9:85:91:66:BC:4C:3F:15:30
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer:       /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial:       01962E61F196E05C96674B99D0AD8E08FF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: UX0yl9IDTSDEFmT/MNmWqsaEwpbZQ1iBN7c0gkdQSec=)
                          2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f1:96:e0:5c:96:67:4b:99:d0:ad:8e:08:ff:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=dc866fb579dd353db3f56ef9859166bc4c3f1530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:98:90:10:52:62:89:50:f7:35:98:00:cb:
                    fb:79:db:f5:50:a2:ac:20:4b:09:d5:82:bc:71:dd:
                    8c:a1:11:a5:f1:34:2e:6a:c6:dd:5e:a0:82:80:d6:
                    57:03:61:72:f9:f1:37:02:2b:ea:36:fc:e2:8b:b2:
                    35:15:af:12:3d:c2:df:68:f7:0c:cf:3e:12:7e:ef:
                    5f:6d:d2:b5:8e:da:aa:a6:88:af:dc:84:ed:2b:3a:
                    d7:a6:bd:9f:98:54:94:dd:a9:4e:d3:75:9c:14:c4:
                    f3:c7:f0:b6:75:51:5c:69:e7:ee:89:18:fa:2d:4f:
                    76:ce:bf:2b:ce:9b:ae:b5:3b:77:1d:8b:dd:4b:3f:
                    b5:b7:ad:b0:1c:da:52:53:44:ab:4a:26:03:52:f7:
                    90:60:62:5e:96:8e:e9:05:e9:b2:43:e5:27:22:94:
                    46:19:46:87:03:29:7b:03:ff:16:91:fe:95:41:6f:
                    11:70:08:25:61:89:f1:d7:3e:8b:df:b7:34:e6:dc:
                    54:63:43:85:71:2d:d4:67:30:45:f6:46:fa:98:37:
                    c9:17:0a:e4:31:09:00:4c:31:df:98:71:2a:e8:d1:
                    51:c1:52:a9:5e:5d:cb:c7:99:2f:2a:ce:0c:29:31:
                    ec:8a:f9:8b:23:e1:27:c4:24:6d:80:3d:30:11:b4:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:86:6F:B5:79:DD:35:3D:B3:F5:6E:F9:85:91:66:BC:4C:3F:15:30
            X509v3 Authority Key Identifier:
                keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a2:2c:a2:46:54:9e:b8:01:6a:3a:65:ef:6d:f7:ff:ab:60:
         32:28:a4:08:ed:b3:e1:e9:1b:01:e4:4c:2f:0d:3b:71:87:ba:
         85:3e:55:fc:22:08:bd:4e:f6:41:65:d6:19:50:69:9b:a2:b8:
         82:13:df:7e:cd:ae:c6:02:c7:27:b7:c5:eb:d7:b1:f9:3d:cf:
         a5:0a:f4:b6:52:56:32:bd:be:7a:c9:d7:68:34:71:b7:cb:d1:
         27:f3:b2:80:51:ac:db:e3:38:a2:30:c5:1b:a3:4b:5f:e2:96:
         77:f5:3e:07:90:b1:fe:d5:d8:09:0b:92:3f:17:41:9f:5f:9e:
         8a:4c:c4:15:70:3e:2c:48:19:31:05:02:23:30:95:d1:ea:ca:
         b5:6e:6b:19:e8:c8:cc:9b:f1:05:58:3d:5e:22:d3:e6:cb:15:
         91:f5:a6:8e:47:81:00:34:a4:d2:f2:72:d1:c8:50:c5:24:86:
         5b:87:8b:03:bf:86:10:f5:9d:1c:16:08:2b:c3:ed:74:b9:58:
         7d:9c:ea:75:4c:68:c0:06:3c:e9:09:73:7d:14:45:6b:55:50:
         8a:31:80:b0:75:71:86:1a:86:3f:c8:51:71:8b:40:37:75:ec:
         83:73:2b:53:b0:9c:b7:f1:71:41:c7:30:58:f6:a0:a4:01:86:
         10:df:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----