Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File:                     6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier:          6q63RnbJ2wBLryaKAYTP2Kv01PeSm1Tkn4QEPRqqzWY=
Subject key identifier:   80:F7:47:AC:B2:4C:14:F3:1E:A0:27:5C:DA:8C:0C:10:E9:C1:D1:E4
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer:       /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial:       01962E61E183DDA966F8360A5C9106096368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number:          1387
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: /LrtEkMgFtoW5x711wLEYJYj9OaY/ayfki8yFymHkDM=)
                          2: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (hash: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=)
                          3: vvQy0Yj8i6h1g42ZTAwhRIXBuw8.roa (hash: T8KzIT3w14qu1ZHhgwVuDOIW10SZ/SXhFvfY0nRS5nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:83:dd:a9:66:f8:36:0a:5c:91:06:09:63:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=80f747acb24c14f31ea0275cda8c0c10e9c1d1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:72:59:28:b5:2b:59:9c:f8:d6:bf:c9:7c:
                    46:9c:3b:83:37:e0:b2:70:77:3c:04:ad:cc:a3:77:
                    78:01:b4:4f:a7:b2:6d:2b:b0:60:a6:0c:41:a8:9e:
                    38:96:79:f7:c9:35:18:aa:95:7a:35:54:3d:d9:4e:
                    2c:d7:99:23:c8:c2:51:9d:6f:ab:64:8d:cb:d8:be:
                    eb:fa:4d:31:f1:ca:9a:16:77:20:4a:08:bc:ed:54:
                    28:78:60:e3:c8:97:63:9a:68:d9:0f:b6:01:f3:b7:
                    c3:f0:ec:98:83:fd:b0:18:af:f2:5e:f9:9c:0c:56:
                    1d:0c:e2:61:79:a6:0b:b4:25:ef:c9:2d:25:b3:6e:
                    bb:bc:12:96:55:6e:da:59:b6:fa:4d:2a:81:68:3f:
                    97:75:90:ec:b4:3f:9a:01:d2:c6:40:44:99:f7:af:
                    43:06:6a:d2:63:19:a8:e1:08:a4:b3:bd:f8:13:c9:
                    70:f9:f4:ee:4b:e9:de:4e:8d:67:72:94:90:10:3a:
                    e3:82:48:6e:ab:9f:2d:4b:6e:4f:ca:42:5f:4b:4c:
                    94:62:41:e1:be:9d:16:fa:6d:87:be:af:70:54:25:
                    6f:45:e8:83:0a:eb:c1:e0:6a:81:92:88:67:2b:e4:
                    e5:bc:b3:56:9a:f3:22:9b:86:e2:e9:0d:81:39:53:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F7:47:AC:B2:4C:14:F3:1E:A0:27:5C:DA:8C:0C:10:E9:C1:D1:E4
            X509v3 Authority Key Identifier:
                keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:58:f7:40:34:75:cf:8e:38:42:72:7c:91:ea:0b:f7:44:4a:
         6e:df:ac:91:93:45:f2:85:85:9c:ce:fb:3e:8c:61:c2:8e:90:
         1a:95:da:04:2a:c1:fd:8d:12:85:e2:43:57:c3:d0:98:c1:ed:
         24:d8:19:0b:19:3b:f4:cb:c1:3a:8a:df:45:9a:94:65:58:95:
         a8:51:3a:11:d1:68:3c:72:dc:29:c7:5b:49:e0:1a:ba:ab:47:
         72:32:64:d1:23:be:43:de:65:68:ea:f3:fd:83:4a:c4:96:7e:
         58:9c:60:1c:2a:68:c0:c8:ff:fa:b5:53:8b:23:a2:7b:0c:82:
         2f:e9:cc:2f:b7:41:68:d5:4d:5b:c7:df:ca:d3:80:58:e9:2f:
         5f:70:75:53:13:05:97:44:cd:36:c7:51:3a:34:75:9a:99:3f:
         23:2e:c9:bb:e4:75:40:c3:48:85:a6:c6:fd:97:94:03:ed:86:
         a5:26:9b:ea:cc:79:ea:4a:76:2d:96:2b:b8:cb:c0:c1:6d:f4:
         1d:00:8c:df:e1:23:a1:3a:ae:9f:35:a7:99:8d:6e:cb:60:78:
         cc:24:1b:c1:65:a6:bf:20:28:14:21:99:32:61:9e:ff:89:69:
         96:8e:32:45:0a:b5:59:31:85:8b:9e:15:90:1d:51:7f:fc:13:
         63:25:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----