Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
File:                     RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json)
Hash identifier:          Beu4+YttQeVQ1c8XIHr+k3kNVrRec0xbxhBx+OO0R0U=
Subject key identifier:   66:00:94:98:64:E7:F5:28:FF:1A:3E:A4:3A:52:35:28:75:AB:8E:5E
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       01962E98C028E33D3E02BF3AA78B2C122AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
Manifest number:          0F11
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa (hash: emZiRG679KNDGOj4cCA2StKFReSvhFA5nV/8wQXC5Cw=)
                          2: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: shH3D4RM8NhpNOVLJO8fTwSHZRH+2Q/jAQynycjnONE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c0:28:e3:3d:3e:02:bf:3a:a7:8b:2c:12:2a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=6600949864e7f528ff1a3ea43a52352875ab8e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:fe:73:7d:39:50:0f:99:15:65:57:79:b9:
                    92:30:cf:2a:59:23:6b:39:fb:67:99:5e:10:ad:73:
                    db:f2:19:da:50:70:f9:1c:e3:dd:88:af:72:20:0c:
                    c3:e9:99:1c:dc:60:2d:82:24:79:d0:ff:2b:10:37:
                    0d:2f:15:11:b9:9b:3d:5d:9c:a8:cf:d7:e1:82:e1:
                    c8:a4:87:63:02:4a:fe:3f:ce:e2:ab:d8:5b:a3:9c:
                    52:16:10:83:85:e4:79:4b:38:0c:f8:39:60:6b:d8:
                    18:f8:ba:97:38:96:0e:eb:e2:c2:b5:e2:2e:43:14:
                    7d:25:de:2d:1f:1b:d6:94:6f:ec:1f:7e:19:a9:8d:
                    15:2c:7b:8c:8e:a5:10:48:4c:56:6a:a1:68:29:a8:
                    c0:b9:f6:5b:37:08:7b:e6:f0:62:16:c4:cd:0f:06:
                    a4:21:ba:7e:57:ec:ea:21:ae:52:d9:7c:98:12:2e:
                    e2:f6:2a:22:e7:5e:d5:ee:22:bf:1a:3e:5e:77:38:
                    c0:ab:47:5b:e4:d1:8d:e8:21:20:bf:30:a3:66:ee:
                    cf:79:2a:fa:5f:83:d6:42:9d:ff:3d:98:3c:b5:30:
                    af:de:d5:80:8e:42:a6:88:47:92:bf:f0:24:d8:23:
                    54:36:98:1d:ce:20:c2:74:60:7c:98:05:5f:55:6e:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:00:94:98:64:E7:F5:28:FF:1A:3E:A4:3A:52:35:28:75:AB:8E:5E
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:07:94:02:dd:14:70:0b:61:71:54:f0:a9:8e:ff:d2:83:57:
         e7:7d:b6:7b:2f:39:24:f6:c7:af:f6:ac:43:99:d5:ba:3b:4c:
         6d:a9:42:e0:ea:82:79:62:f6:a3:27:02:17:e8:83:8e:c1:a7:
         e6:60:5d:ee:c8:6b:d5:6e:0b:3f:07:38:ea:8b:03:c8:84:88:
         da:eb:ef:2b:7b:88:6b:61:52:be:a8:02:8b:7e:87:f5:b1:05:
         df:ae:72:94:53:84:ca:4b:69:6b:a6:85:05:28:74:e6:11:3c:
         a9:0e:79:d2:1c:b6:b4:60:3d:b3:39:fa:72:07:c9:da:39:fa:
         da:1a:9d:19:e9:f5:5c:c1:83:64:f3:36:44:8c:19:a7:11:50:
         76:3e:21:63:34:78:b5:f7:a8:5b:c8:97:39:0e:f5:f7:c2:78:
         a7:ed:d3:27:5c:05:5c:5d:80:c7:d1:a5:ff:52:41:4f:e4:2c:
         68:fd:e0:a8:18:8a:8d:32:a4:6d:0a:78:5f:c2:e0:d6:c4:d3:
         70:84:57:69:6e:c8:d3:41:43:2c:5a:d5:53:7c:f4:d0:28:e1:
         c0:60:0e:29:ff:89:b4:2b:e6:e8:e1:c6:7d:32:fe:c3:d6:ba:
         c5:75:36:40:4c:9c:39:68:65:10:e1:30:90:f3:e7:d0:6a:5b:
         54:0c:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----