Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
File:                     6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft (raw, json)
Hash identifier:          uMSo3hGjCbSvHdOKk6l9lsHoXNeBUd2O6cOsckOJle4=
Subject key identifier:   38:16:14:8F:B8:44:E3:92:48:3B:9D:89:EB:2B:A3:2A:A2:FE:AE:19
Authority key identifier: E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
Certificate issuer:       /CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Certificate serial:       01962F3DA98DE68A26B60B09954EC98CEFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa (hash: jcNgC8sUFB2sRMcieBCYPhWYxbrZslrozKmwIIc2sSY=)
                          2: 6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl (hash: M8yG39DuD810+OLA2ndXcdTZJF8utLn7QjkZxSL3BsA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a9:8d:e6:8a:26:b6:0b:09:95:4e:c9:8c:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=3816148fb844e392483b9d89eb2ba32aa2feae19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:d4:d2:48:12:90:ae:20:19:7e:e5:05:fb:
                    d1:2c:54:e1:be:f9:cc:b0:d7:18:2e:9f:a1:80:a9:
                    fb:d7:39:33:e7:0f:12:db:6a:cd:a0:eb:b4:e5:bf:
                    fc:c7:ac:34:e3:b3:a1:1b:9a:ed:9f:21:11:7c:e0:
                    13:1c:43:4f:f7:d4:31:f2:5e:8a:ec:1b:bb:cb:46:
                    21:80:bf:9c:aa:88:b5:d0:10:57:63:37:cb:a7:d9:
                    d9:c0:87:aa:2d:f1:50:d4:6a:e8:2c:e2:d6:cc:9a:
                    85:05:bf:21:15:a5:69:8c:17:97:75:91:0f:d9:f8:
                    0d:bd:49:35:38:ad:2c:c0:3d:3d:d5:d3:84:14:6c:
                    81:6b:f2:f2:c8:6b:a9:db:72:05:e7:f2:eb:06:05:
                    39:79:f9:9f:92:f0:c6:26:20:1a:71:7d:5b:a2:e6:
                    3b:94:39:90:00:0b:78:c6:86:19:5f:14:16:9c:6a:
                    b9:92:bb:eb:71:6d:c9:2b:d1:6e:46:ab:7d:f0:79:
                    bb:b2:d4:b7:06:f1:af:ab:a1:7e:d9:65:13:ef:54:
                    45:f1:7e:26:93:c9:3b:eb:4b:34:96:94:6a:13:94:
                    24:43:f9:ae:3c:9e:f8:1b:eb:02:c9:ef:2d:d8:e9:
                    4d:8a:a0:68:e9:94:7b:da:b8:3a:ee:77:b8:25:20:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:16:14:8F:B8:44:E3:92:48:3B:9D:89:EB:2B:A3:2A:A2:FE:AE:19
            X509v3 Authority Key Identifier:
                keyid:E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:52:68:63:51:8d:be:70:84:ca:1b:b9:84:04:41:0f:9d:22:
         c3:4d:fa:13:ad:de:14:89:e4:6e:29:df:40:7d:9b:2d:78:f4:
         70:46:8d:2a:64:74:c3:c7:f4:bb:5f:03:85:fe:8c:5f:2a:eb:
         d3:e0:fc:27:06:26:ab:09:b0:a2:d4:d1:a8:1c:af:c5:78:42:
         e8:2f:0f:eb:0a:9e:c6:08:5d:44:ed:4f:0e:38:0e:0e:dd:4c:
         8f:2e:1a:cf:97:d8:3a:f1:c4:61:2a:40:79:53:53:49:f6:ac:
         15:7a:80:40:a0:20:40:fc:55:84:c2:92:ea:73:54:4e:05:da:
         1d:50:ac:70:6d:a5:31:d4:0a:41:8f:aa:e2:a6:84:49:42:b1:
         ec:39:25:0c:2e:15:5f:69:f1:6b:61:70:17:75:34:f7:76:0e:
         e3:69:80:a1:40:62:33:ab:c8:36:51:8b:77:92:32:93:e5:d5:
         85:a7:c0:a4:fa:df:59:32:21:b7:19:aa:c2:60:c7:37:d0:b1:
         fa:a9:fc:df:b8:f7:ed:9e:8c:d4:ed:d5:18:4e:b3:6c:b3:cf:
         bc:83:f6:64:53:b8:71:b9:d1:ef:98:f9:3d:5a:d9:88:02:f1:
         8b:d0:ba:5b:33:c3:b2:c1:28:c9:bf:63:5c:d6:9a:fa:c4:02:
         12:33:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----