Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          kN8qomrZiToMyNuCKMP5P5r1E3eNwpDBbd6MhY1+TBk=
Subject key identifier:   39:FC:A1:AD:8A:79:CF:89:BB:17:79:7A:D3:3B:FC:A5:8D:BC:4A:DC
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       01962F74724A691C7C46ECDB3C324078D0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0B6E
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: kIeka0OxuIlnIgZeRgBq5ZBaGbhML6t82oc/QxIdpEA=)
                          2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:72:4a:69:1c:7c:46:ec:db:3c:32:40:78:d0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=39fca1ad8a79cf89bb17797ad33bfca58dbc4adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:12:27:7b:29:1c:68:4c:13:5a:c0:27:f3:
                    ac:27:d0:69:30:04:88:de:b5:d7:31:04:2a:b1:0d:
                    b8:2c:cf:21:01:76:46:9e:df:f8:64:ad:42:5e:d1:
                    7f:bc:be:20:7b:24:49:7d:40:5d:3f:ed:00:b5:9f:
                    42:82:1e:e9:5e:d3:84:a5:94:27:07:86:26:77:72:
                    50:8b:6f:f7:d2:69:ca:58:12:79:f0:0c:57:6f:48:
                    98:82:0f:d6:d5:3f:7c:06:27:40:ec:d0:04:0d:df:
                    c5:e8:0e:7d:04:d3:60:fa:b5:72:12:08:57:a0:04:
                    a2:62:d4:9b:0f:af:b3:8d:11:6c:13:d6:5b:1d:97:
                    48:6c:a2:f1:50:79:34:f3:f1:5d:dd:c1:2e:19:9c:
                    9e:7b:1a:53:e8:c3:a9:44:7e:fc:c2:ea:ac:2e:2f:
                    9d:2a:97:ef:2c:72:aa:01:49:c6:47:97:12:31:1c:
                    c2:5f:a4:25:c8:fa:b3:06:9d:2f:2c:cf:cd:9d:e1:
                    1d:76:c6:b2:a1:13:2b:0b:c5:59:30:21:ba:b1:13:
                    dd:89:af:1f:8e:ef:9b:8e:0b:a5:2b:75:6d:e4:16:
                    d0:e7:d1:45:b0:60:bc:20:f1:ec:e1:c8:5c:02:b0:
                    fe:e4:fa:e1:8c:96:d6:1b:6f:71:da:6b:d8:3b:3f:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FC:A1:AD:8A:79:CF:89:BB:17:79:7A:D3:3B:FC:A5:8D:BC:4A:DC
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:ab:3c:79:4d:66:e3:fe:9a:2d:29:67:0c:b0:a1:6f:63:
         69:a9:87:b2:3f:bb:f2:1e:2e:95:fa:d7:91:3f:9c:7e:96:dd:
         82:8b:5d:00:db:be:92:6a:17:87:24:91:46:c8:c1:8f:9b:84:
         94:7a:ef:28:83:f9:6a:17:73:35:09:2c:09:ec:42:81:02:fc:
         7a:5f:1a:37:35:40:29:c1:98:4d:76:44:c9:03:d0:75:80:d5:
         6a:16:ca:19:1c:94:31:75:61:f2:e9:29:0d:df:b8:56:95:81:
         6a:83:61:c6:a5:ef:be:d9:04:a2:18:ca:35:05:06:d3:0a:77:
         55:59:c5:b5:c6:28:90:d6:7f:c2:c8:ec:c8:c1:f6:cd:59:c0:
         b9:3a:bd:b4:fc:fb:8d:66:fd:aa:bd:b1:98:be:4d:0b:3e:af:
         dc:ea:57:80:13:9b:0b:a0:0a:80:1c:28:02:35:57:e1:19:50:
         f9:22:1f:a8:10:54:ba:57:81:4c:a4:7c:9b:df:0f:07:b9:78:
         18:20:a4:cd:cc:4d:a7:1d:c9:43:42:06:c2:ed:fb:67:79:a1:
         6c:64:67:6c:74:4e:e8:e0:a2:cc:4b:b4:48:29:bc:0f:80:b7:
         21:04:98:ee:83:c1:e2:35:f4:02:ed:ba:e9:c8:ef:87:be:2c:
         97:82:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----