Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File:                     sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier:          oK2CGxA/qqHwKU7hFJF4OVETu6MvjI0YWGwf7BfWJLk=
Subject key identifier:   A0:E7:5D:BA:94:AC:BB:C9:EB:B2:B2:EB:47:0B:67:50:56:EB:15:01
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer:       /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial:       01962E61DD0A1FB875C47D9ED3AD411C7EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number:          083F
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
                          2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: 5q7g0YA51kQlksIkm2DIH8UFiaGL6pchPsjPJKekNG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dd:0a:1f:b8:75:c4:7d:9e:d3:ad:41:1c:7e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=a0e75dba94acbbc9ebb2b2eb470b675056eb1501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:9a:c3:87:35:6f:fb:1c:8c:bf:4e:be:e7:
                    29:76:e9:55:f4:6d:5e:38:1d:d2:5c:f0:f0:3c:0d:
                    4f:2e:03:48:b5:a6:56:fd:db:19:a9:0e:40:ec:88:
                    1b:fa:32:c9:be:0f:29:15:13:71:03:38:c6:85:24:
                    4f:7e:9e:f9:cb:50:36:32:9c:a9:7c:15:bf:d8:65:
                    f5:81:4f:ce:88:9d:a5:6b:95:28:6f:37:8e:ed:0f:
                    d7:ab:84:4f:34:98:45:d4:6b:4d:b9:64:4e:16:43:
                    8a:d9:3e:60:8c:a5:ca:d7:ff:15:6e:44:e3:61:25:
                    52:d4:9f:2e:45:00:19:28:fb:87:ef:6c:4d:8e:32:
                    db:6e:ec:b9:d4:8a:96:4b:c0:21:9a:93:ad:0b:27:
                    5f:55:1f:9e:f1:97:12:ed:a9:5f:a5:30:87:a5:5e:
                    df:03:9f:f7:6d:23:8d:ea:5b:e4:67:de:d2:67:c4:
                    d2:50:96:47:7c:de:84:92:01:2b:f1:d2:75:2b:1b:
                    ba:0b:fe:11:b4:95:f9:38:bb:c1:9d:bf:ed:a3:c7:
                    0e:ec:52:18:b6:08:18:0e:92:c0:78:91:66:11:ae:
                    8e:fb:43:42:37:f2:9a:80:0d:6b:44:b9:a9:b9:5c:
                    22:fd:03:26:03:41:c4:28:de:cc:0a:fb:62:fd:1a:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E7:5D:BA:94:AC:BB:C9:EB:B2:B2:EB:47:0B:67:50:56:EB:15:01
            X509v3 Authority Key Identifier:
                keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:9b:b6:5a:c0:75:a5:f1:79:ff:35:36:fa:9a:48:81:44:
         10:04:8d:a0:74:db:a7:2f:66:ed:b3:00:ab:73:78:dc:7b:68:
         1c:f6:bc:2b:25:f2:c9:01:8d:1d:3a:63:ba:02:e3:d3:67:25:
         a6:70:3a:55:68:9d:2c:94:6f:69:f5:96:fc:62:f5:90:56:7a:
         9e:cd:dd:4e:52:30:c9:e7:51:23:e1:42:3e:06:af:db:93:c7:
         87:e2:8b:10:57:36:25:21:41:f4:ab:16:99:c4:f8:49:cb:09:
         7a:13:ff:6c:7e:48:62:62:4f:86:20:dd:17:45:b7:5e:85:8c:
         d0:1f:f9:47:5d:ef:73:28:5f:21:50:d1:3d:9a:d3:3f:c4:5c:
         b8:11:d5:50:22:23:42:6a:74:03:84:e9:45:b3:0b:84:45:26:
         09:73:85:31:eb:ec:88:6b:b8:50:e0:33:cf:4f:b6:f0:90:22:
         de:6a:ce:2f:94:61:5b:09:1a:ff:1a:73:37:40:51:fa:2d:15:
         03:71:2b:8d:ee:27:eb:c2:de:21:d9:3d:80:da:fb:63:51:3b:
         ff:48:4f:1c:5b:91:01:b2:09:74:48:2b:1a:8a:a7:c7:08:d0:
         42:28:22:2a:81:51:ac:71:69:ce:fe:74:c0:ad:14:be:53:36:
         58:b9:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----