Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
File:                     anNsvQAR2jHSmwYeX_TWOELaKko.mft (raw, json)
Hash identifier:          12yXfUKLTYibytAPlvP5zI2cJVySwxbNT1xvJy31Hzw=
Subject key identifier:   40:B6:62:2D:75:46:0D:EA:71:34:67:D5:54:85:57:F0:DC:D0:49:01
Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
Certificate issuer:       /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Certificate serial:       01962F06960751E2ABE45F1B5F2DAACC4F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: anNsvQAR2jHSmwYeX_TWOELaKko.crl (hash: hDaMMPRjvQwEznhRyJ/wKTWLPKosPUlOmg32d1HGOV0=)
                          2: xe6f0-R3uUZBnoLs0S7n6Iepim8.roa (hash: HOV8Vg5bEFKecupNdQdTB6clHVPzjq+LxD7iw25nWc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:96:07:51:e2:ab:e4:5f:1b:5f:2d:aa:cc:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=40b6622d75460dea713467d5548557f0dcd04901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:af:01:12:0a:bc:53:05:f4:40:01:b4:38:
                    74:ef:9a:d4:35:b2:09:2f:05:d4:9e:26:e3:f1:ef:
                    8f:1c:67:11:84:a6:ea:93:76:37:25:71:af:9d:20:
                    33:5d:af:2d:16:75:19:af:07:e2:29:ee:68:28:2c:
                    7a:05:84:27:97:bb:c0:c1:44:24:26:c0:b8:96:d7:
                    97:a5:1f:99:f1:5b:74:a9:8f:74:fd:ac:1e:47:b7:
                    91:77:0b:b6:2b:0a:18:ff:f9:2a:2c:b4:e1:43:3e:
                    1c:aa:5d:f0:95:95:43:04:eb:7b:6a:15:5c:29:47:
                    0f:91:34:d1:33:55:30:b8:2b:0d:5f:e5:d3:fa:9e:
                    eb:d4:07:d9:4d:36:20:05:8d:fc:4f:66:5d:cd:e7:
                    00:23:7e:e5:8d:96:dc:2b:eb:e3:c3:94:98:d4:72:
                    cf:f4:ce:cf:61:ea:4b:58:e6:a3:6b:95:2b:2b:02:
                    eb:c4:f9:e6:69:5d:35:9f:17:37:87:c8:60:e8:67:
                    45:b2:8a:80:d7:96:9d:ec:9c:67:ac:af:9e:01:f7:
                    5c:78:1f:d4:3a:18:b3:b3:54:02:54:6b:07:e2:23:
                    eb:6c:a7:fc:11:5b:fe:ed:b0:4c:01:73:49:c4:c3:
                    c3:63:fe:a9:83:1b:aa:8c:9d:47:7f:6f:9a:fd:5a:
                    43:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B6:62:2D:75:46:0D:EA:71:34:67:D5:54:85:57:F0:DC:D0:49:01
            X509v3 Authority Key Identifier:
                keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:49:c5:0d:3b:8c:1f:dc:37:ec:c6:95:1c:08:ca:b1:c3:
         2d:0c:a9:13:09:b1:e5:1b:59:a8:66:2f:d8:bd:e3:25:75:44:
         bf:ff:d8:5e:db:66:58:fd:ae:81:1e:48:14:26:cb:3f:bd:3f:
         77:66:b9:b7:ba:7b:2d:85:b3:e2:b3:46:8f:01:d7:e7:00:4c:
         62:35:bb:7c:e7:a6:57:2b:3d:a8:d3:e6:c3:24:6e:de:37:97:
         87:f6:0d:42:f2:06:c5:dc:43:73:f4:e2:15:7a:d0:19:85:10:
         f0:f4:94:47:2b:a6:1b:cb:52:bd:81:c0:76:72:b7:d1:68:64:
         6e:77:67:cb:d4:12:5c:ba:f9:64:88:6b:7e:bb:f2:23:cf:7b:
         70:27:5e:74:ef:fd:f3:9b:16:25:2b:fd:af:ed:10:75:7e:c1:
         c8:e0:64:b8:f2:83:cd:30:50:42:49:5b:92:39:7b:51:10:68:
         d8:b3:db:d2:4c:58:1e:7c:4a:74:08:d6:2d:2b:78:e5:08:33:
         de:fc:16:42:98:70:f4:d7:a5:7f:92:7b:3a:70:b1:e2:de:71:
         9e:2d:6d:7d:3a:e9:93:55:3d:40:6c:2e:17:d4:f1:fd:d6:41:
         91:ec:55:98:c9:2e:79:07:10:af:14:62:34:d6:b5:02:21:a6:
         99:69:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----