Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File:                     x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier:          hmus7sQrj/PFy4Hkofp/UxjOCHd8M1hgNUxXnutr1rQ=
Subject key identifier:   B2:92:B9:B3:E4:F2:BE:CE:8E:12:D1:30:10:FC:1A:AF:96:0E:BE:6F
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer:       /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial:       01962F065705EA63E68157D913585529BAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number:          122D
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
                          2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
                          3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: T/3jJV2hUou+a5IkR35TmhQwyLLBP0dHWgwthPsmS8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:57:05:ea:63:e6:81:57:d9:13:58:55:29:ba:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=b292b9b3e4f2bece8e12d13010fc1aaf960ebe6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:8b:54:d4:81:dc:48:ee:02:30:a8:2e:e2:
                    eb:68:70:4b:38:ae:c6:db:48:a1:9d:db:64:86:d4:
                    e7:63:33:76:84:19:f6:10:3a:dc:3c:67:15:4d:36:
                    b0:a0:6c:2a:de:2c:fb:d3:9e:ab:d3:a1:ba:00:3b:
                    7f:a4:b8:7e:58:07:32:22:97:cf:3a:56:db:e8:a8:
                    05:5c:cd:ec:86:70:e0:a6:9b:99:d4:fd:44:07:90:
                    b1:67:25:35:ac:d7:8a:f4:bc:2d:fb:4b:8b:cd:5a:
                    09:77:5d:76:51:93:f4:10:c5:9d:cf:16:54:fe:41:
                    78:9e:ae:62:51:b7:43:fa:e9:5d:a9:e8:db:a8:ad:
                    f4:9e:46:7f:ea:f6:45:dd:29:fc:97:a4:da:a6:ae:
                    33:67:40:28:19:63:ee:27:69:e5:91:fc:bd:91:84:
                    d1:cb:a2:ae:d2:59:54:af:85:15:d3:79:d5:0a:03:
                    fd:f6:9f:b0:ec:c5:8d:0d:45:1a:ba:63:08:11:4e:
                    a8:c9:72:31:42:12:61:57:8a:5e:01:8f:97:ca:74:
                    17:d4:ca:4c:f7:47:a2:55:4c:ab:83:81:64:58:bb:
                    a6:1d:8c:6e:59:73:83:ea:55:c6:a1:58:a0:a9:70:
                    81:dc:ee:bc:6f:60:35:ae:48:83:4a:03:00:26:3a:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:92:B9:B3:E4:F2:BE:CE:8E:12:D1:30:10:FC:1A:AF:96:0E:BE:6F
            X509v3 Authority Key Identifier:
                keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:55:96:83:53:c9:85:d9:c2:a8:0f:9d:e2:a9:d8:83:24:69:
         2a:0e:eb:56:6d:24:71:13:76:37:16:14:b8:13:b2:f0:ac:af:
         0c:70:ec:d3:b4:e7:ba:a9:fc:23:19:ed:1e:76:4c:1e:42:7a:
         1a:b5:01:64:79:9d:73:4d:4e:4c:a8:d2:e3:cf:ff:a8:56:c3:
         2a:5c:8a:ad:3e:1e:48:54:13:49:30:5b:1d:e3:9c:21:30:35:
         03:77:d2:4e:c8:45:d6:1d:32:a6:2f:74:b2:1a:86:2c:55:2e:
         ef:ab:83:c4:af:ed:b8:d4:51:51:c2:6f:d3:27:95:96:a1:b6:
         10:70:45:77:db:d5:d0:a6:57:b5:0e:94:77:e8:6a:66:8e:e9:
         20:bd:9c:c7:ac:f9:03:73:b4:4b:2a:44:7b:38:38:45:25:e5:
         32:56:b6:70:7c:d7:4e:b7:e3:7a:a4:b3:53:e5:e9:6f:00:40:
         64:9e:12:af:39:c4:31:6b:67:bf:2b:16:d9:a5:e3:65:53:7d:
         78:b2:00:d6:a0:d4:2e:c3:2e:84:a7:62:19:44:38:78:c5:d1:
         1d:2d:31:17:ba:93:a4:be:32:19:85:56:40:7a:ca:8d:34:61:
         1e:1e:f2:22:ee:57:03:dd:03:5b:ef:27:1b:15:c8:82:fe:2b:
         e7:9e:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----