Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File:                     6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier:          NPpSWyCeFHlC3oTuRe4g3Fyr6bsUjmerYRzxtoiSejo=
Subject key identifier:   C1:D4:E8:BB:44:42:ED:C4:80:72:37:25:72:EB:DA:EC:12:07:AD:74
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer:       /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial:       01962E6217F9ADC489E42E5BF3143176D728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 09:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:42 +0000
Files and hashes:         1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: PE/N47CrHuR8Nf/KSM8KMcPhDUp/FwzQJsc7GSHkVvU=)
                          2: quAuk4oARA-zncvhJ5NL9KJVCeU.roa (hash: ItFM8RojPzfJum0retpVKJonKxKfGyoIIi91j+DB94o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:17:f9:ad:c4:89:e4:2e:5b:f3:14:31:76:d7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
        Validity
            Not Before: Apr 13 09:01:42 2025 GMT
            Not After : Apr 14 09:01:42 2025 GMT
        Subject: CN=c1d4e8bb4442edc48072372572ebdaec1207ad74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:42:b2:4f:9d:d4:81:67:e1:2e:8f:1f:da:
                    73:72:39:52:46:9b:ab:ed:25:f7:42:a4:f1:b8:09:
                    bd:bb:03:a1:4b:a1:8f:23:9c:1d:64:27:8c:37:7b:
                    64:4b:07:5a:d2:50:9d:df:75:19:3c:96:10:49:3d:
                    69:33:6c:2a:3e:df:18:fd:69:6e:62:e6:53:fa:f0:
                    fc:40:de:9b:3d:51:12:fe:ac:92:44:2e:f7:c0:57:
                    1a:0b:d8:37:94:3c:1f:0d:5f:9d:99:ea:df:bd:62:
                    d1:c0:00:d2:68:32:7c:39:2d:37:2d:09:6f:ea:a6:
                    f5:60:0f:1f:d3:ea:76:b1:b6:dc:9c:8c:90:89:7c:
                    c9:55:a6:35:4c:71:1c:d9:6f:4a:a8:be:66:be:32:
                    f5:50:bc:ae:60:7c:e0:35:56:1b:b5:83:b8:2a:62:
                    cc:9e:0f:ae:9c:96:a3:e0:a3:66:8c:ac:69:d1:b1:
                    03:d9:4d:a9:c1:fc:39:33:45:77:4b:9a:73:b7:f3:
                    66:78:0e:9d:39:46:f6:f6:01:0e:c0:2b:f9:64:99:
                    22:ed:e0:cb:75:58:64:91:74:58:15:00:85:0d:63:
                    19:a7:8f:fe:a3:fb:cb:17:66:45:01:c9:64:e3:f1:
                    87:2d:22:69:e8:df:d7:9a:c1:d6:b3:08:f3:c0:f1:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D4:E8:BB:44:42:ED:C4:80:72:37:25:72:EB:DA:EC:12:07:AD:74
            X509v3 Authority Key Identifier:
                keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:70:fa:99:0a:41:01:14:ea:e7:b3:5c:bd:31:b9:cb:7f:
         3f:6a:1b:43:36:c3:4f:9b:5b:b6:a4:05:a8:d7:69:02:88:ef:
         20:64:cd:a4:2a:4f:86:50:11:49:dd:02:e1:1d:19:35:3a:63:
         d5:96:78:43:9b:cc:e2:8b:bb:6c:04:49:53:b6:b2:a7:51:0c:
         80:f6:1e:55:5a:eb:6d:6e:33:55:ce:09:6a:9c:11:58:6d:f0:
         7a:29:64:c1:c6:32:8d:4d:ab:3b:54:9d:3a:4e:ad:8f:94:49:
         eb:54:b1:96:45:27:dd:b6:90:2a:67:1e:e6:08:7c:8a:0f:d8:
         e7:b6:bb:03:ac:72:1b:02:2f:04:a1:51:47:3a:3c:82:cb:17:
         ef:b8:94:43:4f:b2:15:5b:f8:74:95:c4:ba:50:6c:52:86:67:
         f8:7d:80:a4:5c:b3:13:81:7c:41:ff:e5:96:64:d8:22:67:cb:
         d0:81:cd:27:d9:a1:da:2d:a9:9d:0a:95:23:58:b2:df:6e:53:
         d2:35:2e:81:a9:9f:91:55:f0:b8:92:e0:82:b0:ce:a1:0a:5d:
         24:98:88:fc:cb:5e:b2:aa:48:02:21:99:86:5d:02:f9:4f:08:
         62:83:0e:d4:fe:eb:e9:64:60:02:ef:cb:50:ce:2e:f9:dc:3c:
         8d:33:55:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----