Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
File:                     6W0H10zRSlpDn0g3WMQk260zl3o.mft (raw, json)
Hash identifier:          xG57DaAa7FqXsLp6usGTG+nki8mwen3zq0U0Awecgko=
Subject key identifier:   FF:25:D2:8C:1C:7C:E8:96:92:56:71:AC:16:C4:CE:02:B6:CC:30:D2
Authority key identifier: E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A
Certificate issuer:       /CN=e96d07d74cd14a5a439f483758c424dbad33977a
Certificate serial:       01962E992172B1DD44E93FD4C8DFC67E55BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft
Manifest number:          0E4B
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: 6W0H10zRSlpDn0g3WMQk260zl3o.crl (hash: As8RlUpOsSYTsX4vEkhKayBYq3BRKWfnTJZoKhVY8HI=)
                          2: cWBtpv0lbtjjKIiQC4VphdrpJsI.roa (hash: 53d/EkPX5lZbgRgCOrdlmmeWh1Ezm+rcdsaRC9uISUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:21:72:b1:dd:44:e9:3f:d4:c8:df:c6:7e:55:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96d07d74cd14a5a439f483758c424dbad33977a
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=ff25d28c1c7ce896925671ac16c4ce02b6cc30d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:08:45:85:75:18:9f:e1:44:fb:20:30:78:
                    ff:39:04:46:70:9e:a4:2e:62:7c:d1:fe:f7:1d:53:
                    b2:32:21:66:c4:3f:d9:ed:7b:6f:d7:eb:6d:3f:21:
                    0c:26:ea:b2:c2:18:4d:8d:fd:42:2a:8a:2d:b5:de:
                    22:54:13:4e:f7:8f:32:a5:33:e9:44:8b:07:cd:84:
                    02:44:f0:19:b9:87:1e:75:bd:47:8a:66:fd:55:e0:
                    07:75:5d:09:99:e9:26:73:79:d8:c0:07:8d:2b:a2:
                    92:6c:12:24:5d:8b:69:3c:c3:13:47:5d:9c:b4:7d:
                    eb:ec:1e:0a:ec:30:81:e6:f6:63:33:8a:4d:9b:85:
                    e3:8c:b4:85:3d:81:3f:ea:dc:69:bb:fc:53:e2:dd:
                    1b:a6:f4:f2:48:2c:ca:41:af:ab:e0:c8:47:a9:35:
                    f5:95:fa:cd:28:3e:d4:08:d1:fc:86:83:ab:97:d5:
                    10:18:d3:51:5e:52:e6:22:ab:2a:e6:06:11:ea:0e:
                    df:6d:bd:56:10:53:4c:9d:3b:8c:6a:0e:29:31:b8:
                    a7:0e:f9:2f:e7:40:ea:4e:c7:fd:fe:e6:ae:ea:b1:
                    0a:b1:92:ca:4f:73:a3:62:9d:73:bb:5f:f9:95:cc:
                    24:b7:a5:8d:7d:61:5c:3c:6f:7b:4b:60:d9:b2:97:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:25:D2:8C:1C:7C:E8:96:92:56:71:AC:16:C4:CE:02:B6:CC:30:D2
            X509v3 Authority Key Identifier:
                keyid:E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4d:d3:19:3c:7c:01:37:59:79:a4:f7:75:76:9d:6c:30:97:
         db:b1:94:5c:11:a8:59:03:65:13:7f:d2:ad:77:e2:3b:2f:bc:
         90:36:fb:9c:85:6f:64:25:e9:ee:39:17:e4:1e:cb:1c:46:3e:
         28:29:b0:c1:9f:b5:e2:84:6e:36:14:89:f9:b3:f7:f6:75:1d:
         f4:41:82:1a:93:b5:5a:14:d3:fa:0f:cd:64:fd:c0:49:bd:27:
         cd:40:d9:99:2b:99:b1:ee:f2:b9:2a:4f:31:5c:87:b6:77:bc:
         10:ff:82:3f:d5:c6:6d:db:2c:22:92:2f:d7:c9:75:4f:20:d0:
         4c:ea:ae:0a:94:eb:ea:0b:2f:84:b9:36:ab:b4:23:80:d4:0b:
         6b:4f:d2:d5:16:43:ad:8b:12:83:c6:ad:29:21:4d:b2:bb:f8:
         dd:62:0d:91:20:53:29:c5:1a:1d:fc:5e:1b:e6:f3:cd:42:09:
         98:38:92:9c:56:f5:74:5a:0b:63:f7:68:78:46:76:6f:24:f8:
         a0:ed:a1:37:bb:24:3f:01:bd:2b:cf:61:93:0b:e0:09:93:08:
         82:e2:62:04:63:91:37:c5:df:cf:56:3c:76:99:8d:f6:8b:81:
         ab:b4:71:bf:81:de:ae:99:b0:58:23:0b:2b:b7:10:92:8a:54:
         df:d2:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----