Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File:                     6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier:          bLNT6yqnRn3i2F8gEkPvGrPZFw6FCepilwIuQux9RIc=
Subject key identifier:   63:11:27:72:83:FC:08:18:39:79:D5:EE:23:40:D2:4A:8A:E1:00:10
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer:       /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial:       01962ECF7B6190E3C1EA56CDDE8AC40DC4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number:          132E
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
                          2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: Vrm9Kl9zrrJWqjFn28X53NuFGRyGeueUIoKyLNSqH9k=)
                          3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7b:61:90:e3:c1:ea:56:cd:de:8a:c4:0d:c4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=6311277283fc08183979d5ee2340d24a8ae10010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:bd:80:0c:81:b6:65:b2:ba:58:73:cd:96:
                    08:ac:a4:60:3a:83:c6:01:70:1e:fc:69:d8:b1:ed:
                    9b:0a:ac:5d:ec:96:73:e8:23:8b:1f:40:ed:b0:38:
                    ad:dd:0a:0d:c0:f4:53:66:c6:04:e1:75:ba:17:7d:
                    9b:24:23:fe:f2:7d:15:5f:96:d5:6e:04:26:32:36:
                    1b:25:31:ad:81:04:86:78:36:69:d9:2f:b0:13:b5:
                    49:56:b0:80:21:0f:03:7e:53:15:19:89:ed:4e:12:
                    be:d5:56:66:86:c6:8c:7b:b4:51:0a:d9:a4:79:98:
                    63:bd:bc:a4:b3:db:6a:41:bf:96:7e:bb:f3:ae:1f:
                    97:63:cf:ed:5a:8c:71:66:be:da:8e:b1:c6:02:b3:
                    e0:28:98:59:a2:54:38:74:b4:50:b3:6a:b5:8c:be:
                    b9:03:af:ce:22:c7:89:d2:36:f8:b0:01:b1:cc:95:
                    f8:70:11:7c:0b:be:5e:16:44:f3:04:7b:f6:f3:5c:
                    b1:e9:02:b2:18:8b:90:7a:6b:ee:21:38:b3:89:94:
                    dd:46:08:b8:88:08:0a:df:85:8b:93:d9:73:9b:25:
                    3f:7e:86:af:a8:65:26:e7:40:d8:a7:2e:ea:89:d7:
                    c5:a4:94:8f:a6:d4:a5:20:62:a9:81:91:8e:e7:c5:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:11:27:72:83:FC:08:18:39:79:D5:EE:23:40:D2:4A:8A:E1:00:10
            X509v3 Authority Key Identifier:
                keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d5:a7:fc:47:b2:6b:2e:bd:d7:e1:87:4b:46:97:26:b7:8b:
         d9:13:e0:bd:69:8f:0c:7a:fb:b6:74:49:b5:f9:4b:97:ab:5c:
         ab:cf:21:f4:08:16:7e:e0:76:26:80:cd:43:a9:60:62:d5:0c:
         40:4a:4d:36:2d:f6:91:14:9a:eb:79:c0:ed:6e:31:33:bf:74:
         65:69:13:d4:e4:62:9b:20:6c:c0:ad:41:de:49:3b:81:02:e6:
         6b:6c:fb:5d:78:01:8a:8d:91:cc:72:5c:54:3c:a2:e5:6d:d0:
         f6:41:56:9b:b2:c5:db:6b:04:9a:41:b2:f5:bc:46:a1:7a:ae:
         96:e0:2a:e0:9c:b7:1b:af:58:86:e8:ce:41:8d:e2:be:58:f4:
         87:96:98:bc:cc:e6:5b:c4:0c:2d:3a:46:e4:a6:41:eb:fa:17:
         98:ad:0f:dd:cf:7c:0e:40:07:19:0b:69:84:7e:95:50:53:2b:
         9d:63:4c:3c:39:ab:6b:93:12:0b:c1:6d:be:6d:8a:4a:ab:79:
         24:b9:63:80:54:30:30:3f:13:de:08:da:4f:86:ff:fd:54:71:
         2b:b0:40:43:a2:4a:1e:3d:a1:96:90:61:ee:d9:38:2c:bb:65:
         b1:0b:c1:9c:e6:e2:b7:8a:33:3d:f7:e6:62:ca:ba:8f:a8:45:
         ca:6c:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----