Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
File:                     6dJyHy4r0BG4poYK0lcsQFwLVA8.mft (raw, json)
Hash identifier:          Jlu2RVVPQhEHm1wZXdkVAnYRQJXnvhY5guhhrOMWvko=
Subject key identifier:   E2:60:46:CB:DA:7F:07:74:63:F6:28:CE:15:17:D1:72:71:1F:59:7F
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Certificate issuer:       /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial:       01962ECF8C2AD21D46ADFCB343210D05EEAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 2vSBXa-4cZ9KNUTnl_Cntx4udbg.roa (hash: gZugcctK6vS3axiBuW+2L4PJ0fff6TOOybJrcmsWbI0=)
                          2: 6dJyHy4r0BG4poYK0lcsQFwLVA8.crl (hash: FB09ahg8WrFaMPAEZyerNUwlg9dl+vzd7NrK5/OTiZw=)
                          3: LsWSdAS1TXKersyl9EL18bbqBfM.roa (hash: YbeY8cd/gw+TzClLCzR2l5xbj5HoKVEuVLP8CS1pIGI=)
                          4: i3He8U0S-TMk840eguUDBWZU4Xo.roa (hash: OsYymyf31CVGqRQfFqwp+UbHCgnD9LSUz4IXdT5ASDk=)
                          5: nF_pFEUAL2eznLlq66bDUYV81n0.roa (hash: kkJ3N73ZOxQUlQop6wpAOdnE2o7Q14I6zpSGsz3qNCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:2a:d2:1d:46:ad:fc:b3:43:21:0d:05:ee:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=e26046cbda7f077463f628ce1517d172711f597f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:db:d4:c6:15:1c:ac:55:d2:0b:a9:63:cd:
                    e8:30:a3:c5:8e:74:cd:df:3a:84:4d:0a:8a:d1:55:
                    30:5c:30:b6:c8:a5:ac:06:7e:7a:2a:da:4e:1e:d4:
                    ad:58:09:da:9d:01:38:92:6a:58:65:c6:05:cd:5f:
                    74:6d:c3:db:3a:86:5f:6f:53:6d:5e:0e:79:2c:fe:
                    9b:bb:d0:59:f7:41:0c:88:c7:ec:2c:9b:4d:de:06:
                    b2:de:f9:7f:5d:2c:e5:28:0a:bd:a8:7e:50:e3:1e:
                    89:ca:72:28:b6:e9:f8:8e:ba:a6:a9:ee:de:0f:32:
                    78:96:5c:b2:69:ee:32:46:0d:65:45:eb:20:91:0e:
                    a8:0b:87:51:84:46:82:8d:e7:51:08:a1:3b:60:95:
                    ff:74:5a:71:55:55:f2:1e:1d:76:1e:d5:90:08:d7:
                    46:0c:5d:7f:d8:8d:25:49:30:cb:e3:ae:de:92:38:
                    ed:23:b2:d6:dc:ef:75:52:5d:52:a0:f1:70:ff:dd:
                    26:13:b1:b1:39:c4:9b:49:3f:75:57:2c:91:77:b8:
                    7d:c6:2a:30:d1:bb:dc:ad:71:6b:8a:e2:f1:34:93:
                    4e:6a:30:66:7b:5e:a4:74:0d:5d:23:40:c5:6e:5d:
                    e9:98:23:32:1a:19:c5:12:0e:9f:c7:59:20:c9:b1:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:60:46:CB:DA:7F:07:74:63:F6:28:CE:15:17:D1:72:71:1F:59:7F
            X509v3 Authority Key Identifier:
                keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:8d:04:3a:7c:4e:92:46:59:ea:79:43:e3:93:a8:14:75:
         a1:0b:f2:bb:e6:64:94:95:75:bb:57:0d:d4:13:7c:f2:b6:d5:
         87:a6:61:2c:c0:61:79:87:c6:d5:77:d9:74:f3:06:61:58:e0:
         d8:12:4a:0b:46:6a:2c:77:22:18:24:0a:85:7f:ca:ef:c5:d2:
         1c:c7:73:ca:4c:e4:64:c6:6e:82:f6:26:7f:c9:0f:ee:78:46:
         39:10:7c:b6:45:dc:74:7f:3f:02:fd:38:02:9a:8e:4c:81:19:
         73:4d:16:12:bc:16:12:cf:f8:47:b0:b0:c0:95:13:ba:26:0a:
         a3:96:2d:b4:c2:ec:05:f7:7f:ba:fb:6d:70:37:e5:2f:a3:30:
         54:a7:70:5b:02:c8:fb:7a:28:60:f3:bb:86:ea:3e:af:e7:b0:
         3f:b0:59:b7:1a:a3:4c:13:6a:55:aa:91:3c:87:34:91:40:22:
         0b:d0:01:e8:60:23:6e:1e:0b:85:6d:c3:72:35:d0:1e:f5:c5:
         bb:d6:cd:5f:fc:2d:ac:c9:00:14:f1:c8:26:9a:8e:9d:f4:a4:
         1d:59:6c:8b:fc:b1:47:a3:3e:13:d4:68:9f:79:ab:6f:96:85:
         e9:c6:bf:73:b1:bd:4f:26:48:4e:9c:48:2d:9f:20:84:fb:ed:
         fe:7f:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----