Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File:                     6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier:          IHH0xX/iK7VcmkkKmtD0THtWs206+YA1TvBK8VQpXPA=
Subject key identifier:   96:CB:14:6F:9D:EC:63:27:AE:37:8B:25:C9:AB:92:17:37:EB:D4:07
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer:       /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial:       01962F0737BB0A6D82482EFA09C9806E4E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number:          0B5B
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: 5YovwIx-DfYnXnDFJMr95lV97fM.roa (hash: 0/AccKS7ESwqh7EBZGAQBHJV43ER12Y2X7ow/8sTA3k=)
                          2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: wqfzsjY1FzP/LXdXJsUjholr/2FkdBLM7LcDoebQKvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:37:bb:0a:6d:82:48:2e:fa:09:c9:80:6e:4e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=96cb146f9dec6327ae378b25c9ab921737ebd407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:30:62:09:63:44:5d:a8:2e:0d:1c:c9:2f:
                    51:d8:a1:97:8b:2c:d5:cb:e8:7c:1f:56:57:c0:65:
                    85:ae:7c:bb:8a:83:f0:f6:a3:88:1c:07:90:d9:91:
                    73:14:8e:2b:86:f9:47:aa:bc:97:b6:67:f4:21:6d:
                    d9:7b:be:6f:5c:cc:b1:c8:ef:56:09:89:09:72:6b:
                    23:ed:ec:65:e3:f7:14:e7:f9:9f:5b:00:f9:9f:bb:
                    a2:ba:d8:d2:38:69:d4:82:61:14:ec:cc:f3:e9:7a:
                    73:f6:b2:1a:8f:e4:9d:83:63:39:b6:95:95:37:ee:
                    29:f3:99:e3:1d:d3:0f:32:37:17:03:37:e3:8c:df:
                    4a:b6:bd:27:a8:99:ff:41:c1:e1:4e:f1:1a:46:ca:
                    a5:07:63:83:ff:f0:08:f9:24:13:51:b7:6b:85:4b:
                    7d:01:e3:b5:23:b7:5e:e3:0b:30:b7:ae:3d:fc:bd:
                    bf:31:73:af:31:9a:3f:90:05:f5:2e:1f:06:de:7c:
                    d5:41:33:26:f1:cf:4d:7c:14:35:43:4e:64:7b:4b:
                    16:92:6b:df:1e:1d:b4:ce:db:b8:43:d3:33:4d:dd:
                    1f:27:a8:91:17:c0:76:05:c2:7c:dd:ba:7f:09:27:
                    9d:48:3b:8d:15:c3:46:2d:74:ae:4e:42:a2:c5:af:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CB:14:6F:9D:EC:63:27:AE:37:8B:25:C9:AB:92:17:37:EB:D4:07
            X509v3 Authority Key Identifier:
                keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:be:f2:74:d0:8c:8c:97:46:e2:5f:9c:38:5e:16:ba:d5:
         f5:47:0a:19:c6:8d:a9:26:ca:a5:7e:17:f2:92:84:13:1c:dd:
         fe:e9:7d:e7:a1:69:6b:77:d0:37:cd:9c:1d:c1:b3:00:8b:9b:
         4e:c7:2d:7c:29:2b:fb:48:a1:8f:16:40:d7:c7:88:6b:5d:47:
         9b:c8:8d:b1:ee:ee:16:c4:60:a9:ac:59:48:41:46:ab:92:91:
         16:d6:cd:c3:ab:d6:51:be:d2:dc:74:dc:41:ce:bd:26:61:d1:
         10:23:4c:f1:af:b1:62:74:ab:47:51:23:28:25:e9:8b:de:78:
         35:ff:2a:c6:95:e7:e0:ae:e3:8a:e0:11:63:e8:16:0b:dc:fc:
         37:da:9f:b3:c1:5b:4a:a4:0a:c6:36:37:bc:b5:14:55:22:4b:
         8b:70:2f:3d:07:b6:36:32:4b:6a:95:bb:04:ae:29:cc:f2:89:
         e0:fe:fc:10:e8:a7:37:7e:2d:5b:ff:70:da:14:20:fc:06:19:
         a3:ec:60:b0:1d:16:c3:90:0b:92:0d:df:61:b3:e8:e0:06:bd:
         f4:30:8f:da:10:e4:5c:f3:bb:fa:4d:28:cf:71:98:88:57:d0:
         bf:05:b8:f1:73:1b:b9:65:39:5f:ca:15:ec:e1:93:26:da:8b:
         6b:5b:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----