Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier:          wRK4s13jy+TL8YHRCTYhWIf5RVk4DNia3rhqu1tma/k=
Subject key identifier:   83:C3:A9:F1:8B:29:06:0F:26:C7:E0:3B:CC:44:6D:8E:4A:F7:2E:86
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       01962E9914AA73AF5B9E8F16AE7DFEDD96C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number:          14B7
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: +IAKYXbOnxGWHOvwdxJuqqzzQerIkUgZ1YOtC5ySnSE=)
                          2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:14:aa:73:af:5b:9e:8f:16:ae:7d:fe:dd:96:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=83c3a9f18b29060f26c7e03bcc446d8e4af72e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:0d:80:6d:3b:06:b1:12:27:22:38:58:cd:
                    eb:03:1d:f5:55:f1:63:29:74:78:4e:fc:cc:20:0e:
                    db:00:c6:cf:d3:f9:5e:6f:c2:e3:f0:21:18:b4:6c:
                    79:45:a0:a7:04:7d:41:8f:e7:51:2d:70:12:c5:e8:
                    57:dd:da:52:96:b6:76:24:ab:a6:b3:2d:b5:c5:f4:
                    46:ff:31:45:ed:5c:e9:97:99:2f:e6:97:40:82:2c:
                    62:3e:49:dd:c1:f0:3d:96:24:1e:9e:8f:ba:09:1c:
                    6f:4d:1e:d5:2b:69:c4:67:3f:e7:07:ac:5d:0e:e4:
                    fa:6d:4d:d7:62:f4:db:c4:b3:70:ae:f4:2e:ee:2c:
                    2c:da:6d:f1:1f:16:ad:a0:8a:78:00:69:0d:c7:00:
                    b0:ac:0e:35:01:e1:a2:d9:cc:81:03:80:4c:b2:6a:
                    bc:e6:1b:a7:d7:6f:0a:45:cf:e4:0e:7d:da:ce:c0:
                    c8:01:04:60:02:d2:88:98:b2:75:9a:96:c6:4a:11:
                    09:8c:fc:ff:1e:af:c4:1f:f2:6b:7e:7e:cf:55:aa:
                    c4:04:e0:a4:4b:14:90:42:ee:f0:ca:12:21:51:95:
                    57:31:e6:7a:21:26:e1:f9:8b:8e:d4:72:04:53:36:
                    8d:dc:78:55:fd:47:c3:d4:75:3c:45:e8:be:93:3c:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C3:A9:F1:8B:29:06:0F:26:C7:E0:3B:CC:44:6D:8E:4A:F7:2E:86
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:82:d8:d4:d4:17:68:13:3a:c8:6f:b6:24:f7:dd:a0:af:60:
         b1:b6:af:6f:d4:c1:ee:77:a9:38:a8:43:73:b9:12:4c:b0:62:
         b4:84:42:c7:7a:d0:dc:22:53:3e:dc:3c:a2:17:53:fe:9b:2d:
         b2:68:a8:50:7f:29:bc:38:76:69:09:06:18:71:e1:a7:6d:1a:
         5e:76:ef:b5:d3:9a:7c:a1:f5:11:91:b4:e4:07:5f:aa:49:2e:
         68:8e:be:76:20:9b:f8:82:03:69:a3:10:b5:4d:72:b1:46:13:
         81:f2:38:01:db:8b:d0:1d:cc:46:9a:95:d5:5c:15:35:17:50:
         79:3b:b2:eb:26:d3:88:d9:63:3a:6e:b2:df:9d:05:29:3b:23:
         0d:93:10:ce:54:68:ff:b8:7f:63:e1:be:8e:c9:dc:2a:7f:6e:
         51:5e:cb:d6:3b:2b:71:ce:06:fd:c9:67:26:04:17:4c:6c:b4:
         9e:66:52:eb:4a:f3:28:4c:82:0d:b9:c9:71:87:a7:f6:1d:b0:
         0c:5b:b3:0e:6c:6d:8a:0e:2d:ce:f5:32:4c:6b:eb:01:e8:af:
         3a:e9:8d:19:ee:67:92:79:f3:e6:87:14:d6:de:a7:22:59:24:
         50:88:1e:3a:70:7c:3e:b6:7d:57:de:9c:20:71:1d:83:ea:41:
         1e:19:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----