Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
File:                     6jKtyFac_LNedcfO_UbV7QDw4Cg.mft (raw, json)
Hash identifier:          JFUojwOrv35Rkd8CkrGqZJF+9cMTPHhk+MtZAmcoYcI=
Subject key identifier:   A1:81:7B:5C:B8:54:2A:59:EF:4D:04:F4:BB:AC:0C:59:42:A2:57:AA
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Certificate issuer:       /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial:       01962ECFB2959DD8C8CE995098EEA7AACEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 6jKtyFac_LNedcfO_UbV7QDw4Cg.crl (hash: 7YR9iyFXvLaocVfIXKD51r8TxvuCd/dL2VVbp2WEYyE=)
                          2: tB1FmU5b5xvjEP8JMpgceU5ERXQ.roa (hash: goZDdm6IGSnZfuEYpeXzwDB0t1myPonOX7jaHweWI/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b2:95:9d:d8:c8:ce:99:50:98:ee:a7:aa:ce:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=a1817b5cb8542a59ef4d04f4bbac0c5942a257aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:ca:4c:4f:90:5e:05:72:ca:2a:92:ab:39:
                    63:cc:d9:96:4d:7b:ad:58:3f:c4:cb:fd:d9:7e:d4:
                    7c:cb:99:a2:73:01:39:57:92:d9:a2:e3:10:4a:0d:
                    39:a6:f1:ca:5a:7e:0f:9d:f2:c4:fa:6b:55:f0:fa:
                    8c:99:75:e4:94:fd:c6:2f:e0:91:ff:69:63:fe:04:
                    42:ab:65:28:f0:9e:95:dc:f3:ac:ef:3e:e0:ab:4e:
                    39:9e:a3:a5:17:dd:32:33:08:fb:d9:11:a6:59:52:
                    db:0a:b1:77:d4:f6:d0:8b:5a:e0:0b:9c:5c:59:d3:
                    52:61:16:2d:f4:4c:a7:7b:35:39:d0:b2:85:d6:09:
                    00:48:58:2c:fb:21:3b:93:bc:8c:ec:fc:a0:6e:92:
                    5a:10:64:42:d7:16:7a:7c:23:59:76:6e:a3:23:61:
                    63:0b:05:ea:9d:bb:6b:dc:55:3a:57:b9:22:d2:2a:
                    41:f1:d5:41:a5:bd:05:16:79:45:a7:cf:f3:b9:20:
                    db:f4:e2:09:26:02:3c:18:bb:f3:22:32:32:28:8e:
                    1b:ba:73:f0:19:47:93:b6:cf:2e:14:34:0a:09:6f:
                    dd:0b:91:79:60:af:b2:b5:21:82:be:e7:64:fb:48:
                    26:e9:f2:99:dd:a9:ea:0e:95:33:b2:7c:6f:9c:63:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:81:7B:5C:B8:54:2A:59:EF:4D:04:F4:BB:AC:0C:59:42:A2:57:AA
            X509v3 Authority Key Identifier:
                keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:20:06:f6:47:dd:69:93:60:39:7a:ee:e7:29:0e:47:91:4c:
         17:14:6c:8c:3d:60:d4:99:75:73:53:87:ef:a7:8f:7a:19:34:
         11:4a:0e:5b:60:a3:a9:b2:ac:c4:ea:9c:33:07:a7:0c:23:8d:
         6a:a8:f2:2a:e7:38:ed:5b:9e:be:ee:a8:76:b0:1b:4d:97:67:
         7f:28:f9:67:09:04:62:cc:4d:f1:9e:ec:5a:87:f6:fd:3e:81:
         70:a8:bd:03:35:5b:85:e1:15:cd:46:79:d2:ef:c6:4f:f4:b1:
         4d:2a:d1:f5:66:30:ac:91:ed:d2:9c:cd:1f:c1:0b:fd:d2:a0:
         28:82:5e:b5:95:8a:42:9d:3c:fd:5c:80:c4:84:8b:f3:fd:07:
         4d:30:d0:18:93:8a:9f:d5:f2:ca:e1:50:36:48:1f:ff:43:a2:
         0c:57:cf:0b:28:30:31:c9:32:42:e6:53:d6:34:7b:f9:bf:3d:
         19:36:b4:2e:e6:47:8c:63:0e:e6:16:eb:c8:01:85:ba:d0:5c:
         0d:15:ca:f4:4f:fe:2a:4b:dd:5c:74:62:05:35:1e:2b:be:f3:
         2f:e2:da:cf:5b:b7:f7:b6:46:8a:e4:94:7f:8f:1f:9f:d1:42:
         a3:f8:ba:c9:b3:47:39:6b:98:71:7c:ea:4f:d4:8f:ee:83:c6:
         1b:30:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----