Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File:                     pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier:          Fb+RvMlQQPShoh8BbnoenkwpeyJVjKXuWqQdBdC1p4s=
Subject key identifier:   61:DB:1F:C6:8D:7D:A6:4D:ED:05:24:38:B5:7A:CD:5D:88:F9:57:8D
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer:       /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial:       01962E2ADB30BF4902D2DC5A2B61F050583D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
                          2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: pEiyXPGUp3H0xznprxsMh3p9+ESG2fqJ6LVIPc5n9xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:db:30:bf:49:02:d2:dc:5a:2b:61:f0:50:58:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=61db1fc68d7da64ded052438b57acd5d88f9578d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:3c:0c:e9:7f:00:dc:79:00:da:19:b0:95:
                    51:48:77:8f:b2:61:b5:7f:25:39:08:ab:1f:86:7e:
                    e0:42:29:e5:41:fe:89:36:2f:2f:73:bf:9a:e6:71:
                    ed:04:29:4f:8d:ac:f0:1d:08:9f:f4:9c:3b:17:7d:
                    25:22:3f:a8:f1:c3:83:f8:0e:07:76:7b:99:1d:37:
                    53:80:2a:19:b5:d4:b4:6b:bc:42:00:a6:f2:87:30:
                    07:51:f3:bd:ad:38:fe:d9:cb:ae:58:2c:aa:d9:c7:
                    6c:f2:65:b3:9b:ea:22:a9:1f:59:6c:74:10:65:b9:
                    68:46:ea:00:a1:cc:e7:49:60:0a:c1:5e:0b:7d:93:
                    d7:00:59:69:e6:ec:10:c9:39:6c:f7:b2:1f:69:db:
                    37:f5:72:06:48:27:ab:92:2d:1d:76:b5:7d:56:95:
                    74:03:61:02:f8:52:51:2e:44:fb:68:8b:9e:6e:43:
                    68:1a:67:c5:d0:86:03:98:bf:ca:1e:26:68:5e:45:
                    81:4e:c4:8a:7a:8d:29:b0:16:f5:8c:85:35:2f:03:
                    c3:c9:5b:3d:96:6d:15:a6:b2:ad:5f:f2:4e:9c:e9:
                    63:06:e9:a3:c2:d4:37:72:d2:50:e3:05:06:c5:69:
                    5c:eb:95:63:f6:69:77:0a:d1:29:4f:35:f9:5c:eb:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DB:1F:C6:8D:7D:A6:4D:ED:05:24:38:B5:7A:CD:5D:88:F9:57:8D
            X509v3 Authority Key Identifier:
                keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:4e:d6:a8:5d:b5:6d:8e:1a:50:0d:ac:4a:a9:ed:58:09:f3:
         b8:99:18:f9:c7:29:e0:bb:5b:ba:00:e3:93:fd:33:94:e1:03:
         c6:33:0f:81:72:6b:89:d3:bc:ff:55:ec:a5:12:49:8b:12:67:
         3b:d5:8b:79:05:68:7e:6e:6d:57:fc:56:b3:f4:14:f0:68:a4:
         47:d3:72:ae:02:08:24:f2:41:4e:ad:a5:59:d2:d1:86:47:46:
         1b:bc:36:f7:cf:5b:95:8e:e4:a2:60:75:3c:44:cb:f7:58:f1:
         e5:27:af:c7:30:02:f4:47:4a:86:d3:3e:a9:81:b6:25:50:c9:
         cc:34:32:fb:a7:a3:9c:05:b7:7b:27:67:40:0b:ae:73:2a:2a:
         c5:d6:65:eb:f0:7b:e6:8e:6f:70:4f:93:22:79:3a:b7:01:c4:
         aa:64:5b:f5:1b:9a:c9:ca:18:e6:28:79:85:03:ce:c6:b3:0d:
         4a:12:ec:a5:d5:0a:bc:b7:1a:04:11:21:9f:5f:3b:cc:d1:ca:
         e6:2b:3e:5d:3d:d8:5d:31:2c:f6:f6:83:9b:d5:f3:b2:b4:85:
         e2:f6:d7:88:a1:e5:fc:79:0a:d7:24:09:be:16:1a:b8:b5:dd:
         c5:e0:38:4d:7d:5f:23:21:60:67:b8:4a:dd:10:e9:bc:77:2d:
         c8:ce:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----