Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File:                     a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier:          OEMgvHANeNKxlobUkwfQ6MZhwTxm7ANVgqn+CzZTcqU=
Subject key identifier:   A7:5C:7D:10:B5:F4:EB:05:A2:41:0F:6F:B2:01:85:B2:17:3C:17:38
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer:       /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial:       01962ECF683B7095BADF02A3F02E33E115C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=)
                          2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: 4g90zE3QWbUuEJLZxCZilD0aYRY8lE3UOzlbhA3rVJE=)
                          3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:68:3b:70:95:ba:df:02:a3:f0:2e:33:e1:15:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=a75c7d10b5f4eb05a2410f6fb20185b2173c1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:83:92:c8:5e:ea:02:3a:6f:da:4f:e1:6f:5a:
                    be:9a:14:ea:48:a0:a8:f6:13:d6:f6:5b:3c:0f:72:
                    d1:f3:47:0d:50:9b:a8:ce:5b:8a:c2:dd:e4:f9:bb:
                    cc:51:d1:9e:e5:1e:17:5c:41:67:52:b7:31:30:92:
                    c4:13:f8:f3:4a:6a:a4:ed:d1:f6:1a:62:06:f4:2f:
                    19:42:6e:b7:33:12:08:e1:7e:ed:72:67:c6:b2:79:
                    5b:2b:fd:89:6b:ce:3c:99:15:64:f7:e2:e4:dc:c7:
                    7b:0e:06:74:44:24:ef:58:b6:c7:15:42:a6:08:bc:
                    0f:6d:ef:85:e9:eb:05:36:fa:d6:dd:f1:09:95:21:
                    d9:9f:78:9c:7a:75:0b:27:7b:3b:84:f2:e9:14:5b:
                    23:4a:13:1f:03:e5:89:eb:6e:88:1e:40:f7:2e:aa:
                    a5:ae:ab:47:bb:d1:8b:dd:e9:a9:6e:b2:42:06:26:
                    db:bb:17:76:40:07:c8:6c:69:f2:16:e9:0b:f2:ad:
                    f9:8c:45:d6:4c:5f:5a:c2:1c:14:98:fa:49:6e:8e:
                    16:c3:af:3b:ed:6e:4b:0f:5c:15:60:33:21:0b:b7:
                    b8:7c:80:47:d7:f0:8a:98:7a:bf:0d:83:4d:a1:97:
                    fd:23:a4:cc:24:84:07:6c:30:37:75:1a:fe:01:ad:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5C:7D:10:B5:F4:EB:05:A2:41:0F:6F:B2:01:85:B2:17:3C:17:38
            X509v3 Authority Key Identifier:
                keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:f8:25:f6:86:1f:a1:bd:05:c3:50:7b:4e:51:ef:eb:59:
         a0:3c:48:99:81:3b:64:f0:fc:12:80:45:ac:00:09:7b:f2:01:
         1d:54:20:8b:4d:83:fd:fa:19:b7:41:29:4d:23:24:0a:30:e4:
         73:f9:71:3a:84:ac:4d:7e:d6:44:67:51:6d:8e:dd:8b:44:a7:
         74:3c:df:e1:ab:d2:fb:64:6c:e9:02:22:36:90:d4:70:21:86:
         b4:d4:6a:05:d8:dd:b7:a2:c2:da:b5:6e:31:8b:00:0d:55:88:
         30:5c:11:28:48:2d:33:88:e9:6a:52:22:98:41:ee:b7:67:59:
         cd:73:dd:2a:15:0f:a0:ce:b3:20:c7:aa:94:c1:63:7e:e9:1f:
         d6:3f:2e:3b:54:40:22:80:a1:06:37:f1:89:44:e7:ce:d5:71:
         e2:b5:78:fb:16:3e:77:5c:6d:f7:db:46:fa:fe:42:f0:db:fc:
         aa:29:8d:1d:05:97:45:40:20:3a:ee:b2:7c:19:a7:03:b6:37:
         2f:d4:73:bb:73:83:06:74:5f:e0:51:14:12:fa:de:a8:d8:dd:
         66:11:f8:8c:42:80:e2:6f:41:f4:7a:41:91:ce:3b:db:b2:b0:
         73:c1:b4:29:47:5a:9f:16:22:81:30:5a:e7:ad:7a:e6:6c:06:
         03:db:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----