Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          pSgtmA2vciKJsFgjj+4DSN7WATvm4FKSr757MfVnFF8=
Subject key identifier:   CD:61:8C:0D:B8:5A:99:8C:E7:AF:5A:AF:C9:96:15:E0:48:02:2A:8F
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       01962E2AD0E4C82A1B0E24630EA10B583E6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: iRiE4+LqpTVXIefzK5BawtCu7fwJA+LRyOixQEfYWO8=)
                          2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d0:e4:c8:2a:1b:0e:24:63:0e:a1:0b:58:3e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=cd618c0db85a998ce7af5aafc99615e048022a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:14:09:30:2d:f6:e7:3b:49:6f:ee:56:f3:
                    d1:49:e2:4b:dd:4b:4a:6c:62:ba:a2:39:85:7b:74:
                    bb:2d:c6:43:02:f5:74:62:b5:00:2c:58:14:a4:8a:
                    d1:b6:1e:fb:f0:cf:ee:67:89:18:c3:69:a8:69:04:
                    19:6c:b0:16:b8:54:18:90:71:6a:dd:57:a3:8f:1c:
                    4f:34:3e:8e:70:95:79:75:83:93:12:90:bc:d2:9a:
                    ff:0d:69:d6:89:48:2b:65:5d:48:a9:14:d6:1a:ce:
                    20:fe:30:a2:b8:32:cb:6d:c2:62:23:ac:65:ce:fe:
                    39:40:c8:fa:23:a9:b0:af:9e:3d:d1:27:ec:64:be:
                    f9:bd:bd:c7:aa:a0:46:77:62:97:72:51:59:ea:d9:
                    92:8c:63:9b:0e:8f:29:20:40:cb:50:61:e6:d1:71:
                    d9:8c:64:8a:26:56:11:58:b1:9a:d9:70:56:a4:c9:
                    6d:d6:4e:81:f4:ae:ce:7b:c8:d0:a5:17:d4:27:27:
                    13:f2:52:bb:f2:e5:cf:86:4a:4b:5c:11:7e:ea:96:
                    ac:43:d8:1c:3d:c8:ba:6f:3d:38:8e:e9:41:b9:0e:
                    09:4c:42:ea:b9:99:a4:5b:4b:5f:68:04:22:62:51:
                    f7:9a:8b:38:25:e3:09:e6:1f:5e:85:04:62:c7:e7:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:61:8C:0D:B8:5A:99:8C:E7:AF:5A:AF:C9:96:15:E0:48:02:2A:8F
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:23:7c:7d:79:9b:bc:13:a4:92:b3:e5:2b:e8:f4:25:58:4f:
         a4:6e:dd:7f:4d:01:7c:13:3c:fb:c6:b4:77:e2:e2:88:78:35:
         74:99:5d:e3:86:fa:a2:dd:a2:7d:df:ac:30:cf:6b:3d:6b:9b:
         8f:06:12:ff:a1:06:11:2c:43:9a:f7:92:8a:ca:29:fa:54:d0:
         a3:82:a4:88:57:7c:a5:89:9f:86:39:9b:6c:ec:6c:e1:fb:cd:
         91:03:3b:62:1c:7e:9d:b5:fb:e2:ea:b6:3d:4e:51:ce:0e:a3:
         2f:49:a6:5f:95:21:17:0e:f1:a8:4e:8a:40:bb:7d:db:65:ad:
         04:2c:b2:0b:8a:37:6f:eb:e3:e5:36:00:36:3f:2c:43:9d:fc:
         e4:03:5e:1d:bd:98:9b:c4:0f:d0:79:e4:1e:c7:6b:08:4b:3d:
         ea:69:54:40:5f:71:f8:63:98:85:a0:bc:b0:7d:db:ff:65:c5:
         16:9b:86:1c:d4:05:e8:50:33:12:5f:b6:b5:3c:2c:b6:0b:c7:
         fe:22:37:de:fa:2b:9b:4f:b4:94:12:06:b6:3a:11:d6:30:46:
         19:b0:c7:08:23:76:ba:ec:39:a6:9f:29:37:ca:a6:61:7c:08:
         a9:0e:a9:75:2f:82:ef:d2:bc:a2:29:73:34:42:9b:15:50:4a:
         d0:76:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----