Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          W16QypyY98F+J8VbjJZbm7/t/3mULz8wbXcbL+TDPn4=
Subject key identifier:   7B:F3:91:E7:75:EA:4F:C9:A3:AD:E9:5E:71:F1:4B:DD:64:C0:EF:40
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       01962F3D4B8EDC3116387B98DF5B3A2F65CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          DE
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: GNg5qyh_Im4ovVZo43PZo0cIDgk.roa (hash: JsYstEOr/RnKzA1W+dKnW/zW5VDgHcUDQlKG6Iu9Xvk=)
                          2: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: J0fTpwdSlN3eqYtmeCCSWG4cwxOB5Z1KaOt5axksJdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:8e:dc:31:16:38:7b:98:df:5b:3a:2f:65:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=7bf391e775ea4fc9a3ade95e71f14bdd64c0ef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:b2:5d:bb:7a:9a:d8:a4:5e:fc:93:26:54:
                    00:76:86:ee:6d:0b:f6:1e:fd:93:10:61:72:21:95:
                    7a:c4:87:77:a8:59:86:01:b8:ac:9a:4d:34:14:94:
                    b6:f5:ca:b7:a9:82:f3:53:2d:5a:ef:57:c1:6f:e5:
                    29:8d:f0:fc:c8:bb:c0:64:91:f6:17:25:e6:00:05:
                    c7:ce:30:0e:88:bf:70:79:15:15:4d:dd:d4:cc:c4:
                    5e:71:54:b1:42:b2:c6:9e:d1:75:c2:5a:76:0e:c5:
                    8a:8f:26:5c:4d:7e:c2:aa:ac:d5:ae:17:a5:84:d6:
                    eb:74:32:3d:81:74:72:33:13:13:e9:0d:3c:f9:d9:
                    7d:35:1b:ca:68:b1:9f:27:d8:c6:09:c2:a5:66:90:
                    8a:0a:de:77:df:29:d9:eb:07:e8:93:dc:ac:9b:50:
                    07:d1:f1:19:c0:37:91:66:10:df:b2:56:0a:53:d3:
                    60:28:03:1a:cf:0b:20:dc:a0:73:c6:c0:6c:42:da:
                    70:fd:20:d7:ae:91:eb:1c:84:33:12:2e:24:0e:ae:
                    25:3c:21:e5:c8:0d:d8:e5:06:b1:21:9b:c6:ca:18:
                    78:37:18:a3:63:dc:4c:df:00:2f:83:2d:c4:ac:7d:
                    3d:1a:f3:b6:e7:f0:1a:83:ba:45:67:e2:7d:42:d0:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:91:E7:75:EA:4F:C9:A3:AD:E9:5E:71:F1:4B:DD:64:C0:EF:40
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:63:3d:0a:86:44:14:9b:3e:1e:44:ab:eb:53:0e:b4:34:
         a1:fa:86:fd:50:65:2b:a2:db:fd:3d:a9:56:21:e5:b5:b9:bd:
         b0:3a:ba:d5:d0:f9:5d:56:85:1f:9a:08:77:92:2e:c1:da:ba:
         b9:37:04:96:e4:5e:e8:2f:a3:92:06:89:40:a9:9b:4e:b2:32:
         c6:1e:08:7c:aa:66:1a:56:31:41:9e:ce:24:7b:ff:2d:20:d7:
         d3:3f:ed:76:2d:f2:09:84:b7:b7:72:60:75:3c:b1:98:de:51:
         ab:81:4a:ef:45:e1:a1:de:83:00:97:9f:b7:37:67:a1:92:79:
         98:36:50:af:1f:48:85:e1:83:e7:da:ec:e5:19:91:17:97:14:
         ad:02:42:86:94:32:92:ee:04:dc:43:14:c8:4c:01:d6:0f:ee:
         62:a1:9b:ed:13:27:35:f6:30:65:9b:65:ad:39:a9:d4:39:b3:
         13:bc:fe:e7:39:65:4a:69:8d:0a:7c:24:1c:ea:d2:c9:97:44:
         dd:4a:0a:59:4e:8f:38:fa:75:82:ea:5c:36:e5:b8:65:cb:0e:
         d4:97:38:80:4f:4a:80:dc:4b:b8:2f:b8:18:63:fe:a1:ab:2b:
         ac:28:07:c9:9b:ee:8e:8c:28:75:76:e7:2e:a8:7b:52:a9:39:
         f4:04:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----