Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File:                     1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier:          fne/2wCPDe7vvApgNeDafftE10t6WNjaB6ueedzEqgk=
Subject key identifier:   CA:B0:74:E6:04:ED:BD:1F:AF:2B:2B:A6:34:48:89:AA:66:65:08:88
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer:       /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial:       01962F0723D864015C3FF42B403798C5949F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number:          04BE
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: RhL89DF5bs1oZLhJt+QxbS4XGhrCz4qrNelV59hpK3A=)
                          2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:23:d8:64:01:5c:3f:f4:2b:40:37:98:c5:94:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=cab074e604edbd1faf2b2ba6344889aa66650888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:ba:31:52:c4:a7:4c:a6:c5:4c:a5:4c:f1:
                    af:c9:86:b5:ec:3f:e6:64:0d:97:37:a5:85:1f:cb:
                    30:36:62:33:be:a8:2a:40:cd:a6:2b:29:7b:74:59:
                    b8:7c:ba:25:57:21:eb:bd:31:f9:6d:c9:4c:17:2f:
                    c4:57:4c:ad:da:71:bf:ff:1e:f3:24:73:94:b2:cf:
                    be:7b:82:67:6f:eb:8a:eb:37:6a:bb:df:c5:05:43:
                    c4:c2:d1:cf:ba:01:8c:39:24:88:4a:86:37:35:b0:
                    ad:5b:aa:5a:70:1b:4a:87:74:d7:63:4b:6d:b3:ea:
                    e9:37:cb:bc:e5:e2:b1:cf:f6:7a:22:56:67:9f:d6:
                    f0:0d:88:d7:0a:13:f4:2c:24:9b:35:50:3d:a5:05:
                    44:a9:ed:a0:d2:a0:45:f6:06:c8:cb:05:ab:2b:d0:
                    e3:90:b9:ed:07:1a:2b:09:00:36:16:13:33:4b:89:
                    76:c6:4d:52:52:78:57:c3:85:66:16:c5:a3:2e:9f:
                    d6:61:c9:8f:11:06:f8:e3:d0:14:f1:85:33:fe:fc:
                    b4:fa:92:0e:2c:bb:5c:2f:5b:b5:48:48:88:c8:77:
                    df:c8:f5:8f:e9:cb:0e:a4:24:0e:da:21:8b:08:fd:
                    0b:1d:6c:74:86:56:1f:31:3b:be:8d:96:c0:1f:79:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:74:E6:04:ED:BD:1F:AF:2B:2B:A6:34:48:89:AA:66:65:08:88
            X509v3 Authority Key Identifier:
                keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:46:f1:49:7a:68:67:3a:4a:b4:19:10:5e:b8:7b:1c:17:
         ff:d6:dd:86:cb:ac:41:ca:b9:a2:9f:d1:2f:c5:0f:98:78:a9:
         ab:00:1a:1f:d5:0e:01:cf:38:7f:af:d2:32:ac:df:5a:ab:5d:
         1e:4b:33:3e:14:de:35:f8:f5:07:8a:7c:34:20:5d:30:cb:14:
         f6:53:82:78:43:d3:28:c8:a6:56:12:60:a9:da:de:2e:9e:90:
         e3:01:09:da:b5:08:68:33:ec:1c:8f:d3:c8:df:4c:6a:4a:1c:
         4d:73:b1:22:c0:b3:ac:e2:e4:c8:f6:97:a2:59:c9:a6:22:13:
         06:06:e3:35:55:75:09:76:cd:dc:5e:a3:78:93:84:37:03:23:
         e4:db:9d:44:fe:d1:5c:67:13:cb:bc:d8:cb:88:b3:85:6b:00:
         4f:c6:56:e9:f4:43:2b:7b:26:4e:26:3a:0f:cd:08:d6:ad:23:
         dd:2a:37:db:87:8a:a4:1c:59:4f:55:0c:c1:0d:29:14:a6:41:
         82:71:24:14:21:7c:76:25:bd:f6:4a:7e:40:6c:b9:56:e7:f5:
         7d:08:c7:9c:bd:9f:8c:b1:64:27:bb:09:a5:47:8d:ae:18:e5:
         34:78:3a:3e:40:4a:ce:74:a2:54:25:76:5b:33:13:d2:a3:b1:
         2a:a2:e6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----