Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File:                     xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier:          AJGK7tnBVeMzfjqK62bCXg0+uS/pOsZoPwlFibJ2NHc=
Subject key identifier:   92:75:83:12:93:CE:89:51:D8:1B:74:BD:FF:25:87:08:CF:08:F2:C1
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer:       /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial:       01962F06D2CD6E9DDC3A11AFF3D54F2479A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
                          2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: oASN3RdrrDOJ6vE3yvNqEwk2K2qd7UebCY6FabGF6tM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d2:cd:6e:9d:dc:3a:11:af:f3:d5:4f:24:79:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=9275831293ce8951d81b74bdff258708cf08f2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:56:bc:bb:37:62:da:e0:56:2e:7e:b0:9c:
                    73:24:77:31:31:39:ff:ed:45:04:42:dd:75:cb:b7:
                    e0:9f:ba:27:11:e5:59:43:ca:b4:cd:b8:e7:38:ab:
                    3a:83:a2:18:16:11:39:17:24:26:1b:4e:bb:b2:09:
                    be:15:65:5c:5d:d6:32:e1:52:51:4f:65:ab:5e:92:
                    cb:a2:4c:22:7f:2b:61:b1:b3:b3:2e:c9:af:4a:79:
                    7b:f6:af:05:66:a6:1a:4b:d2:43:99:f2:b9:92:f6:
                    52:af:33:2e:d4:1b:03:58:7e:1c:bf:6d:f1:05:1f:
                    6c:a1:4d:d2:f5:a0:e2:89:a1:32:6a:ae:96:fc:1d:
                    cd:3e:bc:69:ea:dc:8c:ee:fe:8f:75:5b:65:c8:71:
                    e1:17:a0:cd:4d:25:bd:75:3c:65:0c:41:41:fd:30:
                    2f:11:21:b4:16:80:97:12:7b:0f:00:8a:ff:6f:63:
                    13:03:38:64:31:5c:9e:a3:e0:84:35:bf:e3:b7:22:
                    9b:4c:44:9b:b3:33:e9:b5:d6:bf:c9:a9:03:2a:53:
                    d8:84:42:c5:ec:f4:c3:c3:67:6f:1e:b7:cc:7e:2d:
                    9d:17:96:8e:70:10:de:b1:43:54:fa:f8:e6:34:a5:
                    86:2b:fa:ee:cd:9c:47:77:69:b5:52:5e:08:57:ac:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:83:12:93:CE:89:51:D8:1B:74:BD:FF:25:87:08:CF:08:F2:C1
            X509v3 Authority Key Identifier:
                keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:78:5d:f1:1a:a2:56:62:cb:17:bd:b4:12:fd:de:df:fc:cc:
         5b:eb:94:d1:48:a6:fe:56:f8:63:45:df:fa:c2:38:2d:a5:d1:
         32:35:39:c0:d0:ef:ee:bf:76:24:de:97:05:21:d2:dc:36:9e:
         74:e8:3d:0f:32:56:dd:d2:8d:58:c9:a7:2f:0d:ec:30:f9:20:
         1e:0a:f6:ac:49:f1:47:5b:3e:5b:bc:b3:ba:08:27:9e:12:11:
         25:00:fb:0e:8d:b5:69:5b:cc:c5:c9:90:b6:35:9c:ba:16:5a:
         e9:84:eb:6c:32:ac:92:55:0f:f6:2e:23:81:6c:9b:0c:16:02:
         c4:fc:04:c2:6c:cd:6d:29:82:45:71:3c:78:17:b7:bc:df:e1:
         50:55:8c:ec:04:e1:4b:10:20:f1:56:73:67:63:2d:85:2d:82:
         d5:76:a2:13:98:ef:88:17:1b:5c:dc:65:16:ed:c7:15:50:69:
         2c:75:b0:4a:a2:0a:d1:bf:85:57:dc:7e:ca:38:ad:36:55:54:
         78:09:3f:3d:b6:2e:2c:94:20:dc:7f:21:69:36:be:6f:96:98:
         85:79:48:68:9b:63:ce:eb:31:65:ae:3c:2a:6d:c2:5f:94:33:
         76:3e:88:3e:35:68:8d:9b:7e:27:1a:1a:6d:d2:f9:4c:ef:6d:
         7e:73:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----