Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          smz5NACe2bp17Io5HeXuZcJnMrz8jvrSxKJ2gvMMRjw=
Subject key identifier:   61:4F:5E:AA:24:CF:4B:B9:7E:0F:7D:14:E1:A9:AA:96:CA:54:A5:38
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       01962F06A9F9F6EB8571C7262945D7F811D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
                          2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: hMiT9GUN2KK4EujjXg3YiMM8gIM9+lUioAEIRMzE2AM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a9:f9:f6:eb:85:71:c7:26:29:45:d7:f8:11:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=614f5eaa24cf4bb97e0f7d14e1a9aa96ca54a538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:48:46:f3:ea:3e:e9:db:8c:8f:b4:3b:8a:
                    93:97:66:bd:e6:ec:8b:32:79:95:7f:4f:22:1f:f8:
                    62:60:a9:23:26:50:f3:6d:11:09:fd:58:00:23:a9:
                    7f:b7:30:33:46:0b:69:71:0a:d5:8a:07:1d:ae:d4:
                    8d:fa:c3:a6:60:83:26:87:02:09:e7:7e:84:ac:10:
                    5f:57:bd:49:83:5d:78:8f:7b:9a:eb:ed:4b:b0:04:
                    24:88:0b:32:d3:db:ae:77:be:e6:cc:e2:cf:27:4c:
                    6f:9f:35:24:6d:99:4e:37:53:ae:de:ff:c6:35:9f:
                    ce:c9:74:e4:b4:59:36:dd:9e:0c:5a:c2:9e:4b:5e:
                    cd:98:c8:9c:37:0a:61:48:06:84:17:a3:ff:75:a3:
                    e4:50:e0:e9:ac:59:e7:5c:51:64:36:39:ab:84:81:
                    b2:e6:2d:37:73:81:58:34:8f:01:ab:e7:ef:fc:39:
                    90:15:18:74:fe:7d:d8:02:1e:b7:db:a2:ce:3c:bb:
                    57:40:a4:36:e7:fa:05:3d:bf:f7:25:e9:95:d6:28:
                    c2:e2:64:66:3e:65:c5:f6:7a:c8:d7:57:cb:87:88:
                    81:18:06:91:e8:99:73:9c:d6:0a:74:7d:da:34:3a:
                    53:e1:6c:a5:3a:13:f7:50:6c:d0:6e:7b:0c:86:1d:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4F:5E:AA:24:CF:4B:B9:7E:0F:7D:14:E1:A9:AA:96:CA:54:A5:38
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:df:ba:64:34:e9:c2:0e:f7:8d:8e:9f:04:d0:5b:e8:2d:f5:
         ea:e9:2a:16:ee:07:5b:4c:4d:9a:04:f6:97:98:92:5f:2b:a2:
         b6:f3:5e:33:d6:20:48:2f:56:c1:e3:4d:f0:c5:59:3a:5a:c9:
         81:a6:fa:3e:93:b3:57:7c:c6:b7:0b:6a:54:f9:8a:27:21:b5:
         0b:62:ef:46:07:cb:af:4d:2b:07:49:b4:e4:c2:99:4f:1f:db:
         0d:f7:2d:a6:17:7d:eb:fa:21:86:47:f1:75:61:90:58:4a:ef:
         b8:8b:b4:00:cd:9b:90:35:e6:f7:2a:c9:14:f5:f9:81:e8:9c:
         1e:59:27:14:cd:3c:41:a5:01:9a:90:3b:51:80:9f:e0:3e:a8:
         10:0a:7b:ff:6c:c5:59:7f:0e:c9:fd:96:64:b9:c3:41:1d:53:
         30:03:5e:e7:2c:6b:86:fb:3a:54:fe:36:97:9a:6e:fd:89:16:
         4b:97:3c:66:f9:81:b5:6b:c3:fc:6c:58:67:2a:05:de:2b:c2:
         4f:0e:cd:56:2e:3d:ab:eb:7f:2a:fa:60:f2:7f:78:6e:b0:6c:
         8e:d2:d6:1c:49:15:bc:48:24:72:7b:5d:d9:b5:5b:ce:ce:46:
         c9:0d:6f:fd:a7:64:d5:e9:5c:b5:7a:30:d8:33:db:ba:b4:b9:
         b7:e1:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----