Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File:                     a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier:          pi+EVnbfCoefB68cMPtHWugWh163ygrV8/BHW18Haqw=
Subject key identifier:   1C:A2:1D:3A:D8:93:AF:C2:26:60:0C:64:7D:C8:B6:7D:7E:44:53:6C
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer:       /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial:       01962E61AD61D7B9660AC8D51C60B81B3F0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
                          2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: 1iX1T5bfg+3KFEsQ/8SdwmsLaX/hAoCafEwNEAOX0RQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ad:61:d7:b9:66:0a:c8:d5:1c:60:b8:1b:3f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=1ca21d3ad893afc226600c647dc8b67d7e44536c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:48:05:1e:9b:2b:56:e2:68:75:a9:24:04:33:
                    6e:8b:0c:98:12:f1:2a:9f:ca:c8:8e:2a:27:28:42:
                    18:96:34:77:ed:81:52:9f:35:84:c4:7c:e3:76:7e:
                    c1:e4:ea:b0:73:f8:9c:17:48:04:0f:51:22:f8:de:
                    6d:10:02:9a:8e:72:c6:ed:b4:d3:4b:5e:73:45:0c:
                    1b:65:da:6d:34:43:70:06:14:e8:00:3c:cd:c8:3e:
                    c3:25:f9:17:55:d9:83:bb:b8:ad:e3:d4:95:e8:75:
                    71:02:6c:5c:5e:98:ab:a7:e6:f4:83:c0:c3:ae:22:
                    f6:65:fe:1e:f6:df:16:24:3a:a8:3a:46:0c:da:a9:
                    67:42:9f:57:73:58:a4:ad:d8:c2:df:9f:c2:e3:9a:
                    69:86:ba:02:d5:02:be:38:22:f1:1b:27:c2:86:58:
                    33:c6:ec:8e:78:fd:2f:be:2c:02:d8:47:a9:f2:07:
                    76:a0:c2:f7:d3:df:79:88:0f:69:f4:f1:f4:99:27:
                    f5:2b:ba:3e:2e:5b:08:df:5a:f4:7d:ff:f6:97:9b:
                    20:63:99:27:c6:9f:10:93:85:80:d1:2a:9e:29:5a:
                    fe:f6:56:bf:14:e4:de:50:7b:73:de:ff:c3:e3:d5:
                    d8:aa:58:71:44:33:ef:8d:05:2a:9f:ce:e2:95:54:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A2:1D:3A:D8:93:AF:C2:26:60:0C:64:7D:C8:B6:7D:7E:44:53:6C
            X509v3 Authority Key Identifier:
                keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:d1:c8:a5:f3:88:5a:6c:00:68:ad:7d:cf:3c:77:7f:cd:
         97:6f:86:3e:a0:44:28:e6:a6:40:ff:e9:97:6a:10:3c:ab:2c:
         a7:a6:32:04:07:4e:74:6f:82:ee:eb:a4:51:91:ba:ee:02:71:
         67:f3:89:0e:4a:66:d4:82:34:0c:90:be:76:cf:e7:10:85:2e:
         f5:52:95:50:41:9c:84:06:c5:a5:f5:cb:26:62:8d:9a:3a:83:
         da:0a:7e:45:8d:45:7f:42:42:b3:69:bf:cc:68:7d:6f:f4:49:
         56:5c:47:a9:ff:67:07:91:17:01:10:f4:84:b1:a0:33:64:14:
         b2:36:b4:c9:7f:cc:03:44:70:d3:f4:d6:df:d3:68:b1:f8:3b:
         e5:53:f6:1a:57:93:eb:e8:ee:b9:af:eb:9a:d3:e0:a2:67:94:
         bf:46:63:3c:98:ad:7f:a1:90:1b:69:2f:0c:ee:74:24:81:58:
         50:45:57:cb:76:e9:6f:58:63:06:06:f3:c8:4b:07:0d:b4:4d:
         2b:98:9c:07:f5:07:a4:da:2f:25:3c:8f:ab:fb:60:4e:ea:db:
         ac:7b:2f:3a:d2:a6:3a:fe:b7:57:68:b8:82:20:e4:9e:e9:9f:
         49:e2:ac:99:15:4b:9a:45:7a:1d:b4:43:ea:92:e0:3c:74:c5:
         fa:8e:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----