Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File:                     aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier:          wAa/xMYUYrTKa+yRb8KysDBFoG5IU82yIeLVh79+zG0=
Subject key identifier:   55:E2:A1:1A:A8:C9:82:56:25:BA:BF:C8:09:78:F5:C7:6A:F7:39:95
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer:       /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial:       01962F06458C533B60C3C46FABF51DDE60F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: NvMZpXbfqLVR3DewOg2+d2x1PoHIuB2Kjkrq/84EMb0=)
                          2: ndozZxXsqqvoYlnvn2R8eG6q9WM.roa (hash: J/bxB2F1VD9ABMhf1I4cZo/1cjeHrt4Cto7ZdYkPM28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:45:8c:53:3b:60:c3:c4:6f:ab:f5:1d:de:60:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=55e2a11aa8c9825625babfc80978f5c76af73995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:ba:ee:a1:f1:47:75:8d:d2:dc:cc:14:41:
                    98:9f:4a:42:38:42:36:32:ec:3c:39:ee:71:1b:97:
                    a6:61:6d:a1:7c:ae:f7:8c:1c:c9:8b:cc:1c:dd:1e:
                    11:02:5c:aa:bb:f0:6a:3f:6c:7e:f4:75:73:4a:24:
                    93:c4:f5:5c:c8:c9:04:46:1c:a5:74:63:9d:64:dd:
                    6b:30:b0:2f:73:bb:22:52:a1:43:a1:ed:b5:e9:7d:
                    69:ac:1d:03:bc:d2:72:39:73:a6:74:1c:09:0b:64:
                    a4:33:de:7b:7f:68:67:bd:74:2c:f7:20:6a:68:e5:
                    09:24:d4:00:83:a7:df:eb:15:d6:7d:1e:44:51:c5:
                    da:96:b1:90:2d:b5:6d:a9:13:35:22:f4:ca:03:7d:
                    44:22:6b:53:a6:e4:24:7b:43:7c:e9:61:34:18:c9:
                    8c:62:b1:d6:24:c6:18:1b:14:9c:53:65:0d:1b:50:
                    3b:2a:d9:f9:26:16:9b:26:ed:c6:76:31:ff:66:36:
                    d3:b4:23:c7:0f:a9:02:e0:c1:3f:4e:9d:db:99:a4:
                    3c:76:da:5b:7c:ad:2b:cd:c6:53:8c:4f:49:b4:98:
                    0f:de:ca:ee:d4:3c:23:2a:5f:0f:58:58:83:b7:40:
                    f5:91:28:85:8b:bd:c1:25:ef:1a:e0:84:2c:b2:9d:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:A1:1A:A8:C9:82:56:25:BA:BF:C8:09:78:F5:C7:6A:F7:39:95
            X509v3 Authority Key Identifier:
                keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:f5:16:36:88:88:96:45:d6:6a:af:bd:19:6e:21:1d:59:
         c6:ec:e3:0b:0f:ea:f4:1e:cc:fc:b3:35:bd:5a:ce:19:40:32:
         e9:95:ee:89:dc:b9:07:91:bd:f7:15:97:3b:d9:f1:be:67:9e:
         ed:12:b5:45:aa:c3:0e:c1:85:9d:9d:15:a2:e1:c6:ec:a7:90:
         52:fb:3a:d6:ce:20:c5:da:32:b0:4e:99:94:ed:3b:c6:08:12:
         80:3b:11:ce:7d:04:b8:e2:df:ae:d4:0b:c2:c1:41:c0:61:54:
         59:76:53:57:22:07:40:bf:7b:93:1b:cf:87:69:8b:3a:2f:bf:
         c0:c4:e5:36:79:37:b1:1c:88:05:07:6e:47:ab:c8:ef:be:fc:
         11:fd:4b:88:0f:a6:b6:8e:f1:0e:43:ab:8a:f5:e3:02:19:9b:
         6b:98:12:90:66:51:b2:ad:20:40:89:72:ff:8f:a9:cd:8f:e6:
         8e:ff:4d:74:09:29:ea:eb:9b:54:ce:a9:ab:f2:2d:e3:f6:c5:
         e8:25:78:3b:a5:15:02:96:bd:f6:31:ee:30:ca:1e:e3:fb:88:
         c0:7b:5e:39:94:e6:f1:d4:03:33:f0:ce:cf:d4:44:1c:6f:3f:
         37:dd:dc:d0:a4:34:7f:34:c9:25:9a:2b:98:82:ed:68:4c:46:
         04:ee:99:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----