Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
File:                     a4QIvvwC39bmGQhUh4WgCKS3TWc.mft (raw, json)
Hash identifier:          lUC6DkV3PryYbfKmbOBKg51RucoGOr+IpNlQlqZUNOo=
Subject key identifier:   C9:54:C4:8B:8F:C7:BB:79:DF:C7:B1:36:07:43:B1:C7:6F:D9:A4:FA
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Certificate issuer:       /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial:       01962F3D472B42612E8C76BB8C4EFE3CFBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
Manifest number:          093D
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: XG_GoCIjsfzx85ZAfU48cGk_g2A.roa (hash: O4zvtPOigYM3HdyO+PNnJwZMHPFxCAa0+qt7cBa9RoM=)
                          2: a4QIvvwC39bmGQhUh4WgCKS3TWc.crl (hash: HH2Dj2COblzmXWWlA5J21Lhzv2HS8sTJJCv6NzcuAfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:2b:42:61:2e:8c:76:bb:8c:4e:fe:3c:fb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=c954c48b8fc7bb79dfc7b1360743b1c76fd9a4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cf:03:e0:19:ff:c3:aa:1f:87:85:62:41:fa:
                    fb:b4:36:05:12:e8:0b:8c:dd:2b:ec:19:e4:13:54:
                    e2:7c:b1:54:0d:90:79:5d:23:ea:d4:3f:9f:06:c6:
                    86:70:48:c8:af:93:5b:a9:b1:75:e8:74:1f:3e:ff:
                    fe:a7:27:81:88:73:aa:6b:6c:1b:0f:16:58:ea:64:
                    6f:53:16:12:a7:23:42:17:4c:0d:5c:0b:97:86:dd:
                    99:b1:48:81:58:aa:05:96:bc:09:79:ad:53:1d:e7:
                    4a:af:2b:cf:44:5e:d8:59:bd:36:b4:10:9d:8a:b8:
                    4b:3e:f8:3a:63:30:14:95:4a:11:40:3e:8b:a9:04:
                    8d:fe:3e:d8:18:10:8d:c9:0a:66:ca:94:1a:8a:23:
                    7e:b8:89:54:7b:a3:7d:87:11:64:12:1e:14:2c:d2:
                    c1:d3:1e:8d:25:58:23:16:06:ec:31:59:29:29:b5:
                    8e:68:e9:e5:d2:e0:36:00:fa:8b:83:fc:2c:81:3d:
                    c8:80:09:39:eb:e4:58:b0:68:0e:6a:5f:83:aa:25:
                    a5:07:2d:2b:f8:d5:3e:81:ca:ed:75:2c:ad:af:6e:
                    58:35:0b:d7:92:aa:21:40:39:3e:30:f2:43:12:3b:
                    6e:d4:03:1a:4c:70:7e:ab:1b:63:54:35:e8:ad:ee:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:C4:8B:8F:C7:BB:79:DF:C7:B1:36:07:43:B1:C7:6F:D9:A4:FA
            X509v3 Authority Key Identifier:
                keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:2d:3f:7c:86:50:a4:28:7a:61:d0:6b:5e:b3:d8:a6:89:
         a8:5a:3c:84:1a:c5:29:f9:eb:2b:fb:ee:9c:b9:01:d4:6e:22:
         11:87:cb:14:81:f4:7e:49:d2:74:c1:95:e2:96:40:93:19:ad:
         e5:c0:f2:fb:b1:ef:07:2d:38:04:68:eb:67:31:7e:c9:3e:7f:
         d9:0b:33:bc:19:55:c9:47:52:18:69:84:1d:87:96:c5:71:85:
         fa:4c:03:d0:01:15:0b:6f:22:71:6b:70:08:37:98:e1:44:99:
         e3:61:23:ab:bf:4c:be:04:55:7f:e3:b8:c3:0a:cb:1b:1e:79:
         c6:29:e1:40:8b:56:c2:e3:1c:86:86:f9:1d:d7:59:c8:a3:a4:
         02:08:2c:43:c8:89:82:e5:00:79:da:39:3e:87:27:5a:d1:42:
         36:14:5c:41:9f:a7:22:df:78:25:8a:bb:00:dc:af:e9:c5:c1:
         e4:78:f2:55:10:d0:f4:d1:d8:b6:a0:6f:ab:54:70:a2:4f:d6:
         0b:c9:ed:d6:24:a0:be:8c:d9:b5:a9:ec:93:b9:40:6a:ca:9f:
         9e:3b:d0:b8:73:a9:ae:b7:e7:77:e1:82:71:74:c2:4d:ea:b4:
         69:41:83:3c:c4:41:f9:bf:0b:3f:24:d4:3d:7b:61:8d:08:6d:
         29:17:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----