Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File:                     up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier:          fRuof7LBiRmn97Jcr+eoyIBFJXHCtSpdrFAmGDq459k=
Subject key identifier:   6D:6D:03:42:54:73:FF:06:21:7E:98:43:F2:82:C0:84:5E:D5:BD:97
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer:       /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial:       01962F3D7AA8E9D36FC50EBA9EE18651C34C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number:          1460
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
                          2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: FAqUSjcPwFluk/I/hXTWS1KV/1LipL2ys4Swg/V0ELg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7a:a8:e9:d3:6f:c5:0e:ba:9e:e1:86:51:c3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=6d6d03425473ff06217e9843f282c0845ed5bd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:d0:0a:f5:14:97:47:be:a8:db:e9:78:d3:
                    56:dd:dc:2e:3b:a2:59:65:d4:34:97:a1:6c:f9:24:
                    4b:5a:92:5f:36:96:cf:36:73:04:02:22:f6:0d:a8:
                    e5:e5:da:0b:ec:1d:65:8e:79:3d:08:55:4e:13:2c:
                    2b:a3:0e:4a:4e:95:dd:4b:c3:f6:c5:ab:d0:e2:e8:
                    d3:f1:e1:3d:b4:d8:4f:2e:8e:cf:83:2e:cd:1f:c4:
                    6b:1c:d6:7d:11:8f:39:63:17:cc:0b:25:f4:85:2b:
                    c8:89:a6:c9:9a:b8:a6:26:0b:a5:fa:cc:f1:47:1d:
                    7e:36:03:e5:45:b4:ec:66:91:6b:c0:7e:64:e3:f1:
                    f6:ac:23:bb:a1:f7:ad:d3:03:96:c9:10:82:4e:6f:
                    90:8b:85:6a:cd:b5:97:bb:34:1d:15:d6:b5:8d:8d:
                    b2:28:0a:34:87:e2:13:ff:db:81:f7:ed:a1:85:5b:
                    15:65:17:bd:a9:35:a2:2b:e8:3e:db:c4:ea:5f:a5:
                    46:1b:62:0e:81:e5:8f:47:d2:27:c9:0c:8e:18:9c:
                    93:3e:b6:67:d3:77:64:78:f1:b1:73:92:cf:a1:ab:
                    25:4f:04:2f:34:e0:86:68:a0:be:df:07:1a:cc:31:
                    2b:9c:47:3d:e0:a8:16:30:46:f7:bc:8a:f9:3b:15:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6D:03:42:54:73:FF:06:21:7E:98:43:F2:82:C0:84:5E:D5:BD:97
            X509v3 Authority Key Identifier:
                keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:25:fa:78:14:2d:01:43:92:0e:57:9d:3c:a6:5a:4a:55:86:
         3e:1a:f4:e2:3d:c4:14:93:e8:2f:ba:36:bf:6f:74:25:ac:cb:
         21:46:e6:ff:2c:13:46:b0:cd:0a:81:7b:c2:3d:4a:a7:66:79:
         06:41:b7:dc:ae:e1:26:fc:0c:74:14:1b:70:b4:a0:6c:78:28:
         48:44:d2:3d:f6:9d:25:ce:17:a9:0e:4e:eb:14:93:09:cc:fb:
         81:f9:a4:be:5d:14:5e:08:c8:ff:6b:c7:28:71:d4:8d:98:4f:
         88:c5:a2:2a:f8:fb:ab:a7:76:ae:f2:42:83:25:12:e0:bb:f6:
         bd:93:67:33:70:fa:23:e3:1c:fd:8f:03:8e:26:d7:f0:6e:93:
         f4:44:37:06:8a:ed:44:b9:34:93:49:c1:f6:61:44:96:09:f7:
         cc:8d:49:32:dd:09:71:e3:85:43:bb:ac:92:c3:f4:25:7b:f1:
         67:3c:b7:51:47:cb:00:65:d8:d5:6c:e7:b7:93:22:97:50:61:
         e7:5f:81:a0:29:b6:59:fb:ac:f4:a6:e1:60:0b:95:f0:df:31:
         62:78:10:23:37:f4:4b:c0:f9:e5:91:a2:01:31:d0:80:61:f1:
         61:41:e9:26:50:4c:52:40:36:4d:fc:96:54:47:3e:a6:d8:fb:
         95:41:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----