Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
File:                     6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json)
Hash identifier:          OqfdIXIfYIl3utXKAkKH16aJXLmUKkLSNPuhguQkd+Y=
Subject key identifier:   5F:53:D6:32:46:0C:B4:A4:BC:CC:31:9A:97:5E:71:91:B8:38:97:26
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Certificate issuer:       /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial:       01962FAB6FA39A92EADD76E655142D0535E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: 36Dd1TTgW9Sk3By0FP4cwlBgJpItTjJU4856PMCu/Cg=)
                          2: IVdjVoN4btCTyMYmCO02k9GntBE.roa (hash: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:a3:9a:92:ea:dd:76:e6:55:14:2d:05:35:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=5f53d632460cb4a4bccc319a975e7191b8389726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:86:c5:39:df:7e:a9:52:16:5f:cf:04:88:
                    6c:e7:c5:b4:e9:76:02:a6:b9:85:c4:e4:0d:6c:28:
                    ac:65:4b:54:61:14:cd:a0:5e:1a:9d:c1:2a:8a:03:
                    c0:e2:2f:09:eb:82:51:b2:98:7c:bb:f3:3c:96:5d:
                    94:15:98:01:52:47:cb:37:1e:92:49:bc:e9:de:bc:
                    a6:fa:7b:9f:1e:b2:30:95:c3:09:56:16:46:1e:a0:
                    2f:ee:51:ec:69:93:c9:0c:bd:50:76:01:ca:18:e4:
                    f0:6c:1a:d2:55:73:8b:98:08:09:d3:57:5d:2e:4c:
                    4b:3d:d0:11:7b:75:2e:c5:9f:58:ce:50:ea:d8:b9:
                    5a:9a:73:64:87:40:23:03:8d:63:db:ff:31:39:f0:
                    27:2e:2d:66:48:19:1c:3d:d4:30:6d:0f:dc:ff:db:
                    ac:cc:32:50:39:b7:62:c3:ad:3a:39:e0:a3:f2:a3:
                    f1:94:a0:79:e0:bc:ad:0f:63:b8:8b:99:32:46:1c:
                    a1:a5:0e:c8:4a:bb:b8:1d:f6:9d:54:2b:bd:05:68:
                    f5:7f:2e:38:52:d7:4f:a0:14:ff:90:11:6d:75:9e:
                    e3:0c:6d:dd:a3:eb:c9:05:2c:e9:b7:55:69:14:08:
                    87:aa:41:cc:f4:91:f3:30:cc:27:a9:69:66:da:83:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:D6:32:46:0C:B4:A4:BC:CC:31:9A:97:5E:71:91:B8:38:97:26
            X509v3 Authority Key Identifier:
                keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:14:09:52:46:16:e9:17:2e:c8:36:b7:17:e4:eb:5d:4a:93:
         7b:a6:90:45:fa:90:f3:56:d8:83:e9:60:43:e5:e5:c1:bb:db:
         03:8a:d3:6a:00:e6:17:08:62:dd:3a:fb:b5:9c:07:93:94:30:
         84:f7:8e:59:9a:48:ad:28:11:e8:40:ac:17:a5:ba:ba:81:b5:
         57:ee:55:7b:fb:7a:59:a4:ae:3e:a4:2d:76:0f:ed:a6:12:9b:
         55:21:73:16:59:a1:5f:47:93:cf:51:71:9c:0a:cf:37:06:ad:
         04:14:8c:92:6e:32:8f:7b:6e:d0:04:60:87:8c:d8:9e:e4:75:
         30:55:ec:85:3a:12:0d:fb:4b:50:53:62:60:62:a9:c9:ac:85:
         be:61:52:25:a9:3c:68:6d:54:6b:47:ec:51:ab:8b:0a:34:65:
         cb:65:d0:c3:2d:88:2e:b4:f2:4c:ff:d5:79:83:5d:45:17:26:
         58:32:92:13:94:81:63:6c:a8:4b:b6:4c:ca:06:ff:3a:94:29:
         0f:09:6d:db:5d:38:cf:52:03:9d:63:03:06:7c:f9:f6:9c:ed:
         d4:85:14:ed:33:6e:17:fe:76:47:3b:49:60:13:0b:82:d2:95:
         6d:89:de:c1:78:bc:23:af:64:df:ec:48:5e:9a:ae:76:07:99:
         30:b8:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----