Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
File:                     6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json)
Hash identifier:          ydAzYh26XERjOsOAI6sAcasTFv+4DdTVqnTQEHYHHYA=
Subject key identifier:   22:0D:AE:A9:65:39:C7:68:2F:F9:95:7E:26:DF:78:81:D1:79:52:23
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Certificate issuer:       /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial:       01962E9933580B7F20716DFD338DDA6E2B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
Manifest number:          11C7
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: GEf8eHw66VLOggNiHdcej8KWTImt36nn+C2HxeYGYys=)
                          2: DEYi7WsKY2zM3uINUVpUki3PaVg.roa (hash: DRmT8SF6k5qeKVt2hMFQ+AwmgRFjXhlT847OzPWC7g8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:33:58:0b:7f:20:71:6d:fd:33:8d:da:6e:2b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=220daea96539c7682ff9957e26df7881d1795223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:5f:37:a5:e8:54:98:7f:ec:9c:18:35:92:
                    8c:f8:60:20:4c:9d:54:92:9d:b2:70:61:af:19:37:
                    cf:e8:7f:78:3e:54:3b:a1:9b:20:69:9d:9c:69:10:
                    35:5d:1a:1b:26:31:16:4d:a4:53:c5:df:59:bb:4d:
                    f1:56:1b:ed:98:fd:98:11:8d:39:3f:7b:b8:8b:07:
                    96:9c:5c:51:c3:81:75:51:b4:96:a4:31:b6:21:35:
                    a2:9c:25:57:e1:5a:2d:c8:0a:b8:c1:ea:79:b0:96:
                    b7:48:cf:c8:23:6b:44:63:e9:e2:0d:b9:d0:e6:65:
                    85:fa:5b:17:80:9f:9d:10:2a:88:32:aa:e0:d6:d1:
                    ea:06:b7:c2:25:11:2c:ad:ca:f0:8d:26:00:cd:16:
                    75:32:91:2c:2e:8a:73:6c:d3:73:98:bb:7f:13:9f:
                    a0:f7:a4:3c:57:79:20:c8:0f:de:06:6b:80:d6:1d:
                    e0:fd:b5:ce:f9:05:ee:81:26:f5:1d:18:45:c1:b4:
                    e2:8c:ff:d0:55:56:dc:75:ed:13:08:72:2c:fd:59:
                    a2:9e:93:db:aa:02:0c:7d:6d:ca:36:60:9f:67:c1:
                    04:34:b0:02:1d:aa:48:21:e5:78:35:0d:61:f7:85:
                    a1:8e:2e:49:cf:ae:de:2c:bf:c2:45:2e:39:05:f2:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:AE:A9:65:39:C7:68:2F:F9:95:7E:26:DF:78:81:D1:79:52:23
            X509v3 Authority Key Identifier:
                keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:73:6d:91:cf:0a:b3:bc:93:a7:7a:d8:f0:24:62:cd:aa:
         82:aa:94:e0:59:b9:0e:7d:04:7c:a5:e3:4f:fa:88:9d:61:84:
         c6:55:74:3e:2f:c7:b3:c7:15:e9:7a:78:f5:9c:34:fd:ca:66:
         4b:a7:4d:db:1b:a2:86:64:8e:b6:81:7b:54:4d:21:9a:b6:12:
         ed:54:5a:4a:df:1b:26:c5:f9:10:39:3c:ba:d3:df:59:27:91:
         4c:9d:09:5b:94:de:d9:c8:b0:7d:71:05:8d:70:20:a0:69:a5:
         00:6b:ab:3a:93:3f:6f:c0:20:d8:9d:63:9c:b9:2d:c9:4a:7f:
         e8:27:74:83:14:b2:45:0b:46:6a:01:d5:59:cb:91:09:70:14:
         82:bc:24:55:84:fc:c5:b3:1d:67:cf:ba:24:d8:7d:f9:65:27:
         b4:0c:4a:69:2f:0f:8e:18:7e:63:c1:44:f3:e7:11:7e:4d:f0:
         6b:4e:d9:85:03:a6:27:c7:e5:67:94:30:5d:ca:a3:b9:ee:14:
         ef:e4:dd:97:66:b9:28:a8:99:e7:50:e9:30:51:3d:75:a8:7b:
         ad:ab:e5:83:7b:bf:da:bf:27:ab:a8:dd:07:40:fe:86:74:b3:
         58:78:2c:ab:87:3f:53:0e:15:35:72:85:69:df:1c:3f:0a:3c:
         7b:04:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----