Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          lowF6ocv1CocsQjGgHYlZjLGN6QSHMQfQFz+c/DVCHY=
Subject key identifier:   11:39:89:40:C4:1B:3C:70:2F:2C:7A:94:3D:06:A2:CF:E8:78:3A:D3
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       01962E61BBB4B1F712C065C80E71D2BA3E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0ACE
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: 5GqWisU5Klac/uy6eTm3Be8q6A7oW+NPoayM2af7XYI=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bb:b4:b1:f7:12:c0:65:c8:0e:71:d2:ba:3e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=11398940c41b3c702f2c7a943d06a2cfe8783ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:c6:77:aa:60:93:b3:56:f8:0a:fc:ad:2d:
                    cf:d5:ba:ef:7f:b8:43:47:6e:4a:a5:61:06:99:39:
                    6f:a6:87:97:8c:aa:89:59:ad:28:5e:a1:33:4b:24:
                    96:33:96:ce:e2:99:2b:54:39:be:9c:17:8b:3b:5c:
                    d0:b7:78:83:4a:e6:68:75:9c:f9:14:96:b0:a4:6d:
                    95:30:8b:a8:dc:df:fb:eb:29:c2:ed:83:41:ce:81:
                    8b:4b:df:b6:c8:f6:b1:86:bb:89:1f:7b:da:ad:99:
                    09:ca:0e:2d:cf:76:34:38:c5:45:f2:78:58:1e:84:
                    a7:e9:c6:33:57:43:f6:2e:7b:64:73:2e:c2:97:6b:
                    e4:95:ad:2f:da:50:f7:fa:cc:b1:92:88:69:51:ff:
                    96:8d:c1:82:03:e1:70:4a:b6:9c:de:81:0b:c3:3f:
                    36:27:c2:ae:df:48:3e:d5:06:96:ed:4c:77:5d:cf:
                    16:1f:c6:38:16:79:8d:1a:e7:01:24:a7:8e:38:57:
                    17:55:73:3d:37:32:02:83:d3:70:ed:a8:d2:fc:80:
                    a6:6a:7f:d7:78:98:8d:75:f5:35:1c:f2:90:30:7a:
                    19:70:8d:c2:93:41:f0:2f:98:06:a2:90:0e:a1:33:
                    8e:02:33:12:2f:a3:47:7b:91:68:8a:58:a5:d3:1a:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:89:40:C4:1B:3C:70:2F:2C:7A:94:3D:06:A2:CF:E8:78:3A:D3
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:e3:6a:6e:06:dd:0f:e1:aa:73:bd:6b:33:ce:19:2d:46:e3:
         68:70:07:55:1a:d4:9f:4c:c7:9d:d8:94:d4:08:3c:06:9e:12:
         75:69:59:2f:6e:30:40:3e:3e:a0:58:c5:b6:d3:90:e1:38:bf:
         e2:d1:ed:03:4a:01:fb:a2:c9:fd:f0:46:50:dd:dd:66:f3:4e:
         b5:39:21:e3:0a:9a:87:76:c6:47:83:9c:0e:45:c0:e4:1f:3b:
         e8:73:4d:7d:e6:63:65:5d:b9:95:cc:ec:76:ec:c3:37:d6:5e:
         ab:46:d7:82:69:30:16:ed:7c:a1:93:05:e2:db:81:05:50:95:
         27:37:95:d9:57:cb:15:5f:f7:1a:12:f3:5b:ba:82:93:9a:35:
         26:29:02:3b:87:07:19:c5:0e:f2:b6:60:80:e1:8c:a2:d4:86:
         2b:a3:c2:cd:d6:8d:e3:55:f6:98:6e:a2:e3:71:99:f1:bd:9b:
         a5:c3:f5:c4:06:47:50:ef:6b:de:f8:de:2a:fb:1e:06:cf:40:
         80:ba:4c:36:88:2b:c1:77:09:aa:fb:cc:41:60:f9:aa:28:95:
         fc:f0:41:71:0c:00:a8:60:37:6f:3e:86:44:1a:34:44:17:b5:
         4a:d1:b9:12:fb:eb:d8:d1:c3:1e:df:f0:e8:9a:ad:5d:eb:64:
         99:ad:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----