Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File:                     6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier:          6QQFWyEInTdf9kWNsC0BHampf+Y802wGJ40xhwdmDSc=
Subject key identifier:   DE:A6:D6:F2:7D:D4:9A:4E:CC:A5:C3:F6:27:57:33:36:06:D2:6A:26
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer:       /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial:       01962F06F58E3D5B1DAC7C1FFEEB09E8B601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: NCvbTHwo0/GZQWqLlxEiSCSOlOZkoJy2AZRsXqdVOD8=)
                          2: uADkX3srvSz7h5-6p6oWNf6171A.roa (hash: JFtPLvs27wHExEiH+3v7Jikl9EHdIYjblSR25Lrk4HQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f5:8e:3d:5b:1d:ac:7c:1f:fe:eb:09:e8:b6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=dea6d6f27dd49a4ecca5c3f62757333606d26a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:54:ea:7e:41:b2:7f:9e:f7:3b:9b:40:e6:
                    29:e9:f3:52:d5:99:e9:da:dd:83:1f:3b:36:28:53:
                    90:c9:41:ee:5b:b5:9e:7c:fa:ab:75:54:7e:e8:7a:
                    f1:c5:c6:73:61:0b:6b:49:91:e7:24:2c:11:f7:1f:
                    15:01:fc:7a:70:3c:a9:77:0c:04:64:46:b0:52:f5:
                    9f:bf:9a:a0:d2:18:12:b8:43:51:7e:61:18:91:00:
                    ad:a6:d2:25:7b:e9:6c:d7:f0:69:36:5f:5c:ea:90:
                    da:5d:ac:47:da:51:c5:a2:8c:24:91:6f:04:a1:cc:
                    c7:7b:e3:2e:b2:60:ab:d4:c3:d5:90:a6:01:d6:fe:
                    95:e2:d4:6b:07:99:7b:ad:93:10:da:79:f1:1f:6c:
                    f9:5d:8f:35:aa:e1:71:4c:56:83:2a:aa:cf:ec:b4:
                    29:79:e3:2c:a2:c7:6a:61:cb:51:e1:fd:03:21:db:
                    bd:e3:f4:26:05:16:c3:7e:d7:e5:3a:6c:fa:e6:39:
                    a7:3e:d3:47:35:8e:f7:50:3c:3f:71:bc:f0:47:5c:
                    12:d9:12:5a:5e:e4:6f:0e:0e:21:14:f0:8a:3a:d2:
                    40:5f:06:37:de:c9:09:c6:46:70:b8:67:8c:19:e0:
                    15:44:21:63:41:e0:16:fa:d1:61:a7:c9:4f:44:68:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A6:D6:F2:7D:D4:9A:4E:CC:A5:C3:F6:27:57:33:36:06:D2:6A:26
            X509v3 Authority Key Identifier:
                keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:c9:fb:50:39:ad:83:84:27:45:23:9d:0c:06:29:c1:9b:
         3e:b5:ca:b3:ed:68:52:9e:f8:79:b1:41:c0:18:e5:d4:53:84:
         92:f9:47:84:85:fd:d9:ca:38:e7:ea:0c:e1:5b:79:71:a1:5a:
         ae:95:29:cf:d7:04:9a:9d:46:b4:d4:54:6e:e5:da:14:3c:96:
         e9:be:9f:1f:ed:39:76:3b:10:3d:aa:ff:42:40:a6:1b:8c:bb:
         15:2a:6c:3c:75:1d:d7:f9:f4:7d:3f:10:c7:ef:fb:08:d5:f1:
         d9:bf:e2:f2:5e:42:ce:6c:4d:92:c9:04:f5:08:8b:4f:c7:9a:
         e2:32:90:ff:76:fe:06:2e:8d:07:4d:9c:4d:49:19:88:cd:77:
         27:d0:17:56:7f:b2:ac:b8:5e:29:6c:e2:c7:f6:c2:f1:08:2f:
         66:56:b6:f2:58:bb:56:de:a5:b0:8a:0c:81:77:cf:53:28:54:
         c1:2a:d3:13:ae:9d:bc:5d:8f:50:ed:7a:1d:45:40:3a:8e:5f:
         5f:61:79:90:75:36:f4:2a:2f:b7:73:2d:91:34:de:d1:0e:e7:
         94:51:6f:00:4a:50:34:3f:5a:08:d6:14:0d:e3:6d:d5:96:7e:
         18:a1:2a:c8:29:31:42:9e:1b:38:52:68:19:8b:61:6f:09:b4:
         61:90:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----