Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
File:                     a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft (raw, json)
Hash identifier:          +a6fOETQLfeueW7qXuSpyMFzafTU+zTe9YWQLSAvcRo=
Subject key identifier:   54:58:04:2C:82:1E:CA:32:84:42:82:C7:BB:08:6B:3D:D6:C2:63:CF
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Certificate issuer:       /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial:       01962F742E9452141EBAE4E3675A7419FFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
Manifest number:          0669
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl (hash: mujj6iBSukkY57IgHPuESEowLpfCn851dvYWU5Syp8Q=)
                          2: tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa (hash: Wy9lKsdp9Di7MryHAEfUWFGv7fEx23Pr2YF9NFfmLVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2e:94:52:14:1e:ba:e4:e3:67:5a:74:19:ff:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=5458042c821eca32844282c7bb086b3dd6c263cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:e4:68:a4:0b:33:23:00:a5:00:b5:6f:9b:
                    c6:cf:59:7b:99:22:79:0d:0c:52:83:89:97:1a:21:
                    95:a2:d5:3f:5e:0a:5a:4c:55:4e:7a:30:64:b2:45:
                    32:d3:0b:35:65:75:2a:06:47:3b:ad:1d:42:6b:d8:
                    6b:a3:b7:ce:42:a0:c5:aa:84:1f:9d:ae:aa:68:66:
                    2d:75:79:af:a0:e9:05:6a:e1:4e:cd:23:44:c5:fc:
                    be:d8:44:1b:99:e8:e5:cc:f0:4e:53:30:ce:ce:fb:
                    13:23:4f:67:82:88:a6:23:3f:e4:f6:96:3a:42:ee:
                    39:3f:6e:93:02:1e:5f:25:14:07:81:1b:85:0e:68:
                    34:c5:ff:2c:4b:e9:8e:9e:cd:b7:61:d9:00:d1:4e:
                    d1:87:f8:7e:91:8b:58:c5:de:9c:f8:15:11:47:4c:
                    e6:67:74:fe:36:87:9d:c2:84:db:50:41:ab:f3:2d:
                    ab:91:90:fe:b9:92:92:23:7b:dc:e0:03:d6:b8:86:
                    da:b3:ba:3e:e3:90:61:d6:a9:2d:e2:11:d1:37:54:
                    61:26:0f:49:f2:4b:ef:1b:9e:d6:66:3e:06:2e:ec:
                    e5:89:e8:c7:93:94:8b:a6:d2:28:2f:1e:22:f2:d8:
                    a3:a1:97:1e:d9:03:5b:1f:b2:d9:33:d5:79:3e:2d:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:04:2C:82:1E:CA:32:84:42:82:C7:BB:08:6B:3D:D6:C2:63:CF
            X509v3 Authority Key Identifier:
                keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:62:76:79:0a:75:a4:3e:01:a7:28:a7:66:30:12:26:f2:
         43:a0:1c:d9:cb:12:e4:c1:33:5c:02:45:8d:2e:d5:57:79:4f:
         b1:54:89:2d:51:57:01:04:1d:42:e3:34:04:45:14:e8:1a:94:
         b3:d1:58:50:d3:75:f4:f7:18:b9:f3:2e:9f:15:03:6a:19:01:
         b8:d6:f2:86:e9:60:e9:cd:6e:45:c8:71:d7:75:5f:2e:46:8e:
         b8:ca:40:29:2f:0d:60:a2:df:7d:f8:b5:57:7f:db:57:55:ed:
         e8:28:8f:96:76:d9:94:f1:6b:8e:2a:25:5f:79:c8:e5:cd:7d:
         ab:4e:d9:db:ff:82:17:9c:d4:f7:3b:97:30:11:9f:11:be:c9:
         bc:5b:8c:53:52:c1:ed:24:23:54:ca:29:21:12:85:62:82:72:
         05:1f:d7:03:78:1b:41:aa:15:53:51:82:c2:a5:a8:26:ae:a9:
         e9:83:03:97:28:67:29:9e:00:ce:d6:34:db:56:d2:53:5c:ea:
         76:8a:3e:6a:b6:1f:d5:f8:cb:cc:95:fd:0a:6a:27:0a:c2:a9:
         2d:13:d3:37:e8:b9:c9:81:e9:e4:2d:79:02:5c:59:c8:c2:37:
         6d:c2:e3:91:dc:96:17:30:a6:a1:2f:1b:f6:e6:06:e5:b5:95:
         32:7a:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----