Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File:                     Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier:          QJTvs4DWwPK/UWp4x6vPE1AcrzPAUbD9qnlDdgoT5Xs=
Subject key identifier:   27:65:82:03:F4:B3:1B:6D:AA:43:8A:1C:3A:95:D9:EB:5E:A6:C5:1B
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer:       /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial:       01962FAB897CE4F41C0BBD7DF85535D9D6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number:          015F
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: 7phVnLeNfq5Smca5eMJXeIE/A6ItT1IgQLsqoql+ax4=)
                          2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:7c:e4:f4:1c:0b:bd:7d:f8:55:35:d9:d6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=27658203f4b31b6daa438a1c3a95d9eb5ea6c51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:1c:89:de:e7:c0:0f:49:a0:2b:26:41:eb:
                    40:56:eb:bc:f2:0e:6d:8c:70:5e:80:2a:ad:d8:d0:
                    11:15:38:b6:aa:9a:25:db:26:e5:75:68:3e:14:8e:
                    d0:93:52:61:45:4f:bd:dd:fd:30:95:b6:73:6b:c7:
                    5b:e2:b8:a9:ba:d9:e5:6e:99:07:de:f7:7c:27:08:
                    34:f2:ae:95:42:5f:c9:49:5b:93:4c:fe:e0:b3:3c:
                    98:cf:7e:14:ac:b2:1b:2c:7d:5a:df:8e:8c:8d:44:
                    73:78:1d:5d:e8:b0:af:c5:7f:fd:1a:2a:60:9a:02:
                    f6:c6:b9:72:f3:59:a6:b6:78:a6:13:fa:a8:5e:f5:
                    64:fb:ce:02:b3:d4:b4:e2:18:fa:73:c5:54:7c:80:
                    2e:84:58:5b:a0:fe:81:00:f0:7a:dd:90:4a:0f:7e:
                    54:75:98:ba:4d:c6:8d:e5:da:0a:12:74:4b:ce:64:
                    cb:f8:3e:c4:f7:5c:79:14:7d:ef:a4:1e:22:9d:3c:
                    a5:b2:1e:49:71:65:42:97:c0:c5:6f:15:76:fc:ce:
                    a1:1c:94:22:e3:b5:1f:46:b0:60:f7:7b:b2:f4:85:
                    a8:87:2d:54:32:00:6e:9e:4e:c4:8c:83:d4:cc:b0:
                    7c:51:a5:22:82:13:75:4a:b0:e3:00:5b:a8:c7:ac:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:65:82:03:F4:B3:1B:6D:AA:43:8A:1C:3A:95:D9:EB:5E:A6:C5:1B
            X509v3 Authority Key Identifier:
                keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:25:93:1a:60:05:ce:ff:d3:3d:5e:1b:bf:75:2a:86:46:
         52:8e:06:2d:ad:4c:80:32:28:80:5d:38:66:1c:ad:57:b0:64:
         94:bf:48:bf:ff:ce:2d:4e:9b:be:62:b5:ce:d6:79:1c:ae:02:
         0a:a2:8f:e5:a0:dc:52:7c:ff:5e:45:f0:8f:06:74:e7:b1:ef:
         fc:44:e6:43:fd:e1:b8:fe:40:c5:a7:eb:c7:3c:a0:d8:24:ae:
         a9:be:12:53:cb:bf:28:ef:08:c9:d8:1c:4d:3a:b1:ac:19:ff:
         51:2b:06:0f:66:92:e0:85:59:8f:7b:d2:c0:6a:ed:9c:1f:30:
         0e:7a:8a:4c:43:9d:f0:8a:4f:1d:57:b3:c4:45:a7:11:6d:c0:
         57:e3:47:e5:be:5d:81:2b:12:0b:97:a7:5f:93:c5:38:3b:9c:
         3b:ec:20:36:86:55:e0:ad:14:2d:d1:55:4e:19:bc:64:4e:0c:
         66:ac:26:14:f6:51:9e:86:0a:f1:d4:6f:9e:fe:7f:a5:6c:5d:
         b8:1b:49:c5:9b:24:53:0f:e5:c3:5e:c0:7d:af:6e:63:b2:dd:
         c6:b7:ff:5d:cb:3a:4c:83:26:fe:7a:a0:e3:8c:d9:bc:c4:de:
         eb:6f:38:eb:71:5a:78:f8:f9:77:c8:1f:78:a3:02:1a:f4:ce:
         bc:32:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----