Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File:                     p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier:          +Ug/UnR8S+j26EQFM/HbG2+3W785xNR/D7Cdxhy+K8E=
Subject key identifier:   24:0B:B4:1D:20:55:27:97:B4:52:19:BA:35:3A:E0:61:C8:BA:F6:2A
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer:       /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial:       01962E61B903F8A3AB3EDD730D3E09073349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number:          112A
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=)
                          2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: VQzpgih4GPwZc8kAPIUYRsuhgjsQmE2Hb2B1H0mvhek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:03:f8:a3:ab:3e:dd:73:0d:3e:09:07:33:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=240bb41d20552797b45219ba353ae061c8baf62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:75:7b:57:67:27:60:5c:4c:80:3d:6d:96:
                    2b:49:5b:96:f9:ca:55:5d:1e:81:32:af:48:8b:5f:
                    b0:35:61:3f:2b:20:36:25:73:25:fd:47:aa:11:1c:
                    db:85:e7:21:c9:6a:dd:04:f2:ae:2e:70:b2:ef:52:
                    ba:12:f2:bc:84:4e:20:d6:36:6a:99:0d:ac:68:7e:
                    06:b9:fb:80:22:53:aa:90:a1:29:0a:9e:79:6e:41:
                    9d:75:69:6d:bd:de:c0:40:2d:b5:95:4c:9c:f3:99:
                    f9:15:02:cf:d0:54:a5:a0:2a:ee:71:11:5a:b2:95:
                    fc:93:db:b5:dd:0f:00:85:f3:03:00:c3:2d:31:6f:
                    9a:25:ba:0b:0b:d9:20:c7:18:c3:6b:55:d5:5a:4d:
                    c7:6e:d5:35:88:f5:22:72:43:31:c2:74:73:b7:16:
                    4c:b5:29:53:db:a6:9b:8d:5e:6d:54:5e:fa:7c:b9:
                    5f:d8:78:3a:8e:dd:b0:b2:83:dd:f3:8e:1a:0c:f1:
                    8f:fd:a0:f8:04:42:16:5d:d8:e6:a5:26:f3:b1:1a:
                    c1:44:69:0a:2c:e8:86:ad:ab:2a:24:7c:fe:b4:f9:
                    d4:4e:53:07:1e:c9:dd:5c:06:09:36:77:f6:17:30:
                    2f:67:0f:90:11:f7:6d:52:a6:03:2f:e4:63:cd:ca:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0B:B4:1D:20:55:27:97:B4:52:19:BA:35:3A:E0:61:C8:BA:F6:2A
            X509v3 Authority Key Identifier:
                keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:6d:73:cd:55:f1:77:8f:c0:37:2e:7a:51:3a:86:5a:ae:
         96:46:12:6b:45:fb:78:88:fa:9c:f0:be:66:b3:5b:f4:73:89:
         ef:d0:32:24:5c:3c:ce:ae:ac:38:da:85:8e:8b:da:b7:1c:db:
         cd:07:89:3b:49:ad:01:af:ad:87:c7:62:6b:d3:d3:8c:d7:e3:
         f1:b2:8b:3e:36:f5:fa:c0:df:1d:73:c5:7e:54:85:d7:3f:b6:
         37:41:6a:8d:28:a6:33:b8:24:b4:9b:da:cc:28:f7:33:c2:5c:
         94:20:01:cd:3a:7b:75:69:39:e3:fd:b4:dc:06:95:f1:75:e9:
         5c:5f:1e:f6:06:f2:d8:1b:a0:5c:9b:cf:56:40:f4:df:65:11:
         13:0c:e1:aa:50:ee:46:8f:17:ea:65:70:5b:ca:8c:ad:ba:8c:
         2f:ad:29:17:95:e0:4c:36:a8:98:46:85:78:9f:90:b6:37:75:
         31:4b:4a:14:d1:43:99:f2:29:16:de:c0:f7:94:7e:92:03:e8:
         e2:a6:a9:82:8f:05:cd:cd:2e:6e:92:18:88:01:ac:b4:f6:ae:
         1a:de:d3:13:03:5b:1f:f8:1d:f2:da:ac:4e:05:49:b1:5b:bb:
         fa:df:e0:9f:8b:80:2d:79:cf:c4:32:c6:9e:df:0a:be:4a:c2:
         d3:da:51:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----