Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File:                     bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier:          GPPK66Dy5JywhdGxq/ZhiF7w03+eON+gwTqTKd+AD6M=
Subject key identifier:   45:4C:1B:52:D8:75:63:AA:DC:CB:ED:F4:D5:55:A6:7E:D3:8A:35:DD
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer:       /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial:       01962FAB853627457313E3C1A848065AECEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number:          01A6
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: MYDLO2vvDKfPNW5B_jde2eQkJYg.roa (hash: wV9kbvDo8W5gfhdwsvfFoAGi3mrp4nPR/cUxhX5vacM=)
                          2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: SiHZJOLQX4cWdj5MxwRVS2HIh4+O/re1Z2nx8oGgQvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:85:36:27:45:73:13:e3:c1:a8:48:06:5a:ec:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=454c1b52d87563aadccbedf4d555a67ed38a35dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:75:82:27:e5:0a:17:cf:f7:35:05:1f:cb:
                    06:fe:d8:b9:37:75:89:d1:a5:fa:6d:f5:e7:6d:43:
                    94:01:1d:6b:3a:5a:18:1f:57:57:eb:7d:44:fc:bf:
                    1b:e2:b0:03:e7:e4:eb:46:ab:7d:ef:fd:ec:47:da:
                    98:dd:aa:53:64:1f:1a:41:30:6d:f1:27:ac:05:c6:
                    3e:c2:37:e7:3c:ed:4d:ea:2f:96:fd:aa:11:96:5c:
                    c0:1e:b1:ba:b3:89:9e:b4:13:40:24:f5:26:cb:c3:
                    8b:c5:c6:b6:43:86:68:fb:a2:e8:d7:84:52:29:e0:
                    41:f7:d4:87:9f:42:d7:fb:cb:65:c3:fc:1d:e3:4d:
                    b6:ea:84:04:72:bf:0c:fc:ff:b5:ef:bd:c8:7e:5e:
                    e1:7d:83:68:49:e0:89:d8:e9:f7:99:4b:e1:d5:1b:
                    80:3a:64:74:d5:59:e4:5c:39:47:4d:b6:fb:28:15:
                    05:b2:56:39:35:49:f8:b5:65:a1:59:a4:e1:a8:9a:
                    5c:98:8d:6f:7b:14:c6:b6:50:cf:2e:2c:35:ff:0c:
                    9c:f4:57:27:cb:ff:03:a4:ee:2c:f9:25:3e:ca:0a:
                    ad:ed:dc:03:04:eb:f5:fa:00:af:fc:98:d7:11:11:
                    c2:8e:2b:fd:f8:52:35:1e:58:77:c8:15:93:e8:0d:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4C:1B:52:D8:75:63:AA:DC:CB:ED:F4:D5:55:A6:7E:D3:8A:35:DD
            X509v3 Authority Key Identifier:
                keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4b:a6:49:1f:4e:7c:71:ea:7b:b4:be:80:f3:79:3e:7f:c9:
         e5:6a:d3:bd:fc:7e:76:d9:5f:7d:f0:bb:f9:bb:a3:46:d2:dd:
         55:c5:56:2f:4b:46:e0:d6:5c:50:25:70:b6:bb:5c:61:e5:e2:
         0c:ac:e0:a6:11:6e:22:51:f7:61:a4:95:b5:a6:c7:e2:3e:cf:
         42:47:75:70:4f:db:6c:8c:87:cf:79:82:08:65:5f:0d:9e:91:
         d8:f9:f7:20:a8:d6:81:ff:83:a6:08:61:02:a8:df:e0:de:5c:
         a4:6e:9e:94:40:62:c4:bd:56:cf:fd:dd:85:07:32:94:44:28:
         c8:18:77:01:26:6c:1b:e6:84:a5:8a:a7:d5:f6:ba:35:ec:ae:
         b9:58:5e:45:50:59:d5:ec:59:0c:20:9a:45:c8:68:ca:86:91:
         e1:5c:13:10:3e:ef:41:f3:0a:46:9e:0b:8a:03:4b:f0:aa:35:
         84:8b:5f:f1:79:aa:b1:60:a7:23:5a:2b:55:b5:fe:68:dc:90:
         84:d7:5c:e9:f0:86:87:a1:ac:bb:24:65:4e:7b:89:c8:a9:45:
         a9:99:3f:ff:76:a8:45:9f:ec:81:15:3a:3f:9f:7a:3e:ea:f5:
         c4:1f:03:7a:fe:89:85:05:de:ee:24:e7:be:40:8e:1c:46:08:
         50:2b:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----