Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File:                     a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier:          OaEXAUgQN26nEpuqC9hwVi58/L1HbEYhADENI1QGZzw=
Subject key identifier:   D3:AC:4A:7D:7E:3C:8C:97:A0:4B:9C:8B:79:71:9F:0A:B3:B7:89:0E
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer:       /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial:       01962DF409C82B380FB15AF1176B58285147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: sVXnDNM13PwSeoS/XRZZfSvzjoKlOEv3IDMHbMuSpZg=)
                          2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:09:c8:2b:38:0f:b1:5a:f1:17:6b:58:28:51:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=d3ac4a7d7e3c8c97a04b9c8b79719f0ab3b7890e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:cc:78:23:66:df:40:ef:eb:08:ce:7e:e3:
                    c8:9a:32:48:fa:0c:c5:0f:4d:5c:1e:39:28:84:9a:
                    28:29:c2:1b:98:44:09:c9:f4:3f:d2:13:18:ac:a1:
                    fd:14:38:00:b3:23:76:c1:ab:da:32:25:75:b8:ab:
                    81:86:97:4b:07:17:2d:a3:a6:57:db:89:25:08:04:
                    64:83:0b:8e:4b:f2:4a:99:45:94:be:36:14:e5:27:
                    43:f1:18:29:65:65:ce:22:b1:46:8c:40:7e:31:0a:
                    0b:54:2b:91:f7:a8:54:7d:3b:c4:1d:af:9d:ca:27:
                    69:19:57:da:c8:81:92:18:ac:b8:9e:d2:5a:49:60:
                    70:2c:2e:2f:a4:1b:86:77:5a:f8:30:ca:f4:4b:54:
                    14:86:83:d7:18:73:60:c3:a6:ba:33:30:2b:d9:72:
                    1a:09:ee:81:14:4a:85:45:e5:df:39:ef:d3:c4:3c:
                    92:66:c0:af:c7:7c:de:7c:48:93:13:86:85:81:51:
                    d7:65:cf:23:6c:71:79:e3:28:58:d5:5a:e5:60:cc:
                    65:be:4b:8d:99:a2:71:17:4a:e4:d3:8d:b3:cd:e9:
                    17:38:49:40:e2:38:df:8f:35:e3:6e:b5:dd:5b:8b:
                    0e:fd:68:77:60:65:6c:79:65:10:ee:5a:ba:6e:a9:
                    63:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:4A:7D:7E:3C:8C:97:A0:4B:9C:8B:79:71:9F:0A:B3:B7:89:0E
            X509v3 Authority Key Identifier:
                keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:cb:b2:00:a8:fd:40:09:51:a7:76:3f:51:8b:f1:6c:4f:ed:
         7b:9a:74:8b:5b:54:00:7e:74:10:94:ca:ee:0c:a2:7e:42:1e:
         a7:90:73:6b:81:8c:33:e3:e0:3a:a8:63:c4:34:d3:b5:4a:26:
         b2:b9:9a:86:ea:e6:38:9f:6c:58:54:3b:a9:2c:6a:e6:d8:7c:
         2c:a4:28:af:a7:94:4d:74:0d:07:48:d7:2b:b9:78:9c:bf:95:
         f8:29:7c:84:eb:ad:7e:a0:c6:a9:8d:b3:82:6a:6a:1d:a0:0e:
         a7:54:92:35:9c:e8:9a:4e:c5:d2:ac:4e:19:a6:6d:44:ed:df:
         4e:3a:0a:8e:56:35:c2:57:6b:9a:00:94:ef:dd:4f:3c:7d:80:
         dd:c0:5a:37:87:23:a3:c3:ec:7a:8d:23:f3:1f:14:a2:35:12:
         fd:c2:cc:c1:a2:56:18:9f:0b:57:d3:60:08:36:c0:c3:be:9a:
         79:0f:62:5d:6b:b6:89:18:7f:33:c6:9a:03:ce:c3:ed:b4:3d:
         bd:d6:05:a7:b4:06:d4:67:53:08:40:91:6a:e3:53:7f:c8:5b:
         8d:2a:60:fc:18:1d:d3:54:28:f0:10:81:e5:02:ea:6a:17:2e:
         c2:f4:fb:c4:36:27:3f:0a:eb:26:91:fe:a3:e3:b4:f9:39:ca:
         c0:09:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----