Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
File:                     anosbb5RGgdHJDepoPtPzNEr6J8.mft (raw, json)
Hash identifier:          XmadBNZ/v/8YncXZn3FyVkh/9cZyfdcmkhsNHQ8yFHY=
Subject key identifier:   C6:67:15:EB:41:71:3D:4A:03:00:6B:DD:EB:70:BD:16:F2:6B:B4:7E
Authority key identifier: 6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
Certificate issuer:       /CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Certificate serial:       01962FAB397861365428BA90DF9B5B2030CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: MTWR2-fK-zXP_vo66N4nyK1kX1Y.roa (hash: 6274b1F9aoiTzplMN8aMf75bval3AD8cdeJgbZU5gLo=)
                          2: anosbb5RGgdHJDepoPtPzNEr6J8.crl (hash: BQlD17q3ygHdM+2mqSjEixqSaxx6uO3NtKfbUIKkZO4=)
                          3: xWfN2IU-diJGvyXLhrBtpHOen6U.roa (hash: dGi8XxSgvv52xppxzLayzkV/Yel0ZIVTBr2h42n6ktI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:78:61:36:54:28:ba:90:df:9b:5b:20:30:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=c66715eb41713d4a03006bddeb70bd16f26bb47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d8:90:9e:92:46:03:54:94:a9:cc:e6:33:cd:
                    fb:67:f2:39:74:21:a3:2e:cc:29:2d:c6:b5:29:20:
                    1d:76:ef:9f:08:e5:5c:d9:ae:da:8d:1b:e1:c6:f1:
                    11:57:e0:13:da:24:fb:f7:f0:b4:05:a2:e7:94:52:
                    b3:3d:32:1d:0c:4b:67:bd:86:c6:cf:b0:e7:d4:67:
                    82:cf:86:c6:2c:e9:0b:bd:45:a1:4e:c5:8a:87:30:
                    11:fb:e0:c6:e4:39:41:66:7b:9a:37:cf:28:8e:53:
                    6a:36:8a:9a:9e:f7:a7:bc:72:4b:c7:28:a1:c1:4d:
                    db:a7:66:e8:1b:02:cb:4e:e6:f4:98:24:a0:72:06:
                    b4:aa:3e:00:f0:2f:33:07:e5:de:da:90:4c:94:07:
                    fd:65:85:7e:b7:63:0b:a0:7b:ea:2f:ed:d4:b4:b1:
                    00:ae:a7:69:4b:23:60:05:17:49:f8:f9:b6:8e:2d:
                    be:a8:cf:64:f3:4a:26:4d:44:9a:8b:bc:29:73:34:
                    31:af:e6:cd:7d:73:24:70:ee:b4:67:43:af:1e:c1:
                    b6:6a:2e:e5:05:6e:f4:56:45:f6:19:d4:34:cd:c2:
                    21:ee:e8:b8:2e:36:6b:19:eb:81:ae:28:ad:b2:e2:
                    73:d4:be:f2:16:c0:68:1d:cf:2e:c0:c6:5a:4a:a6:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:15:EB:41:71:3D:4A:03:00:6B:DD:EB:70:BD:16:F2:6B:B4:7E
            X509v3 Authority Key Identifier:
                keyid:6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:09:46:22:f2:8a:f4:c6:69:2c:1e:6b:e3:01:3b:d9:93:6d:
         60:da:57:ef:60:37:86:42:d2:0c:e5:06:dc:c1:4b:9d:f4:38:
         df:bd:47:bb:7c:1d:ca:6e:9e:34:59:36:79:20:66:c4:37:d5:
         9f:a5:c0:55:55:2b:d2:0f:2a:40:f7:c4:e4:2c:33:b6:0b:a1:
         21:b0:5b:32:17:b4:8e:71:32:e8:17:d5:8c:27:01:75:0e:64:
         2c:5f:41:73:42:aa:80:3e:21:6e:b3:71:a7:aa:5a:b9:4a:48:
         a1:09:3c:19:17:c6:1d:68:ef:72:85:69:da:7b:03:3e:35:26:
         00:13:97:08:39:d1:eb:b1:35:9e:08:20:25:41:8b:57:fa:03:
         e0:91:37:02:54:05:0e:65:b5:e3:dc:ec:72:0b:e7:23:12:33:
         0a:cf:29:a5:f4:6b:c9:7c:e6:76:71:17:43:20:b7:53:48:a9:
         cc:63:c1:ea:28:48:d1:34:db:d3:d5:25:1e:5d:47:19:3e:ef:
         d5:89:cf:42:f7:83:24:a3:2f:ec:c8:48:ad:5d:39:d2:ae:72:
         5d:4f:78:70:28:74:1a:63:73:ee:db:be:42:60:05:f9:ff:97:
         76:52:38:9d:59:a7:55:71:55:cb:52:99:51:ab:59:e6:6c:80:
         db:65:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----