Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File:                     6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier:          s98Dd3bdUY8w8Rj8vZL3nz5xiuetIh2mhB8AtDuTLu8=
Subject key identifier:   54:98:C4:9A:DC:65:90:35:12:74:44:24:96:E7:6B:99:66:E3:1C:83
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer:       /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial:       01962FAB17726B5395FFF0F71C20C7345347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number:          047F
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: hWA1WmTKiUh68aSlFhFi+HWgcaU1g9qJxes2ldu9b/k=)
                          2: KH0zl9xVnMF_15rIoZ2wT-co_AI.roa (hash: DoRE8smcciehWgwMQwu6I7Myolux2OWQiEW7g5i3MyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:17:72:6b:53:95:ff:f0:f7:1c:20:c7:34:53:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=5498c49adc6590351274442496e76b9966e31c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:33:6e:dc:fc:60:b6:f8:59:cb:22:37:6a:
                    28:80:39:11:cb:0e:52:b1:09:91:f4:95:8c:d2:15:
                    41:ee:72:7e:d8:c6:98:f6:22:8d:09:39:c8:61:93:
                    d7:8f:3e:40:d1:6d:c4:8a:c0:6a:eb:54:42:40:d2:
                    54:78:7d:1b:09:b3:a7:a0:f8:83:e6:a2:a7:bd:8d:
                    68:7a:e1:22:af:b3:1d:e9:b1:c4:31:6f:2c:40:d9:
                    c9:2f:98:d5:8e:e3:70:c1:16:e9:2a:b2:0b:b7:eb:
                    22:fd:f3:41:cd:ac:ec:51:5d:e8:00:e8:0e:ef:07:
                    06:57:13:05:46:fa:ec:ff:f3:70:a2:e3:ec:d5:f7:
                    24:24:56:79:38:0d:38:da:2d:64:8b:5f:dc:55:f9:
                    13:e5:00:d1:a8:45:86:11:16:43:3d:4f:ed:76:62:
                    66:af:5f:cb:43:62:0b:5b:8c:fa:e7:69:4f:49:4f:
                    56:1b:6f:1e:e3:ae:48:4a:2d:86:75:1e:0e:5e:f6:
                    a7:2e:c6:58:79:f4:6a:3c:44:ff:c2:fd:e1:b2:56:
                    5d:1f:3f:2e:e5:8a:b7:0e:ea:57:3f:84:14:5d:a5:
                    42:13:db:a4:1a:60:eb:47:04:08:e9:79:55:8f:d6:
                    c6:9e:35:c3:f1:e4:31:f3:63:ad:b8:ab:d5:16:1f:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:98:C4:9A:DC:65:90:35:12:74:44:24:96:E7:6B:99:66:E3:1C:83
            X509v3 Authority Key Identifier:
                keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:86:37:da:43:ae:0a:bb:d0:8a:30:8a:ce:7d:00:0c:fb:f0:
         08:8a:f8:8e:99:7a:c9:4f:0c:ef:c2:3c:43:68:16:57:88:0a:
         8f:1d:f4:b5:00:25:2f:a4:97:0b:c4:6f:28:f2:3b:b2:d3:eb:
         95:aa:80:bc:2e:28:d5:29:20:73:be:0c:5a:b6:cd:32:25:54:
         ca:86:f9:f0:02:0f:69:f4:94:e7:33:69:f8:fc:8d:87:18:a4:
         5e:59:40:5c:0a:fe:44:c4:13:9b:00:aa:a9:a3:8f:d5:d2:f1:
         b6:52:0f:9d:30:54:77:84:ab:9f:32:24:b7:c9:9f:aa:fa:b5:
         54:1f:39:db:d1:a2:c2:de:d4:8b:e9:51:9a:90:60:e0:98:1d:
         e7:cb:c5:2e:a0:7e:62:ae:44:38:b1:09:af:6e:66:bd:b4:14:
         89:f3:26:93:f2:fc:ff:3a:6b:c8:cb:49:82:2a:0e:ef:e7:a9:
         ec:f1:64:d6:c2:45:48:c1:4d:44:8f:60:9e:f5:fc:5c:ed:c8:
         6e:0a:df:e8:97:9b:09:76:86:40:4d:eb:cb:aa:cd:43:0c:e4:
         93:ef:f2:09:84:d7:32:92:1f:5c:2b:ef:16:00:e4:6c:0b:fd:
         62:ed:94:2a:bf:3c:6e:d7:cf:89:f2:15:d9:ab:e0:6c:90:be:
         bc:57:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----