Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          vQcoFkklALcEQRug9Zk5JPUNY9or4qeeIqThAHLPRbk=
Subject key identifier:   52:1D:46:34:A7:E7:76:EE:8C:09:3F:20:FA:CC:69:42:50:50:21:35
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       01962F3D4D47065BFBB0234CE9FF8DA16C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          10AC
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: H6MwECOgfQG+YeI8Wlsaoa2MGTp5XbjWZ4Xlb7qsHq0=)
                          2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4d:47:06:5b:fb:b0:23:4c:e9:ff:8d:a1:6c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=521d4634a7e776ee8c093f20facc694250502135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:51:25:ea:4c:da:8b:af:39:fb:e4:6c:21:19:
                    7f:4e:ad:29:8f:62:86:ac:fb:1c:9f:72:66:b2:5a:
                    48:eb:73:e6:cb:c3:82:4b:bf:f8:b8:78:df:e9:7a:
                    44:9d:21:9e:06:47:07:81:2e:75:68:69:de:83:e0:
                    47:a3:b6:a9:34:95:bc:67:92:7b:f7:6f:06:d4:a0:
                    7a:49:07:c9:42:fe:71:31:75:df:55:6e:3c:27:86:
                    9c:15:9e:b3:5e:37:19:b6:50:e6:14:69:25:8b:7b:
                    d1:87:1d:88:17:7b:2c:60:07:d9:a7:c6:16:25:be:
                    f0:a6:69:ce:f9:22:61:7f:68:57:0a:38:29:e2:04:
                    40:54:a7:ea:3b:52:a9:67:bf:a0:92:dd:21:0c:4d:
                    80:41:93:44:e1:2a:06:64:50:7d:6d:a2:c8:a4:70:
                    59:a3:fa:6f:a0:75:25:f3:64:c8:fe:b1:85:de:1c:
                    9a:22:7b:cb:eb:56:43:2f:32:13:71:47:48:30:69:
                    69:c6:19:e8:c2:ae:3b:41:de:3a:57:f6:6d:ff:32:
                    68:f1:40:3d:76:c3:f1:2b:2a:d5:3a:ec:cc:a0:ca:
                    6d:23:56:26:8a:b3:87:ed:a5:4a:51:66:d0:a8:96:
                    50:9d:11:89:fa:bd:35:87:d1:7c:82:70:20:72:bc:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1D:46:34:A7:E7:76:EE:8C:09:3F:20:FA:CC:69:42:50:50:21:35
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:41:21:12:ef:be:06:ca:2b:48:e3:87:a3:67:4d:74:80:
         de:94:8d:08:0e:af:55:b0:f6:19:66:6a:94:0f:df:7d:05:5e:
         f4:c7:58:8d:00:34:28:6e:af:fb:bd:20:87:7e:85:c6:8b:cf:
         a3:de:e6:88:c9:40:49:87:7f:41:36:d6:03:65:a5:71:57:9c:
         23:34:66:b7:ab:b4:2f:8f:e5:4b:65:36:b6:1e:27:2a:ed:3d:
         60:21:6d:03:9e:53:a3:40:1c:24:a9:1d:bf:0f:42:fc:16:d8:
         4f:74:0e:66:6d:08:c4:44:2d:3c:ef:d4:56:11:a0:da:85:22:
         fd:87:f8:c5:92:da:e9:55:9c:bf:4d:35:99:ea:9f:99:cb:6c:
         11:23:a6:96:65:03:c8:fe:cd:cd:50:98:49:32:c3:fb:c3:2c:
         a2:e4:8e:ac:2c:e4:67:5c:70:7e:db:01:01:d9:cc:5e:25:0b:
         fa:20:27:c4:be:67:c0:c6:94:76:0b:87:70:09:f0:05:a8:fe:
         f0:23:e2:0c:c9:50:3e:79:45:19:f3:56:1c:7f:6c:fe:e8:b2:
         4e:a8:f0:88:47:e2:b2:e4:5f:2f:79:ad:63:50:88:ed:02:c6:
         92:b4:72:7c:f0:0e:6e:5f:ed:89:c1:0a:6a:12:4a:a0:60:5a:
         06:ca:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----