Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
File:                     bAlGwIGzK-hIywDY2TLowfcXlmg.mft (raw, json)
Hash identifier:          siOX6Zfi8rem522dODfw7laIiKN8IhKir6Vt6vY3SeI=
Subject key identifier:   78:7E:1D:7E:94:AE:A6:EB:DF:2A:A0:46:7A:7A:F7:B3:70:E7:DD:05
Authority key identifier: 6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
Certificate issuer:       /CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Certificate serial:       01962E61EB7175DA038F340CAD397C27743F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: bAlGwIGzK-hIywDY2TLowfcXlmg.crl (hash: awGWJz3qflA9f3sqFPbJ1IpJ3FdDf1n2N7thtw+Mx9Y=)
                          2: zcbK2VYAm9mMFJWXJQ7evncTyKY.roa (hash: IlkFU9F+u30MyRO9adAYRJd3agbOfEkk4M3dko//XTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:eb:71:75:da:03:8f:34:0c:ad:39:7c:27:74:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0946c081b32be848cb00d8d932e8c1f7179668
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=787e1d7e94aea6ebdf2aa0467a7af7b370e7dd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:66:03:14:aa:d7:76:e0:7f:66:e7:7c:84:
                    ac:92:06:7b:11:0e:16:a6:33:6d:36:3d:b8:ba:6e:
                    e2:aa:0b:c9:2a:ce:2f:1f:fd:3b:3d:b1:c9:03:51:
                    a9:41:e9:6e:41:6a:1d:59:e7:34:d2:47:51:0f:05:
                    3d:d5:91:ca:7e:24:68:bc:fe:09:54:aa:ac:fa:35:
                    1a:d5:8b:90:ce:03:cc:9a:a8:13:2c:c3:3a:0c:2f:
                    df:98:48:d3:15:fa:f6:44:30:8d:14:67:79:48:3c:
                    e0:6a:56:97:e7:da:07:f7:0e:50:8d:34:e0:c3:38:
                    30:7c:55:5b:b3:cf:4d:44:f1:57:f8:58:5c:67:2e:
                    9f:c5:12:61:13:7b:6d:16:89:76:7f:37:9b:af:45:
                    3c:bf:d8:dd:e6:0d:16:05:75:3e:de:6c:e4:49:f7:
                    97:c2:73:b8:c1:db:61:1c:30:eb:e9:15:b3:bd:aa:
                    44:d2:22:79:60:b9:49:48:97:92:99:4c:fb:22:d4:
                    d7:d4:60:db:a3:9d:d7:c1:dd:0c:5c:f0:86:61:5b:
                    bc:48:ea:e2:11:93:aa:e0:4d:b2:06:34:4b:a1:66:
                    ed:3d:d1:8d:48:3b:a6:f1:d5:75:38:f0:b3:44:1c:
                    d5:f7:ff:5b:40:7c:3e:0e:d1:31:65:10:cd:07:84:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7E:1D:7E:94:AE:A6:EB:DF:2A:A0:46:7A:7A:F7:B3:70:E7:DD:05
            X509v3 Authority Key Identifier:
                keyid:6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d9:7e:8e:f5:e5:c6:fb:a3:86:12:70:c0:c7:24:90:dd:6a:
         0f:b8:8d:c0:dd:0c:a5:53:36:7f:8e:44:41:f3:e3:5a:80:5c:
         9f:ab:f7:13:c1:d9:c2:e5:e8:7c:81:71:60:0e:0f:cd:2b:16:
         69:ad:d0:0f:00:56:da:d7:6e:cb:3e:2d:94:60:30:ef:e4:b2:
         80:ee:38:52:6c:2e:e5:e0:71:ca:12:bb:20:98:a7:98:0f:11:
         26:4c:1c:ed:cb:38:69:65:b4:b1:64:9e:79:47:13:bb:1c:ac:
         1f:bd:7b:71:74:d1:3e:ef:9c:0d:77:78:43:26:7d:f8:b2:9f:
         4a:5b:a9:cb:64:4b:49:19:56:8a:33:eb:d8:8c:f6:19:59:4e:
         fb:2a:89:7a:c0:10:94:1f:8b:4d:dd:ec:f1:41:55:b9:2b:6d:
         53:77:df:16:2a:34:0b:c9:01:0a:7a:57:4d:2c:36:ec:f0:ad:
         81:14:7a:4d:52:99:6a:c2:f9:cb:19:e2:64:0d:e9:38:cb:7c:
         12:57:59:37:14:16:e6:fc:4e:c2:f7:c5:6a:b4:ec:de:44:10:
         c6:01:85:73:a5:ee:44:46:89:00:01:76:e8:34:7f:9e:f5:26:
         89:a8:80:8e:28:db:09:96:e5:89:31:d3:62:72:a1:79:a8:41:
         5b:cd:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----