Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File:                     86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier:          nnYbF8KSxFx1q4BMbQp9sQxCibueqTxzvZtvoX9GI54=
Subject key identifier:   80:10:66:A5:89:E0:26:A9:B2:A5:15:D3:CA:9E:3D:8D:D1:2A:97:B5
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer:       /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial:       01962F746BEFBE192D58006E3BDDB5A796D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number:          0340
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
                          2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: zbeVPdJ+x9z/2MWVqKHCokc6nCpUUMaWyV/eoGyroEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6b:ef:be:19:2d:58:00:6e:3b:dd:b5:a7:96:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=801066a589e026a9b2a515d3ca9e3d8dd12a97b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:c4:6e:36:ef:47:45:0a:63:49:39:4e:5f:
                    de:13:01:64:c7:d8:f9:08:2b:a2:73:12:5c:51:97:
                    48:56:8b:a8:e5:61:de:73:f9:ff:e4:60:f3:9e:83:
                    5e:de:02:8e:16:9d:d9:51:86:6d:be:43:00:8e:89:
                    85:ed:a6:95:7d:01:2e:58:9f:79:2d:42:4a:6e:b8:
                    88:37:9e:9d:4d:35:fc:41:3f:2a:54:6a:56:ae:3e:
                    0e:39:00:73:4d:cc:b1:5d:47:8f:2f:e2:c1:80:11:
                    71:be:9c:f9:fb:f5:86:b6:9f:36:18:60:4b:fb:e5:
                    90:79:55:e1:e7:a0:9c:32:21:20:bc:f8:61:3b:49:
                    f1:ed:5f:05:77:2d:d2:7b:59:fa:f6:ff:f2:17:28:
                    d0:46:6c:7a:bd:aa:0a:b1:fd:cd:df:c5:99:61:7c:
                    3a:6c:59:63:92:8c:27:3d:15:24:38:02:36:30:6b:
                    6c:f4:01:00:71:04:ea:7c:53:34:94:64:7d:39:2d:
                    ca:15:e5:cc:5a:58:a3:04:3d:fb:cc:6b:63:b1:32:
                    50:35:c9:31:15:4e:a4:98:d9:be:41:c0:cb:03:2e:
                    78:50:09:11:cf:39:04:f6:8a:a7:99:b6:a9:1c:8d:
                    f2:15:33:92:55:82:8f:16:ec:f3:ce:4b:3c:72:a2:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:10:66:A5:89:E0:26:A9:B2:A5:15:D3:CA:9E:3D:8D:D1:2A:97:B5
            X509v3 Authority Key Identifier:
                keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:9c:cb:da:52:de:86:7d:b2:e9:43:02:68:89:ec:64:a6:
         be:17:6c:8b:e4:1a:d9:c8:ae:62:1c:e6:67:e0:08:a6:c7:8c:
         cb:d3:84:b4:97:6f:50:1d:4b:4b:c6:33:95:28:f8:b6:10:77:
         65:eb:7a:74:38:f6:23:cc:3c:ca:34:92:32:1b:f2:4a:05:18:
         83:73:eb:5b:8e:35:eb:b5:cd:a0:7a:18:4b:da:ab:00:57:77:
         c4:5e:59:70:ce:8e:f3:64:1f:66:ab:3e:e2:8e:12:0f:5d:14:
         8f:be:91:65:5b:a9:dd:6e:de:f3:49:f1:27:b0:73:f8:d9:73:
         b4:7e:fb:a0:9b:c7:04:e1:7e:a4:bc:a0:6d:bb:48:9c:a0:bc:
         73:3a:20:11:29:a5:e6:db:3c:c1:2f:49:f3:f2:38:1b:ef:6e:
         f7:70:55:f8:a5:a4:09:fc:38:8d:0c:e0:ea:65:08:00:cc:6d:
         84:7f:58:f6:85:ff:d3:53:af:0a:20:08:7e:86:0a:81:47:a8:
         87:65:d6:d1:79:83:62:ac:d8:20:ab:18:fd:72:41:a2:7c:4f:
         23:ec:3d:99:ca:0a:ce:01:7e:e3:f3:ee:83:27:6b:55:ce:56:
         2c:b3:ee:5a:51:e5:1d:d3:55:ca:3f:c3:7c:26:ec:f9:88:50:
         cf:e2:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----