Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          4sF7ctp9IYUwMXkNA9GIEERnoTvTY6xkMesLuAV5yPo=
Subject key identifier:   64:7D:82:78:58:75:46:CD:E8:32:C2:1C:70:E9:18:96:C2:FD:D7:5B
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       01962E987A5491481963D313B3586F085E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          08D2
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: IRutcCJEBlsKLHTBJGI9k9j4E6hqHv2352DuVQmZt+0=)
                          2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7a:54:91:48:19:63:d3:13:b3:58:6f:08:5e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=647d8278587546cde832c21c70e91896c2fdd75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:a1:e8:de:33:39:d1:4f:f2:fc:b2:3d:22:
                    c0:96:28:a9:6f:56:0c:2f:e1:66:30:5e:4d:d3:be:
                    47:e1:18:14:dc:57:29:e6:b7:f5:16:c7:94:37:11:
                    7c:b7:1c:bc:c7:2b:dc:fb:63:78:86:f3:a6:41:db:
                    d7:6d:f5:62:c2:f2:21:9b:db:bd:45:b4:d0:6e:57:
                    0a:b0:30:d8:ab:a7:3c:d6:21:10:2d:c2:4c:b5:18:
                    c2:6d:0d:46:14:bf:21:ee:d1:15:d7:40:7c:a4:84:
                    63:0e:af:26:5c:09:fd:ae:1e:29:35:4f:88:40:46:
                    74:3b:1a:ed:93:fc:e0:53:ec:25:a4:45:3d:d9:82:
                    aa:19:60:de:5b:d6:5b:8e:e7:3f:86:8d:5a:6a:dc:
                    be:6d:dc:f7:d6:ee:df:87:47:38:05:a3:d8:01:9e:
                    43:74:bf:17:05:d7:aa:3e:15:c4:62:27:eb:91:6f:
                    7d:e0:0f:77:96:64:5d:0d:ac:2b:a6:5f:4d:23:00:
                    00:c8:24:f8:9d:0e:95:ed:97:43:96:88:fe:fd:51:
                    fb:57:1c:64:1a:d8:af:17:0c:ad:02:85:5f:52:4c:
                    da:8e:80:4d:db:60:1b:e6:6f:21:72:82:27:40:94:
                    05:6e:e7:a2:a2:72:de:44:aa:53:0a:59:3d:ba:8b:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7D:82:78:58:75:46:CD:E8:32:C2:1C:70:E9:18:96:C2:FD:D7:5B
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f5:7f:34:26:72:2b:0f:c0:07:ee:03:93:3a:b2:8b:ef:6c:
         32:f1:01:74:82:72:3c:62:27:4a:29:54:ab:5f:f7:b9:98:13:
         53:8b:96:98:22:dd:f1:4a:57:bd:6c:6f:70:13:f6:81:85:da:
         6f:0b:58:d1:b4:c4:85:b9:4f:90:f7:31:04:0d:ff:6d:c2:0f:
         86:a9:47:59:45:e8:21:59:44:7a:f6:86:66:00:e2:de:42:8f:
         4d:d2:00:a7:d7:c9:dd:da:5d:c2:73:82:53:a2:28:96:ef:4a:
         37:e5:e5:73:52:be:fe:6f:f2:c2:55:48:df:4d:27:47:9f:fa:
         ae:35:0a:88:1d:7c:dd:a2:be:0d:38:bd:35:5b:75:29:9d:50:
         32:c3:28:be:a2:34:8d:d9:5f:9b:85:98:e3:9a:4f:1c:5f:0a:
         58:22:57:b5:9f:8a:a2:f6:57:0f:df:14:84:1e:4c:af:86:19:
         1d:ff:c8:f1:26:57:6b:48:6e:23:81:af:f2:d3:55:33:20:80:
         cc:e4:f3:0d:83:0f:c9:3b:07:43:b2:53:69:e7:a0:ed:16:80:
         b8:2d:a0:ef:19:24:ba:a8:10:3f:a8:72:a7:66:ea:19:54:24:
         82:a0:25:cb:e1:30:63:41:56:08:f2:ae:89:76:3b:57:91:e3:
         ff:f8:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----