Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File:                     _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier:          4KT81Z+UeZbYp2Gwe7TeMCXnXzxvnh7THPK3m37DOTI=
Subject key identifier:   C1:3D:EB:1E:96:C9:F6:52:5F:C2:13:61:2C:D6:CE:50:8F:3C:88:5D
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer:       /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial:       01962F069342441E7F01A18C43AC26167F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
                          2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: iNvSpoT0/wYoS6zlmIW31/TUNcg1DaIOy4GQLvqkwak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:42:44:1e:7f:01:a1:8c:43:ac:26:16:7f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=c13deb1e96c9f6525fc213612cd6ce508f3c885d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:ff:ed:d8:68:a1:bd:0b:bc:54:7a:af:30:
                    cb:b5:8f:01:21:30:66:fa:c2:db:84:87:f3:9e:4d:
                    07:f4:b8:aa:85:5c:37:76:3c:9f:fd:0c:57:24:e6:
                    41:37:bb:15:36:dc:fe:ed:aa:61:74:c8:25:1f:54:
                    6e:2f:d1:b6:0c:b6:b1:eb:c2:63:bf:91:f7:1e:a6:
                    07:83:ef:13:98:5a:90:14:99:8a:89:52:6b:ec:a8:
                    c9:91:ea:ef:79:ce:6b:28:d6:21:18:ff:98:3b:1a:
                    da:a8:70:39:74:b3:c9:8f:f0:e7:77:6f:20:8e:ea:
                    af:a6:d5:e2:e6:d8:ba:96:62:2e:d0:d8:13:21:6f:
                    8f:64:51:4e:75:20:13:47:25:0f:eb:b2:63:11:88:
                    f9:7d:d1:68:5b:af:ed:d3:92:8a:1f:39:3e:2a:14:
                    25:4d:be:ba:fb:59:27:77:0a:d2:a9:7b:5d:bf:73:
                    d9:5d:45:f5:b3:34:e6:14:9b:42:95:6f:ea:b5:84:
                    94:c5:f0:e7:34:5d:b4:c6:bb:e0:d9:d0:7f:bb:17:
                    14:5b:f8:16:1d:6c:f1:c3:b3:8d:f8:e2:d5:69:e5:
                    dc:1c:af:04:74:94:36:34:3a:a4:ab:1f:6e:a6:66:
                    82:d3:96:af:c0:57:40:84:89:dc:56:17:49:75:86:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3D:EB:1E:96:C9:F6:52:5F:C2:13:61:2C:D6:CE:50:8F:3C:88:5D
            X509v3 Authority Key Identifier:
                keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:e8:8c:a4:21:21:9b:0e:9e:e3:b4:99:90:5b:7e:74:63:
         a3:22:f6:a5:b0:c5:f1:de:e6:e7:7a:24:d7:d6:4b:3a:17:1b:
         60:12:c8:4b:ad:69:be:27:e0:c4:cd:10:5f:00:43:ed:92:32:
         10:e2:c9:80:48:8f:e6:3c:14:91:c9:c4:3d:e3:99:e0:26:2e:
         96:26:99:9e:54:51:ca:11:38:ed:65:ea:c8:9a:41:4a:d8:11:
         7f:9b:9b:a4:43:0e:e9:5c:ce:48:93:82:b9:da:c6:ba:fc:b5:
         a1:9b:af:fa:1d:14:ad:13:39:89:65:8b:c5:a8:13:b0:63:fe:
         6f:d9:4e:0e:a4:47:ac:32:95:ad:3f:93:ca:58:cd:32:90:10:
         a9:11:f8:be:ce:6b:c1:26:a2:29:0b:a1:a6:6d:7f:2c:87:7b:
         60:55:67:f6:42:e4:94:7f:7f:1b:6e:23:f5:3c:e2:bf:59:4f:
         67:b7:48:00:96:04:f5:3f:67:f6:d9:86:45:56:2f:f2:99:4d:
         77:72:74:5a:a5:7d:13:c3:cf:73:31:07:b3:6d:56:d4:22:1b:
         c5:53:d3:0f:d4:04:f3:b2:21:a3:88:87:1b:d1:81:93:56:b4:
         f0:96:55:fb:c3:ca:f5:96:36:94:cd:e4:da:33:47:cd:57:54:
         1d:98:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----