Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File:                     mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier:          btu6z62MOfXCIakDgS7lnx+l0AMaECyjgsPEWUigO8M=
Subject key identifier:   52:C5:6D:C0:D5:FA:A9:93:8C:66:57:A2:94:A0:08:0D:7A:48:6A:EE
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer:       /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial:       01962F748DA24FCAD82DCF189E636FE1A96A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number:          06D3
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: i0yJafbs2O6P/0SObBzLHVNcyIkJwlU7dNCPNKm3X04=)
                          2: x61cbfT7RvhEfVSD3Yzd6Sqt3eg.roa (hash: nkg8d2JuPVPfqk0kcc5OXRrb5PIvthJQYUpxPMl5/LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8d:a2:4f:ca:d8:2d:cf:18:9e:63:6f:e1:a9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=52c56dc0d5faa9938c6657a294a0080d7a486aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:8b:da:78:4c:60:55:52:9a:0c:a5:bc:b6:
                    e7:da:d3:d9:ba:2c:33:ba:3f:17:56:23:af:95:97:
                    f2:f1:f5:6b:dc:cb:6c:b3:ac:49:e8:0b:7f:9c:19:
                    99:26:3e:0e:b5:11:de:0c:1b:cc:bf:41:18:8e:4e:
                    92:a1:8a:e4:1f:e3:35:09:a8:11:8e:71:07:b8:cc:
                    78:25:85:9b:1d:8a:62:5e:26:cf:20:53:4b:5f:91:
                    e8:d0:22:4a:4a:98:b2:d6:bb:cc:a9:63:fa:51:37:
                    ef:3b:a8:8b:ba:99:98:e9:88:4c:45:85:a6:e3:16:
                    d4:6d:fc:94:11:80:4b:f2:64:5d:aa:3a:ea:ee:24:
                    88:74:2e:aa:33:fa:15:ca:a7:97:5e:fa:6c:e0:36:
                    e8:6c:75:f3:0c:bf:b5:36:db:f2:b5:9b:2b:da:e2:
                    d4:9d:ba:da:f9:a9:5b:47:8d:95:b2:b1:cf:05:22:
                    ce:66:5e:a8:2d:86:80:17:32:9f:90:44:9e:37:33:
                    91:93:c9:df:cc:9b:34:d6:9f:77:8e:86:12:79:2f:
                    86:78:25:c8:b2:a7:00:6f:30:03:85:b5:35:a9:6b:
                    2a:e5:32:13:c2:da:d4:ad:e0:fa:f6:30:5b:5f:d5:
                    8b:37:1d:ee:ea:99:6e:45:9b:b3:08:6b:c7:15:b9:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:6D:C0:D5:FA:A9:93:8C:66:57:A2:94:A0:08:0D:7A:48:6A:EE
            X509v3 Authority Key Identifier:
                keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:d0:99:74:92:9c:0a:d6:d7:e9:55:d2:17:e4:76:2e:c7:58:
         91:09:52:a1:c8:a4:08:95:de:a6:75:55:a8:2e:46:75:75:e7:
         d4:a5:0b:d7:07:c9:44:81:b8:6d:57:94:a2:95:bb:62:cd:c0:
         68:a0:d8:b2:93:9a:7a:43:94:15:b6:2c:94:6c:ca:42:63:f3:
         a2:a7:7f:84:97:2d:c6:a5:3f:ba:97:e0:a8:6b:d1:ef:ed:9c:
         8a:36:ce:c3:2e:b6:11:43:7c:36:fe:cf:0d:b1:80:55:d9:5e:
         d6:a8:27:e7:fe:60:3c:b7:15:b2:c2:04:1a:1e:ea:0e:48:e8:
         a7:9f:fd:ad:9d:9d:a5:88:80:a0:5a:87:fb:ee:0b:11:04:91:
         32:d4:fe:27:fa:55:0f:ea:d0:be:28:7b:d2:27:bf:95:3d:ba:
         ee:4f:af:c4:a0:8f:1a:57:6a:8d:2e:c6:7a:72:93:28:df:98:
         51:da:ca:5d:9d:83:5d:e9:f6:48:5d:81:bc:cb:2e:cb:03:91:
         c7:d0:2b:c2:34:0c:91:bb:5e:52:5e:c1:d2:4e:ff:9d:cb:45:
         ff:80:6a:16:6f:9b:4b:fa:1a:15:8f:9f:31:74:fa:8e:74:4e:
         6b:fd:9d:26:45:0e:bd:c2:3f:28:a9:1d:bf:96:73:63:fd:6b:
         a5:b7:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----