Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File:                     6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier:          5DiCiq5cuPS98nTaHVM8LfFy0gORhlk7Lps54UPzVmY=
Subject key identifier:   98:17:2E:DB:0A:8B:6E:93:63:E7:20:7D:DD:9C:9B:49:5C:A7:60:9F
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       01962DF3DBE8CB2DDF935EB60CB13024A5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: yrGU/9Pd2UVoTOwrgsKmWRKUr0AwUw6BQv16cK/uUB8=)
                          2: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=)
                          3: GhnDGEgDOhOuu2Bz2p8x9xfrIEk.roa (hash: duB9Io5OhbZEdzVZTqJI4mOgNl+GvHnaKazpl3IdsjA=)
                          4: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
                          5: b9wkPnLySz-ATLfF0ql-d4ycVn8.roa (hash: 9oUyMaJaRwmTAQVIcoe9p1Xl0C9S5KqKUeBPGeCZniU=)
                          6: vNNjSoCVrZSrdxYzePjoq6gxkng.roa (hash: tERdg9hn/xkrqVt1JcH/usznbLFRttftraLG/JPUhH4=)
                          7: xmnElpjW7A7CZR6BNActB4hUkqQ.roa (hash: b7xPSVC6CwQb9FVx95rjLXVmj8SRkW6pnrS7QPGCHVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:db:e8:cb:2d:df:93:5e:b6:0c:b1:30:24:a5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=98172edb0a8b6e9363e7207ddd9c9b495ca7609f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:46:44:aa:7a:95:78:12:d1:fb:98:44:05:39:
                    bf:07:5f:48:c0:7b:47:b8:c5:45:58:9a:5d:6a:c5:
                    d6:87:6a:85:61:e7:08:f7:82:7c:db:76:e4:a2:3b:
                    37:9a:a3:bb:e1:c9:9e:f8:37:8d:82:03:8a:f3:61:
                    53:31:d4:8e:70:e2:00:8d:6b:ea:8a:9d:f2:87:5a:
                    03:08:a4:eb:bb:37:94:40:22:34:8b:3d:37:56:62:
                    56:f3:c4:ed:70:16:8d:5d:ce:ff:73:87:19:01:7f:
                    82:63:57:ab:02:d8:c0:e6:4d:bb:21:ad:68:87:4d:
                    f9:b6:17:52:25:92:fe:e1:0e:58:7b:a0:d3:ca:c0:
                    94:71:a3:d8:c6:d7:ff:b7:08:26:56:23:9a:a9:c5:
                    1a:6d:21:dc:af:cf:2f:fe:7f:fc:a2:c8:dd:63:a0:
                    51:e8:5e:f6:5c:34:bb:c6:8b:1b:fe:d9:cc:ee:02:
                    10:c6:b9:f8:eb:2a:66:f4:2d:f9:59:0e:cd:55:15:
                    f6:60:0f:65:e1:03:d0:0b:3e:e9:fe:a2:2c:e3:a4:
                    45:bf:b4:4c:4e:44:8e:6b:8a:00:de:2e:96:08:2f:
                    fd:dc:18:30:80:49:24:1b:96:e0:a3:6f:af:ef:fb:
                    e1:7b:07:86:96:dc:39:e2:df:48:45:d2:f9:a4:e5:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:2E:DB:0A:8B:6E:93:63:E7:20:7D:DD:9C:9B:49:5C:A7:60:9F
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:25:c9:d2:50:04:ee:57:79:60:8d:79:bd:5b:35:d1:5b:09:
         7e:24:42:53:2e:bd:8c:18:95:3d:8f:b9:1d:8f:c2:cb:6f:5d:
         7d:1f:af:cf:27:76:73:65:93:48:b2:d3:f8:78:94:32:f9:89:
         f6:98:ac:5b:12:21:f3:16:82:1a:c5:65:44:07:80:e6:e2:da:
         26:25:1b:a4:36:2b:b0:d1:11:3b:0b:c6:40:a1:d1:87:f1:cb:
         1a:e8:dd:89:ad:3e:76:56:3c:c7:f7:0e:68:b4:5e:ee:44:f1:
         4a:39:7d:e6:a4:7b:9f:19:b6:98:ef:5a:54:00:c3:55:a4:f3:
         14:79:b5:63:d4:c0:32:47:ba:54:5d:b1:8c:86:11:98:5c:a8:
         ef:d2:cb:9d:29:38:2b:a7:07:53:60:d5:57:7a:fa:7c:27:8b:
         a3:0d:e6:4c:ff:3b:4c:95:b4:be:7c:6b:34:91:ac:5a:26:5b:
         fe:b4:1a:53:7f:47:07:85:f5:1b:c8:00:f1:10:10:7c:ab:8d:
         11:e8:50:3d:f8:ae:ce:af:27:8e:c2:c1:d5:8a:98:5a:97:94:
         67:1c:96:c4:57:aa:93:27:ce:9d:ee:fa:04:fd:8a:d5:5b:be:
         42:b8:d2:8c:d9:d9:4f:00:0e:4b:59:77:34:f9:79:df:86:34:
         09:3b:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----