Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File:                     exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier:          /9D2zIBkKeidoMTwXrsyVpvj1rf414oAHBZa6/eFW5I=
Subject key identifier:   65:F3:0A:0E:33:43:75:D1:5C:BD:A6:91:F0:BC:59:86:68:5D:CC:00
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer:       /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial:       01962E61F38F05706DFBE180916F6DDE57BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: xa+IKVl3vH5PsCK6f3f2r366M7zFr+ZSTiiIEswQ2S8=)
                          2: iUoNxOhwebXoe8b72BR2AhmpSeA.roa (hash: tWfhDKNLJhumUMuEB+92tFSBgGLOO7GXSiupWsvky5w=)
                          3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:8f:05:70:6d:fb:e1:80:91:6f:6d:de:57:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=65f30a0e334375d15cbda691f0bc5986685dcc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:31:4e:c0:f9:65:6a:24:26:c4:73:cd:df:
                    a0:a5:ea:d4:83:8c:23:b5:5e:e2:d1:98:50:ad:cf:
                    e3:a8:6c:55:1a:66:3a:aa:6d:5d:eb:05:85:1e:81:
                    9f:fa:a9:4a:37:af:8a:12:85:58:cf:e0:05:df:60:
                    22:3d:da:b9:09:81:17:db:36:a9:bf:65:15:3d:66:
                    24:c8:ef:7a:0d:1a:08:6d:63:b8:79:e9:3c:cf:4b:
                    02:67:c0:86:5f:1f:a0:4c:64:ca:71:0f:7c:a9:12:
                    3f:24:20:45:50:02:84:20:2a:4c:83:01:29:47:d9:
                    57:7e:ab:45:95:33:ed:48:9d:cb:d9:d2:ee:8f:a5:
                    57:b5:a5:7a:55:2c:a5:87:d7:41:38:82:68:f0:33:
                    6d:ae:48:6d:65:e6:44:5e:f2:02:f0:0e:68:fa:67:
                    86:1c:7f:c4:1e:ea:32:7f:2a:71:c1:33:26:ac:c2:
                    3e:94:7d:4c:1a:60:d8:20:32:16:2f:20:05:0c:7f:
                    08:e6:ce:f4:6c:7f:d8:5b:95:c1:79:b3:92:f9:4f:
                    a5:38:17:03:ea:d2:c1:57:a1:d4:1d:d3:61:f4:36:
                    f3:48:f8:be:b2:cc:2a:15:49:00:ad:eb:9e:c2:f2:
                    54:a8:8b:11:9e:8b:77:00:a3:49:34:aa:66:3b:0c:
                    a9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:0A:0E:33:43:75:D1:5C:BD:A6:91:F0:BC:59:86:68:5D:CC:00
            X509v3 Authority Key Identifier:
                keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:91:0b:77:11:d0:85:ff:cc:79:be:6a:55:ae:b7:7d:e6:
         b6:a9:90:15:36:22:95:a4:49:2a:a9:29:29:69:89:bf:b9:3d:
         c0:9a:dc:c4:83:f4:2b:ab:b3:5d:82:10:9e:65:f0:9b:57:10:
         d5:ec:c4:c4:4f:12:36:8e:9f:07:98:9a:4a:5c:ea:16:b1:d5:
         12:19:09:be:60:03:a0:46:dd:c9:ef:68:44:3c:09:be:e2:95:
         43:1d:11:c9:c1:d4:91:92:88:e7:dd:7c:13:ee:11:4e:9b:6e:
         32:73:b0:9d:73:45:1c:f8:02:66:d5:5a:aa:d3:c1:48:26:aa:
         55:01:c5:93:6e:81:0d:66:45:ee:b3:67:dd:05:36:be:20:de:
         60:df:08:95:6e:3b:d5:30:13:b0:ab:e2:1c:81:a8:6c:cf:d1:
         c6:cf:c5:22:75:e1:6a:0f:86:73:be:08:0d:e0:04:e6:39:e2:
         7e:99:1a:1e:a8:1a:d1:5c:76:8b:0f:9c:ed:42:4c:32:9e:09:
         7e:8d:62:57:56:1c:d4:2e:17:48:e4:8a:0e:c6:ce:ed:39:3b:
         db:45:77:6e:1f:aa:5d:35:b4:67:b5:8b:cb:da:e6:f4:2e:c2:
         2f:21:f9:ec:78:e5:70:e1:f4:7b:94:44:67:a5:6e:29:d5:24:
         a9:37:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----