Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File:                     kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier:          JzowZOcQc6IlBiT9CTGh1JGe5CgMHCbijZ40IwN9v5o=
Subject key identifier:   F6:26:36:F9:D7:51:5E:FF:EE:A1:54:96:3A:B8:26:31:79:7D:34:6C
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer:       /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial:       01962E98FD54739826E81A1CB38DB404386B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number:          11E6
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=)
                          2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: wiOx7SwcC635fblDFyAiW5ixl6JErENDip/wxsjluCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fd:54:73:98:26:e8:1a:1c:b3:8d:b4:04:38:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=f62636f9d7515effeea154963ab82631797d346c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:dc:b7:de:d6:e6:c1:a2:9e:eb:92:82:de:
                    51:c0:18:72:78:9b:7f:cc:47:6a:df:d2:7d:0b:2c:
                    a0:84:a7:cd:dc:4e:49:a8:6e:1f:8f:60:2e:d7:f1:
                    1e:df:e9:8e:27:57:a7:b4:b8:ff:e6:4b:7e:39:ae:
                    3a:45:7c:e5:4a:75:96:17:2f:42:ee:5d:17:9e:ef:
                    30:ce:82:71:4e:f6:c6:b2:53:7d:0e:31:34:ba:23:
                    78:1d:ce:e5:45:b8:c1:ca:41:46:83:a8:0a:51:98:
                    ad:b6:c4:f4:ff:47:b4:76:76:cb:4d:ce:9c:f6:49:
                    8f:b1:a2:58:73:a1:e1:14:ef:e0:dc:38:fe:9b:1d:
                    6a:57:59:12:6e:1a:b5:db:84:7d:18:6c:ad:db:0f:
                    ab:7d:6c:80:51:3b:9e:f8:0f:81:96:3e:7c:36:6d:
                    0f:9d:3d:c4:7f:9e:95:d0:5a:bf:07:9d:3b:06:bc:
                    e6:ff:c9:90:24:51:74:30:bd:64:84:29:f5:92:1e:
                    29:1a:64:03:14:ae:ab:41:e9:71:40:b8:a1:9f:8b:
                    7a:9a:fb:fa:01:be:24:e4:30:8f:d7:90:e1:05:25:
                    f1:f9:b5:ac:02:f7:bf:57:a1:43:67:ef:46:4a:cf:
                    1e:87:15:c3:6b:39:a5:b1:32:86:3a:0e:d4:47:52:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:26:36:F9:D7:51:5E:FF:EE:A1:54:96:3A:B8:26:31:79:7D:34:6C
            X509v3 Authority Key Identifier:
                keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:26:33:52:c6:d4:3a:fd:60:b9:67:66:05:1f:a8:df:d4:
         92:fb:19:9d:a2:6b:8e:d5:84:a1:a5:e5:f5:c1:0d:06:e9:24:
         79:ca:bc:eb:2c:6d:aa:6f:c8:ea:23:bf:61:18:95:f9:5e:08:
         84:f1:e4:e9:91:b4:93:4d:1b:89:e8:f3:9d:8e:81:5f:7a:ad:
         3a:af:1e:6c:d6:ce:fa:3b:1d:b8:32:3c:54:ed:ab:e5:7f:e5:
         e8:f6:06:55:d8:93:eb:ac:41:80:68:46:4b:7f:2d:61:34:f5:
         8e:6f:2e:44:d4:45:c8:22:fd:87:76:00:90:d3:d8:bb:48:4c:
         a9:ea:ec:f9:0e:b4:31:13:f6:35:71:04:4e:26:84:95:d9:6b:
         a5:c8:06:ba:37:8e:2f:03:b1:5e:1f:ec:8e:f1:73:3a:18:a5:
         36:2a:a7:68:cf:e9:21:f9:6d:f8:c3:f5:79:1b:db:97:51:f8:
         1b:3f:83:5e:d0:84:ec:7e:a0:c7:e0:55:e9:51:ed:a8:76:2b:
         49:28:dc:99:d1:82:cc:e6:de:fd:cf:03:77:d5:7a:54:f9:fe:
         df:29:03:18:a0:33:3f:b1:b1:62:92:93:ac:62:44:4b:07:a3:
         f2:3c:6f:06:92:a5:04:1e:47:e2:80:b0:5e:1c:53:20:75:6a:
         5e:b6:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----