Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          sC2JDPVQLff1OH34tps/4LNR6Ga0wHLaq8J3Uoj52NM=
Subject key identifier:   20:D5:E5:30:C0:43:27:66:47:72:97:58:42:33:1F:AC:69:06:21:89
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       01962E61AC970E0B69A0F0F6998215DFBB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          0B67
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: 6LaYeeaf5kRxMgLK+JDRRGxOhQ9sHtyX7fp+YRPlFHk=)
                          2: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (hash: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=)
                          3: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (hash: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=)
                          4: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (hash: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:97:0e:0b:69:a0:f0:f6:99:82:15:df:bb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=20d5e530c04327664772975842331fac69062189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7f:2c:95:f5:f2:87:08:59:87:e8:e6:87:9b:
                    6a:44:3f:e8:9e:99:79:7d:00:f9:d6:18:46:97:42:
                    23:35:0e:40:44:8d:ca:27:7f:4d:ae:3d:7c:f3:30:
                    72:bf:2f:b8:46:24:66:20:0b:bb:7f:70:5c:42:2f:
                    79:00:61:b1:8f:28:92:51:59:1c:fc:6e:06:ce:9c:
                    48:8f:43:ae:45:39:96:99:46:28:0f:b7:e5:f6:ca:
                    2b:71:02:d2:87:60:f4:9d:88:78:42:d4:75:47:3d:
                    2c:64:54:98:a2:65:04:69:64:e9:80:e2:89:d0:56:
                    54:2d:4c:1c:55:57:96:70:5e:ba:5e:f4:46:4e:02:
                    eb:e4:d7:aa:5f:7f:f8:7b:0f:dd:d1:14:68:17:f2:
                    43:89:ca:80:ca:0d:17:4e:4d:4e:a2:8d:a8:85:ae:
                    2f:7e:c3:c8:d7:d4:20:b5:06:e9:14:a5:0b:de:2c:
                    bc:9d:c9:fc:a7:9b:46:6a:34:d5:a0:24:50:be:4c:
                    81:f7:02:ac:5f:66:f9:32:53:f4:09:d9:1c:47:9c:
                    79:5b:4a:43:14:3e:1f:62:0a:03:5b:07:d1:fe:b3:
                    36:0a:d7:d1:0e:9d:bd:e7:68:7e:72:98:0c:0f:3d:
                    05:57:a5:fe:a2:f2:e8:e0:03:2b:3a:02:06:c6:ff:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D5:E5:30:C0:43:27:66:47:72:97:58:42:33:1F:AC:69:06:21:89
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:d7:23:d1:ae:4b:b2:83:a9:2a:a6:81:ad:c2:07:2c:ed:08:
         54:39:4e:47:7c:79:61:a2:19:1c:74:62:65:5b:cc:af:86:35:
         0c:86:94:ba:7c:36:d4:65:17:3e:83:16:82:42:c2:b1:ad:6c:
         6d:78:9f:a0:33:23:22:17:5f:c9:c2:6d:f0:30:d2:66:65:b4:
         f7:68:8a:59:82:af:be:92:6c:05:82:7e:7f:82:7b:9e:b8:3a:
         6b:ea:f0:07:98:61:ed:69:54:b0:43:16:6a:ec:3f:69:65:ff:
         70:e3:be:c8:4e:15:c5:6d:bc:77:a6:49:cd:6e:12:0c:f8:d1:
         8f:04:29:4d:32:cc:02:89:75:08:45:52:79:e2:c6:fe:3d:9a:
         09:ca:73:f8:13:cb:f9:e6:f9:8b:29:8c:36:92:e5:e0:b1:9d:
         3f:ea:8e:5e:7a:92:ce:75:4c:87:40:f5:00:24:e6:0c:39:23:
         fa:c0:0f:de:d4:9f:cb:c1:d4:57:ad:82:cd:e0:17:70:d8:fb:
         66:89:e3:37:ae:79:73:54:35:ec:70:14:68:4a:af:59:02:1a:
         11:83:20:1a:90:f6:ef:a3:42:5c:92:2c:2c:3a:f2:55:76:f0:
         cf:c7:ec:6f:e7:84:4b:bc:7c:0d:7a:23:ce:26:67:b3:94:2b:
         9b:1d:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----