Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File:                     a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier:          G60nf9OjLG/TU1YcJ0MmOi8ITLb6Nr9Q3RUlf+dxOU8=
Subject key identifier:   61:51:BD:C3:17:46:33:48:A3:42:17:C6:AD:9B:48:33:7F:F9:F4:DE
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer:       /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial:       01962E99740C7F96B47CB6F089CE38566980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
                          2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: xG9t0z1gKsfiLRh/yCRRVfakrXl12CmFFPmXiubyHAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:74:0c:7f:96:b4:7c:b6:f0:89:ce:38:56:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=6151bdc317463348a34217c6ad9b48337ff9f4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:37:07:65:70:55:b7:40:22:73:a0:da:d2:
                    31:11:b8:03:13:1e:60:5e:01:40:e6:f9:7e:fe:ba:
                    3f:6e:8f:7e:01:d2:df:09:b1:64:e5:5f:1c:2c:45:
                    be:88:a5:cb:a3:d4:26:70:8e:84:2f:f5:9b:c9:30:
                    40:c8:0d:c6:9f:ed:25:6b:7e:4b:93:38:26:88:4f:
                    62:df:44:7b:4e:0e:68:c9:4d:98:7e:06:5f:31:fb:
                    cb:b9:23:c9:8d:85:64:40:ce:49:c4:5a:b7:e9:cd:
                    1c:8b:7e:fe:f2:68:19:71:63:9d:6a:dd:72:9b:9d:
                    d3:00:a2:c2:76:04:c0:b0:f6:0d:ce:b5:85:55:17:
                    7d:25:15:7b:f9:dd:78:4e:c7:5d:2e:88:b3:bd:db:
                    98:0f:99:b8:79:6c:93:9e:04:60:fe:5c:ff:a2:f4:
                    01:e6:ab:04:77:25:b8:56:dc:ac:55:42:7c:9d:3a:
                    d2:ef:f8:9d:ad:7c:a7:92:cb:b2:5c:97:d0:45:ad:
                    30:48:4f:e0:af:d2:fb:19:5c:d9:a1:ae:a7:b7:9b:
                    71:ad:a7:90:38:eb:8f:83:12:6c:4c:23:cc:92:0b:
                    0c:7f:70:68:44:6d:b6:0e:c1:0d:21:92:db:2e:ba:
                    34:ed:a3:17:a4:d3:ae:63:50:31:5b:7e:f0:52:f3:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:BD:C3:17:46:33:48:A3:42:17:C6:AD:9B:48:33:7F:F9:F4:DE
            X509v3 Authority Key Identifier:
                keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:75:ec:6e:ce:55:91:96:15:d5:ca:c2:fb:02:6e:b7:dd:ce:
         f6:16:65:17:22:71:7a:50:7d:39:17:7a:93:2c:18:10:c8:1b:
         64:6e:ee:03:7a:e5:39:a9:2b:c7:c9:24:11:be:34:0e:27:f1:
         a0:f3:d5:20:7e:57:79:5b:5e:85:97:07:07:37:ea:e1:1b:ad:
         21:4f:ca:1a:4e:66:16:3b:6b:32:88:71:7d:68:44:33:8f:47:
         67:e9:88:2b:6c:f1:8d:4d:4b:4d:95:15:c3:42:0f:f4:c9:b6:
         b0:c3:df:05:26:4d:32:d1:32:e7:54:0e:67:4b:65:63:27:98:
         3f:a7:85:06:62:d6:92:a4:7f:2c:65:76:5e:d0:d3:df:c3:47:
         3d:db:c9:5c:59:04:81:56:14:22:61:8f:51:97:63:27:6f:41:
         72:70:ad:e0:93:0f:98:d3:41:13:e9:3f:9b:ea:9e:22:0d:d1:
         4d:8e:bb:cf:bb:c0:92:ea:2f:dd:d3:92:f9:ca:e8:c3:e9:69:
         df:19:ee:de:67:57:91:cc:ca:fe:af:3e:40:6f:1b:07:e1:59:
         28:88:1f:5e:ff:bb:9b:09:64:35:16:f0:15:74:52:03:68:51:
         0c:ab:7b:65:e6:5e:5b:0b:5a:c9:55:2f:d4:8e:0d:d6:f6:4f:
         26:2c:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----