Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
File:                     6LVvnuGP2_rzCg2leYLicnPby0I.mft (raw, json)
Hash identifier:          9FmdDZoCUo+RVcX11PuHqORTzz7SGYemBI2rGtE889A=
Subject key identifier:   03:98:D6:F5:B0:27:76:19:3A:A3:C1:54:D3:AD:5A:8A:11:88:51:A6
Authority key identifier: E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42
Certificate issuer:       /CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
Certificate serial:       0195471055EB97DC63F4A8CA7299D4BA0E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
Manifest number:          1477
Signing time:             Thu 27 Feb 2025 11:00:07 +0000
Manifest this update:     Thu 27 Feb 2025 11:00:07 +0000
Manifest next update:     Fri 28 Feb 2025 11:00:07 +0000
Files and hashes:         1: 6LVvnuGP2_rzCg2leYLicnPby0I.crl (hash: A65wJ/mFrJm5nlbfijp30OQyQ/O4LU4/aiLRk06di9I=)
                          2: NTYUoge45dvOl1ZSuhPFRu0wgls.roa (hash: bVCgdreaadQsa1h3KDS0ys3D8VNZDzW4zMimMnGKLoQ=)
                          3: SUpll5U8ppta_w4aro5suC6r4wU.roa (hash: ZRvbjWizyvhZg7Bqt/yuk8GupOGwY3kED5A1cfchDJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:10:55:eb:97:dc:63:f4:a8:ca:72:99:d4:ba:0e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
        Validity
            Not Before: Feb 27 11:00:07 2025 GMT
            Not After : Feb 28 11:00:07 2025 GMT
        Subject: CN=0398d6f5b02776193aa3c154d3ad5a8a118851a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:fb:7a:d6:91:ef:ca:e6:3a:06:51:46:b4:
                    9e:7a:0c:48:67:aa:76:66:c1:60:2d:fd:a9:1b:f7:
                    a4:e1:11:6d:a2:ee:77:a6:4c:4d:13:93:f2:0e:e4:
                    8c:34:0a:53:50:b1:4b:8a:38:dd:52:a7:59:77:9a:
                    b4:af:63:da:75:6a:e9:58:53:77:e2:f4:cb:10:a9:
                    ce:a2:ed:d4:a7:c4:23:87:6d:f0:5e:48:fb:bc:db:
                    15:1e:41:63:a6:77:17:98:a6:b8:1b:38:6a:92:05:
                    46:9a:3a:fc:7e:48:5c:48:67:d4:0a:4e:d1:16:dc:
                    7d:35:da:e0:9b:56:11:ce:92:c9:81:85:07:a9:3b:
                    0c:ce:10:96:15:85:97:d9:dd:4b:50:81:06:a8:97:
                    15:71:5f:d2:f0:80:ed:4d:49:ee:46:3e:33:5d:37:
                    36:f4:bf:b1:d1:a7:91:97:97:6c:ce:27:f4:54:f8:
                    a2:9f:dc:71:6b:aa:f5:fa:33:1c:d5:45:44:d1:84:
                    13:22:bd:fb:cb:3b:be:59:5b:b5:e4:32:b5:50:10:
                    69:bd:ff:99:69:fb:b5:cc:1b:9c:9d:d5:6b:39:3a:
                    83:96:54:ba:bb:5d:65:eb:f8:a6:22:30:b8:b9:87:
                    e6:f8:3f:8c:fd:1a:72:4f:dd:9d:31:bb:59:07:ff:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:98:D6:F5:B0:27:76:19:3A:A3:C1:54:D3:AD:5A:8A:11:88:51:A6
            X509v3 Authority Key Identifier:
                keyid:E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:83:0b:00:d4:c9:0e:fa:7f:94:13:de:c2:20:98:7c:a2:
         0e:81:2d:38:15:43:60:39:27:ea:98:37:bb:0b:f9:3c:b2:b7:
         33:94:dc:e8:42:1e:87:7e:0f:6b:b2:a9:f0:18:e2:f8:0a:3b:
         a3:15:68:50:15:3d:45:ed:57:50:9a:62:f3:0d:24:4c:67:7e:
         52:7d:6f:96:04:0e:96:1c:b7:99:af:1e:00:02:a0:87:e7:38:
         b8:3f:ca:39:a6:25:4d:80:1c:02:93:7f:28:81:4e:f4:e6:8c:
         91:f1:11:3d:65:1b:32:d3:8a:2c:17:fd:d6:c9:a6:44:78:71:
         3c:d1:52:06:d4:0d:82:43:07:fd:de:13:74:c8:fa:1c:8e:2f:
         9e:4a:87:5b:d6:70:30:ee:7f:a2:6e:1c:15:5c:cc:d6:b4:51:
         4b:d3:0c:d0:08:74:12:01:a7:5f:87:66:8e:06:24:f7:8e:08:
         2e:a9:78:79:d4:a5:a6:5a:b9:45:2a:c1:f0:57:49:79:cc:c9:
         d5:73:6a:1d:af:4d:9b:65:fc:06:c1:90:ae:38:ed:4b:13:b0:
         30:f2:24:6a:1d:b6:92:88:6e:6a:6c:fa:96:23:82:a4:ff:ac:
         e8:1f:c9:45:f8:ad:96:b0:1c:57:d8:c2:0a:b2:3f:14:1c:f8:
         60:27:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----