Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File:                     R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier:          Tv5QIeCU0JMYLvMt+wvLJ8x7KUAqvbtJBzGTDrl5jqc=
Subject key identifier:   86:35:A2:86:1E:34:45:67:0A:24:AA:0C:26:B1:B5:F6:24:CE:76:FD
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer:       /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial:       01962F3D36F686D4B4765BA6ABD33B51C1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: ju/lT/CowZoBAMaBOyRSEGzrVqYZWJ+tWv26E60qLLM=)
                          2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:36:f6:86:d4:b4:76:5b:a6:ab:d3:3b:51:c1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=8635a2861e3445670a24aa0c26b1b5f624ce76fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:44:20:b6:c4:04:d2:56:93:2f:dc:67:02:
                    e9:d0:8f:51:ec:59:8f:47:0c:e6:f3:51:d2:d9:ad:
                    21:6c:1b:b6:6c:c1:8a:3b:42:46:f1:2c:08:0c:5a:
                    f2:3e:26:15:b2:84:08:f0:e4:8d:d1:1a:41:dc:35:
                    0e:84:3f:cc:11:7f:72:8b:bc:9f:3a:a5:a8:85:f3:
                    3a:91:19:2e:60:db:5a:3b:18:c9:7c:0a:0b:9e:bf:
                    fd:0e:6d:1d:d8:67:e1:65:a9:fd:f5:43:7b:ec:3b:
                    9b:ac:eb:27:99:85:66:cb:e6:cd:19:31:3e:f4:4b:
                    15:c9:2b:eb:1e:2b:5e:e2:9e:b8:ab:44:b7:a7:c5:
                    a7:0a:aa:5c:b4:9e:18:1a:a9:e8:85:d3:ed:d6:70:
                    64:4b:77:df:45:9d:89:41:5e:97:ff:7e:06:a5:bf:
                    d8:bf:5a:cd:6d:b0:e4:53:72:bc:38:07:83:1a:5e:
                    01:94:41:a0:77:e9:0e:52:12:bf:61:8d:32:c6:98:
                    3f:7d:dc:08:f5:0a:c5:16:0f:2a:ba:e5:a1:e5:db:
                    08:04:6f:87:ef:60:47:44:3b:0a:f4:2a:00:73:de:
                    d2:4c:09:87:d1:af:38:30:87:0d:17:ed:6d:92:ae:
                    94:74:77:21:78:d5:9f:80:4c:ea:a7:e0:e2:86:91:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:A2:86:1E:34:45:67:0A:24:AA:0C:26:B1:B5:F6:24:CE:76:FD
            X509v3 Authority Key Identifier:
                keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:d0:0e:bb:cb:7a:da:22:a2:7d:e8:28:b3:d7:a5:30:2a:
         06:ac:8b:e4:17:65:32:0b:c3:16:29:ad:66:cd:75:9a:21:05:
         71:f2:d5:00:90:37:34:0a:02:08:b4:88:a0:28:ab:58:f4:f7:
         79:ac:53:52:32:d6:2c:b7:f9:4d:ab:81:d8:64:98:e2:f2:95:
         be:5d:15:a6:d6:23:45:b6:9a:52:c1:f3:ab:0e:d6:cc:cd:5b:
         de:ba:7c:9c:85:9f:31:92:f0:91:23:df:22:55:f8:7e:b8:67:
         35:7b:dd:e5:89:17:86:0d:c7:28:88:20:48:db:2d:e5:b4:09:
         ad:41:e5:fd:71:a9:fa:1e:05:45:02:75:81:c5:38:56:41:f3:
         da:13:da:af:d7:f9:e8:d4:d0:61:38:95:ec:3b:7a:18:32:4e:
         3b:59:f5:4d:27:c2:ab:34:df:02:c3:64:35:36:26:4d:20:ad:
         a0:8c:00:e2:39:4d:d9:a0:c7:39:e7:d8:ef:ec:ea:b1:e9:05:
         ba:70:46:d0:a8:c8:d9:52:35:18:e2:1c:0c:6d:97:d3:a9:59:
         f6:2d:92:9c:c8:c9:a4:88:70:1c:ec:ef:b3:50:73:31:c7:5e:
         96:0d:d0:5a:8b:f7:0f:b9:39:91:d1:cf:19:8c:5e:5c:91:e9:
         8d:19:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----