Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
File:                     6LPu0cespjbWJFhSuALg5zdU32M.mft (raw, json)
Hash identifier:          b0Z/dyQCqV66Q5+m8dZJzbt8gakanzBpE/QKcDmd7RQ=
Subject key identifier:   38:80:0C:49:6A:CF:38:6E:4D:2F:9F:97:38:68:21:44:CB:FB:1A:F5
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Certificate issuer:       /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial:       01962E61C8C23FD5151003CA4362F80ED01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
Manifest number:          152B
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 0jV5LTodhzA8wVDje7kdH5wl0LE.roa (hash: OhxiR+DlZMWnXzRatnCbYzcanScQ4hgV764Jpk76hgE=)
                          2: 6LPu0cespjbWJFhSuALg5zdU32M.crl (hash: LK30cNdHdpkn/afUl8yI7SOimer0j0WtWO8tMofLfSc=)
                          3: EN2PA4LqEXKuo3e1ogAJM00I6hM.roa (hash: 3uEUfj7BRtsImAsWNlV+zd3yfILmZLpbeXXviDfiiGM=)
                          4: WVc2CMMzl3OxTazniKfgsA94UX8.roa (hash: oI3YDyrSL6PU5Wku37K2bFNDUgHLVbR5NcKy+jwV1Rk=)
                          5: gKwuz84JqfXVd9t-9wMc3TNayS8.roa (hash: LZYvjlHHoyK3zXtyxiowPJdeZotF/mJqVEEs+1kxVxM=)
                          6: h-bGacU9fgiR4H-2E9v6XeiGSeU.roa (hash: 6ypd4fLA8aJnNBffyCEBKS5ixXKMj39JyrXTMihA55M=)
                          7: qfkric2QUPKYkBB8bRDsZGyi6XE.roa (hash: daBShC7pqFoAAMzOkHKm3B5xOXs3TKHpZ+IiJ/7BGOg=)
                          8: tGECs5OY2cdz8mikBEFoXz5C6d8.roa (hash: Bw/zZmttO7DthXv4UKcvtOUWOfn1bWNIO4IyRKEnc00=)
                          9: yvemJiK1Cycaocx5avnL9-oYiCE.roa (hash: BK41sOqXvEWiYHdHTa4CVgvJdtFcY5ASV/WzcL1u36M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c8:c2:3f:d5:15:10:03:ca:43:62:f8:0e:d0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=38800c496acf386e4d2f9f9738682144cbfb1af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:a4:7d:6c:eb:1b:18:86:b6:86:4a:69:b0:
                    ad:d9:18:34:f6:53:9d:04:be:fe:57:18:33:d4:77:
                    62:8e:1e:ae:11:fe:54:42:6a:f0:6f:f9:63:8d:33:
                    37:69:84:25:89:b0:56:4c:d5:08:e8:e7:58:9c:09:
                    20:90:4e:58:16:77:84:9a:b8:45:0e:fe:6f:3b:6b:
                    b8:22:5f:7f:ad:7b:68:bd:66:cb:48:83:1a:25:eb:
                    16:dc:b9:61:29:05:67:89:56:f9:64:d2:ba:29:54:
                    75:e1:7d:43:ce:bc:6e:ad:3d:f7:84:42:7f:cf:35:
                    03:f7:78:db:b8:79:96:4c:76:3e:11:68:93:79:52:
                    b2:60:61:06:50:c4:78:9e:15:5b:83:9d:bf:a4:cb:
                    a0:2e:15:d8:d8:37:6d:7a:1e:c4:f6:5b:7c:82:c4:
                    2e:d2:35:1c:3e:3e:aa:e5:ed:43:81:1a:f1:1e:59:
                    0b:71:28:24:13:8e:7c:74:6e:4c:50:8c:6d:62:de:
                    5f:0c:c7:81:81:52:91:18:8d:a6:ee:6f:58:14:41:
                    00:e4:63:87:77:84:ce:d4:67:0d:61:02:f3:ae:4a:
                    3c:39:44:18:e0:15:97:d9:26:7b:e8:d2:e4:b0:b1:
                    bc:a2:1f:b1:ed:a9:8a:2c:42:7e:1f:75:64:5a:c6:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:80:0C:49:6A:CF:38:6E:4D:2F:9F:97:38:68:21:44:CB:FB:1A:F5
            X509v3 Authority Key Identifier:
                keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:10:8e:9d:f9:40:a4:e6:93:9d:0e:b5:3d:9a:2b:dd:90:15:
         3c:c7:37:87:ef:a6:07:aa:0d:4f:e9:54:7c:23:b7:82:83:30:
         b1:c1:eb:9c:d0:c6:ba:e3:b4:e5:e6:ac:fa:90:a0:69:20:11:
         df:c9:6a:4f:e3:8b:a3:25:68:6b:2f:0a:c0:84:1a:9e:f9:8d:
         3f:00:ec:51:44:a1:a2:18:56:70:76:78:32:86:c6:8c:d3:04:
         68:d9:5d:99:89:42:37:f0:ca:48:0e:fa:4e:08:7e:57:4f:5e:
         10:d4:ca:b7:17:5e:48:1e:f5:52:62:ae:0d:68:e9:16:22:c4:
         7e:57:85:5b:fc:0c:5d:84:0d:50:68:ff:f1:a2:cb:46:33:d2:
         d6:ba:f5:f8:01:0c:52:13:68:3b:c1:82:1c:75:6f:c3:8c:b8:
         65:12:ea:a5:0c:18:8b:fe:9c:23:4d:8e:ad:ae:66:4c:53:2c:
         7c:2b:1a:da:ec:c2:de:d1:e5:02:b1:d6:f5:e6:c5:9f:b4:67:
         0c:61:5b:33:55:88:75:8f:ae:a5:44:11:f2:f6:79:4f:9a:1d:
         04:63:c5:11:bc:90:b7:ab:20:70:49:07:f9:a2:b8:f4:90:1c:
         8e:00:1c:cd:e0:ad:18:0e:f7:9e:b4:9d:fa:e6:b1:cf:3c:48:
         7b:55:81:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----