Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
File:                     G6BsMiNp1EnhdPpzEEezOXI_sB0.mft (raw, json)
Hash identifier:          VUL+16ryPmBgN3l5fdSjr2qVUTB+h/XtK4K0CPpHsz8=
Subject key identifier:   86:85:8D:BD:7B:3B:E3:F1:FA:8D:2C:93:2B:0A:BE:E9:B5:E8:15:86
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Certificate issuer:       /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial:       01962E988C958C98200AA79174235DE14989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: G6BsMiNp1EnhdPpzEEezOXI_sB0.crl (hash: L4xZitfnMOVGPAt8NpD5mOSexrIzvDvW2WopepXHiwM=)
                          2: fudzAOYoQEbBVmwmOdYtJovy1uI.roa (hash: QG+JwJM3okPXrIbfWoNTAizNGt25NFUxghJxGtiJeCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8c:95:8c:98:20:0a:a7:91:74:23:5d:e1:49:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=86858dbd7b3be3f1fa8d2c932b0abee9b5e81586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:bc:87:67:06:01:db:c8:4a:ef:50:ef:7d:
                    58:a9:7d:d7:a7:89:ce:7c:94:38:0e:9a:c2:e7:e5:
                    9f:40:ea:ad:e5:06:80:f7:19:46:e4:80:31:1e:ae:
                    84:53:52:aa:25:47:13:2e:ae:25:08:b9:3b:63:fe:
                    44:19:f1:85:a3:f3:de:f8:7e:aa:be:8a:19:56:c0:
                    37:ea:80:81:7c:4c:58:2c:77:86:96:ec:0c:19:0d:
                    cd:e5:66:f3:a8:a9:77:9f:5e:4e:3f:9f:42:77:d0:
                    8d:45:76:65:d0:f7:7c:b0:e6:32:55:ab:54:4b:cc:
                    ad:47:59:86:5b:14:3a:f6:5a:08:75:6d:5e:af:21:
                    20:bf:b8:4c:1f:cb:bb:76:a5:74:10:25:6c:f9:43:
                    7b:09:3c:3f:99:93:c5:13:b4:6b:d0:a4:37:aa:99:
                    6a:8c:9b:94:d0:e7:ab:15:a7:dd:dd:5e:69:4e:dc:
                    5d:96:d0:39:28:b8:36:03:1c:61:b7:a5:c3:9a:c8:
                    f2:bf:2c:8e:62:7c:67:64:5b:cb:a6:be:7d:14:5c:
                    ed:7a:fa:3d:56:cf:fb:01:d9:36:48:45:df:fa:ba:
                    c8:7e:ac:e6:c6:23:26:55:5d:74:df:e8:3e:01:c4:
                    58:71:bd:ae:a1:f3:88:89:08:b4:cc:29:12:ce:cd:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:8D:BD:7B:3B:E3:F1:FA:8D:2C:93:2B:0A:BE:E9:B5:E8:15:86
            X509v3 Authority Key Identifier:
                keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:62:4a:a4:ca:4e:35:12:95:df:e7:a0:a4:23:55:34:5d:
         8b:50:98:b0:57:39:30:31:53:67:55:0b:87:72:35:a9:96:1b:
         10:0f:0c:04:91:61:ad:c7:39:0a:97:7e:e8:b2:d6:82:b3:d6:
         23:2c:b3:cd:d6:47:68:1b:10:c1:1f:03:e0:ab:59:be:6e:d1:
         b2:05:31:49:4c:45:1e:eb:14:96:6b:2f:31:7a:e9:90:66:e2:
         53:d8:fd:d9:dd:ef:ff:85:79:77:d1:54:aa:d6:33:0c:a7:80:
         26:48:66:9a:44:f8:26:6f:2c:7d:1b:5c:d9:d5:0a:fa:53:8e:
         b1:c1:1e:07:4c:08:fa:6e:46:db:d8:65:18:24:ff:52:3b:37:
         ee:28:e9:d5:00:0f:08:26:ea:26:01:a6:8f:57:1a:8f:c5:7d:
         26:7e:da:67:a6:0e:f6:1f:17:06:1e:4e:67:e2:19:8d:9a:07:
         b2:1d:38:5a:c8:d1:5a:ed:2e:b6:76:64:24:75:0e:82:ab:19:
         15:96:b8:43:a7:71:1f:c2:40:b5:b2:d4:3d:07:5d:d3:1e:5e:
         07:80:34:2d:5a:d2:b0:51:38:8e:24:ac:c1:9b:ed:94:a2:26:
         b1:47:75:82:4a:fe:b4:d0:3d:c7:5b:49:d3:8c:c3:4e:ed:c6:
         14:01:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----