Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          A4ghUJNzaZG2XTtuDIJvBBPSqsm8t0xjNDkYCv9M9mM=
Subject key identifier:   DA:50:65:67:AE:61:CE:31:BF:99:D5:32:28:20:7C:BE:D8:31:42:1D
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       01962E2B00BE7E5C5A4C4B97D6342E88CB33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: NiLKJEehHvQ1Rmgz3UJ1f+QxhuGa1q9PjPPqiA8FKsk=)
                          2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:be:7e:5c:5a:4c:4b:97:d6:34:2e:88:cb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=da506567ae61ce31bf99d53228207cbed831421d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:f2:c0:ba:3b:4c:7e:06:00:11:c5:06:7a:
                    6d:4c:59:fa:2f:47:ea:e1:81:ef:50:65:d8:14:c3:
                    ab:a7:84:4b:67:56:55:7c:5b:fb:3b:c4:81:ba:7f:
                    6a:12:3c:7a:fa:ab:f6:30:a2:67:d1:c7:12:27:f1:
                    b8:b5:5a:4a:2b:c9:66:95:52:89:78:41:f3:d6:cd:
                    47:f4:a6:34:43:9f:ff:40:24:3b:0d:1f:24:1f:ac:
                    f3:94:ce:4a:e2:f0:0a:53:a2:44:3e:6e:f6:b3:38:
                    aa:81:e1:45:bf:bb:1f:bd:6f:ae:33:45:31:ca:77:
                    42:a4:49:cd:ca:65:ee:82:f3:1e:59:4c:e5:17:af:
                    16:75:78:70:6a:3b:f0:9d:f4:66:db:af:8b:60:4a:
                    76:e7:ea:a2:01:d0:da:be:ad:e0:7a:56:95:88:cb:
                    5c:b7:33:b4:2d:be:9e:55:39:b3:db:7e:4e:2d:e5:
                    ea:d5:67:f7:55:90:4b:04:bc:a0:19:b7:a3:aa:6a:
                    8c:d6:31:26:18:b1:69:1c:08:0c:d7:02:6d:1b:51:
                    36:77:21:28:f1:aa:93:00:bc:4e:3e:3a:8c:85:a4:
                    6b:e9:7a:fe:95:2b:22:10:ca:96:4a:a2:f5:68:18:
                    39:fa:ce:78:9e:f9:73:08:5e:73:ae:a1:9f:a3:ee:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:50:65:67:AE:61:CE:31:BF:99:D5:32:28:20:7C:BE:D8:31:42:1D
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:22:35:10:5f:9f:17:22:03:ee:64:77:d0:b2:b5:d8:2f:f1:
         45:71:74:f3:a3:62:d5:8e:e5:b2:b0:31:5d:a1:88:6d:e9:6d:
         f6:82:00:1a:f6:5c:f1:18:78:98:b4:15:95:fa:a6:4f:b8:13:
         73:a1:9e:d5:3e:ed:52:da:71:17:7b:e0:42:ec:27:74:5b:15:
         19:2c:52:95:1c:6f:97:72:46:7a:12:08:aa:37:09:04:5d:2e:
         d4:4e:d1:70:f4:eb:19:fa:d4:32:21:e5:f1:d6:c4:20:55:1e:
         1b:ef:53:46:91:73:cd:10:e3:0c:dc:ac:83:cc:4b:e0:45:77:
         86:89:46:7f:3f:67:7c:c9:86:d0:a7:bf:6a:d6:11:07:75:d6:
         22:38:5b:b4:3e:cf:75:d4:7f:5c:32:ee:14:91:cc:70:06:51:
         2f:14:e7:bf:35:1d:5d:76:56:e2:76:7b:56:33:7c:5d:95:65:
         bc:d0:1d:16:e5:87:93:40:a5:41:f0:c6:b6:0f:27:ce:a9:5d:
         ce:bf:cb:08:0c:21:c3:11:7e:91:cf:8e:af:f3:eb:61:2e:12:
         72:e7:f0:b2:df:55:d9:fe:a1:d0:67:93:19:27:34:64:80:35:
         46:97:1b:48:dc:3e:57:6b:a0:89:bc:9f:7e:5f:d3:e3:2e:3b:
         2e:55:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----