Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File:                     kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier:          6sTuFaHfNAbugyKNbA8zzZtNrbEfogbFJVa9fQ299no=
Subject key identifier:   27:A6:28:94:80:FD:34:4C:69:77:12:63:9E:E8:D1:4F:30:5F:3B:51
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer:       /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial:       01962E98A90068C331F6D1F9F8E22F85806D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number:          128A
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: vR7buRjwWP0kTpMcimY3zuOb8IBDqRiT8CRiRsE3yU0=)
                          2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a9:00:68:c3:31:f6:d1:f9:f8:e2:2f:85:80:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=27a6289480fd344c697712639ee8d14f305f3b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:4e:0d:9e:26:a2:bc:fa:af:b4:74:19:e5:
                    75:15:31:36:51:2d:6b:75:12:f1:ac:e3:83:5c:56:
                    4d:11:4d:2c:78:01:a0:be:b4:f4:bb:e5:5e:ab:54:
                    61:57:de:50:ac:d0:74:40:9a:18:2d:dd:e7:03:2f:
                    6a:70:72:63:72:72:29:c2:5a:a7:5b:a7:22:61:d6:
                    67:5c:c5:a2:e6:3d:8f:f1:68:07:8a:c6:aa:f2:65:
                    9b:b9:03:e2:05:41:35:f5:4c:02:bf:ba:5b:7d:29:
                    5f:fa:0f:72:49:0d:14:e6:fd:ff:29:70:b0:24:07:
                    83:34:15:9f:e4:16:67:d6:73:75:7f:ed:8b:45:29:
                    fa:e1:b9:9e:18:92:2d:24:da:2a:4d:e3:ea:65:ee:
                    36:42:4f:42:08:de:e8:62:5b:2d:76:76:d7:03:ce:
                    a9:3c:d3:41:6c:f2:b8:2d:32:0f:29:b1:82:ea:d4:
                    72:77:58:c7:31:01:64:3b:25:2f:fb:8f:66:86:d9:
                    23:5d:f3:93:70:2d:28:8e:08:cc:7b:87:32:4a:e7:
                    0a:fb:2a:ae:c9:58:29:9a:8b:fc:07:6b:d5:52:56:
                    b3:66:a6:7c:31:4b:43:59:e8:45:af:76:a6:94:b6:
                    91:cd:97:38:63:99:cf:e6:e4:7b:1a:93:e1:b0:cc:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A6:28:94:80:FD:34:4C:69:77:12:63:9E:E8:D1:4F:30:5F:3B:51
            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:d8:7a:91:f8:2d:5f:d9:67:d9:31:ad:2a:81:a5:5e:47:
         b4:43:32:26:56:8a:4c:9c:94:08:ec:68:ec:5d:bb:cd:5a:fa:
         82:ff:e8:fb:07:5e:cd:91:8f:bf:08:b6:9c:3f:29:fe:dc:ba:
         b6:bd:31:f4:ff:46:60:f1:66:19:65:7b:7a:53:da:e9:bb:1d:
         e6:65:6d:65:11:82:e1:65:cf:f1:20:dc:d9:0b:c6:be:9c:4d:
         69:cc:ce:b1:ca:97:9e:8b:2c:71:17:ef:e0:5b:64:15:c4:f4:
         85:ca:de:c7:8d:07:38:e7:10:81:a8:f4:9e:78:49:fb:d3:45:
         2e:88:54:1c:72:dd:6b:fb:c8:56:0b:03:84:48:61:94:02:53:
         c4:0b:e8:2b:24:cd:8f:43:9f:85:15:c2:bc:9a:3a:4d:92:15:
         8f:ac:e0:cc:8b:da:06:6f:45:49:74:cf:df:55:18:37:03:52:
         fd:a8:75:b0:c0:75:5e:5e:54:7a:82:ae:18:5b:fa:8d:c3:cf:
         17:d4:67:74:71:f9:5b:8e:71:99:f7:be:7b:fa:9f:1a:02:bd:
         87:54:dd:9d:9a:5e:68:0b:83:46:8a:93:84:50:77:ba:30:f4:
         70:98:5e:b7:31:06:a7:80:d1:db:51:eb:dd:01:cf:f5:d6:75:
         19:00:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----