Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File:                     6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier:          Uxl9kyU3qgkbjqikSfNtnRkegmQVrB2zrJ5PEcC69Io=
Subject key identifier:   A4:E5:AA:5D:71:04:23:77:11:5B:84:7B:3E:7D:8C:78:89:51:75:A5
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer:       /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial:       01962F06DE0535C5EFF80C12160D8A7DC5A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number:          08D5
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
                          2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: LdM4seahh7XcWFu62iwwEVTi/FBsJam81cAq7Alg+pI=)
                          3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:05:35:c5:ef:f8:0c:12:16:0d:8a:7d:c5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=a4e5aa5d71042377115b847b3e7d8c78895175a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:9e:99:79:e9:d8:aa:54:21:91:86:39:a2:
                    c7:ed:21:78:97:09:b3:cb:40:ff:0a:c2:fb:1d:26:
                    8b:95:36:41:1f:70:81:db:ec:4c:85:93:7c:65:ce:
                    c3:46:50:3f:d3:21:36:1a:82:8c:83:41:ab:ea:cc:
                    aa:5a:9d:0d:d3:67:9b:93:74:02:84:f9:9b:91:b7:
                    72:52:f0:ef:97:5c:34:86:26:c9:96:06:7b:0b:48:
                    18:22:6c:ce:a1:0f:23:12:bf:27:31:63:5f:1b:6d:
                    09:7b:e5:25:0a:77:02:92:68:1d:68:ee:a9:88:9b:
                    fc:bc:d4:38:9e:cd:9c:00:84:95:70:80:95:c2:a1:
                    f1:e4:3a:49:43:3b:51:b8:7b:06:c9:1e:b2:1a:60:
                    a3:f7:96:c1:f9:4e:c5:1b:0c:a9:72:71:4c:0c:93:
                    87:92:f5:b5:65:d8:95:86:49:fa:8b:2b:f5:1e:e6:
                    04:59:1e:72:b5:62:c6:67:46:6a:76:be:f2:ad:9b:
                    e7:15:05:13:e5:fe:80:d1:bc:ff:d3:8a:01:d9:d3:
                    b2:b7:30:96:a5:19:3f:c8:9a:3e:e7:f4:63:a1:0a:
                    db:21:e9:ec:f3:08:02:40:fb:a5:a5:fa:ec:59:74:
                    e2:3c:ea:0c:00:33:99:28:bb:4a:a7:d2:77:a9:9d:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E5:AA:5D:71:04:23:77:11:5B:84:7B:3E:7D:8C:78:89:51:75:A5
            X509v3 Authority Key Identifier:
                keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:e2:db:47:24:51:c9:f9:ab:4f:e9:ba:75:42:d6:e2:63:
         be:a9:1e:2a:22:3c:cb:d0:82:31:57:99:3e:20:8f:d3:cf:89:
         d6:aa:e6:d0:dc:99:d6:47:4f:16:fb:aa:b8:18:44:ea:04:1b:
         bd:45:e1:c5:04:bf:74:5a:38:15:39:46:6c:f7:11:6a:cf:86:
         ec:21:6c:2a:ae:c1:32:32:9c:8a:21:ce:5a:8f:77:cb:5f:a8:
         11:59:f8:c0:f2:e0:25:60:a4:c7:ec:73:15:12:f8:83:d3:3f:
         04:4a:41:10:c1:d7:1d:0e:73:f4:fe:59:9f:f2:42:b9:b5:8d:
         a8:87:f5:5c:b4:b1:39:c2:8f:99:cd:4e:84:0a:21:a3:31:ea:
         b1:7d:49:52:8f:12:a0:ec:c3:52:3a:34:c2:0c:0f:fe:a3:b1:
         8e:ce:88:29:01:66:d3:d8:cc:08:bc:78:9e:0e:49:8a:97:9f:
         e2:9c:b6:57:c5:71:f2:fc:f7:3c:ab:16:cb:38:8d:71:c3:fa:
         79:36:86:ed:db:81:ab:4b:d0:67:90:d9:ef:0e:b0:80:ad:fb:
         ba:a8:5c:f3:0b:f6:47:81:a5:26:56:21:68:c5:ac:02:b1:12:
         b7:51:99:9d:16:39:c8:8f:be:33:c8:d4:7f:ae:f8:2e:e5:7e:
         97:91:4a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----