Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File:                     brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier:          xvOUiLUncoYFyP9UbxN57NjHVN18odSnq/XOBoQY+mM=
Subject key identifier:   1A:4B:5E:DE:0C:F8:D8:22:28:18:9B:0E:5C:2E:32:68:C4:8E:67:50
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer:       /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial:       01962DF3CBFD9B1C23568D0886E3BA93F9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: 1dit2OGg9tY6enWPLUqfPLN3CHc7UFOf7nrb4XXTpQU=)
                          2: g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa (hash: 8/pCEAAfgXJlCEBGR3f8pKtVLnpOv7/3Vi60Zm9zN6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:fd:9b:1c:23:56:8d:08:86:e3:ba:93:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=1a4b5ede0cf8d82228189b0e5c2e3268c48e6750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:00:48:fa:73:9b:45:60:29:34:ca:6e:21:
                    1e:5b:43:d7:12:77:51:d2:6f:03:6e:da:56:12:98:
                    29:3e:e1:7a:0c:e2:ee:ba:db:1e:fc:aa:d0:81:23:
                    56:b3:6f:9b:30:ee:36:9c:a9:6d:de:f3:57:04:f4:
                    c9:78:03:f2:b8:9b:75:5e:11:d9:34:cc:9c:5f:7c:
                    1e:af:1a:54:ae:d4:63:25:a5:0f:51:cd:75:0e:92:
                    da:3d:26:fc:32:5d:34:e0:30:d5:ea:6b:51:fb:bf:
                    f4:3b:47:e3:88:08:5f:d2:6e:30:7a:85:71:d9:78:
                    71:6c:be:84:c9:d8:ef:89:8c:d6:df:a2:ef:7f:37:
                    92:50:bf:6d:5b:e3:25:81:fc:d9:d8:e9:fa:34:b8:
                    4a:ee:41:37:c4:27:41:50:ef:09:8f:7b:6c:9c:76:
                    b8:24:bf:84:0d:3a:be:a4:ea:06:bb:a8:22:a3:58:
                    e7:80:f0:84:fc:95:38:06:9d:36:49:69:21:62:95:
                    63:f6:b7:df:de:05:79:fb:e2:bd:55:c6:eb:8a:0d:
                    d8:53:b9:1f:2f:b6:78:af:32:29:a6:02:0c:cc:3d:
                    7a:9b:3f:bc:0f:41:19:d7:bd:dc:5f:ea:22:89:6d:
                    6d:86:00:26:3e:59:88:86:5f:5b:a8:9f:ad:3f:cb:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4B:5E:DE:0C:F8:D8:22:28:18:9B:0E:5C:2E:32:68:C4:8E:67:50
            X509v3 Authority Key Identifier:
                keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:13:c8:6f:78:47:3c:bc:e8:95:9c:79:39:9c:c7:26:3d:
         1d:b0:c5:b3:dd:2b:6c:f5:4c:44:60:1d:94:95:bc:ec:0c:18:
         cb:07:63:15:87:9e:fb:05:4e:20:b4:36:9b:1b:00:8c:09:8c:
         0d:9e:53:da:95:18:36:4f:20:5b:48:99:6b:22:02:f7:72:bd:
         d7:ee:d0:a8:ed:f6:f1:1f:3a:bb:37:42:d9:37:d7:f5:21:92:
         a4:2c:29:8d:5a:4f:db:51:d2:b3:1d:96:b2:ae:47:13:b7:67:
         fd:fc:9a:bf:65:1a:89:f1:1b:a6:92:c1:fc:9c:b9:8b:b9:c9:
         3b:ea:20:ed:96:87:a2:21:50:35:19:84:9e:2d:75:7c:49:f6:
         6b:bd:aa:fc:2e:a9:9c:1d:0c:dd:d0:3a:cd:be:d9:ce:6a:43:
         b6:fc:a0:40:e8:ca:73:13:8d:02:26:5d:7d:fa:95:6f:24:fc:
         6c:b3:a3:7d:f7:9f:35:ef:50:6d:8b:08:05:3c:d2:38:f4:4c:
         1c:29:de:57:50:97:2b:bc:28:2b:85:1c:a0:ea:f3:3d:65:d0:
         0f:5b:1a:4d:1c:16:61:6b:e6:7b:4f:c3:66:c4:2a:9e:23:2e:
         f2:4a:35:4b:3d:4c:75:22:b7:f1:5c:41:be:92:a3:68:2f:af:
         98:90:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----