Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File:                     xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier:          YgrLM2DBvc9PCqC2HQ6J7zV/J9nnwNF/Svto6/gwcLI=
Subject key identifier:   12:44:A7:35:38:9D:EC:1B:E9:A8:83:59:8F:18:37:8D:71:BA:B4:DB
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer:       /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial:       01962FAB4E12E067E223D34AA71C06E886CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=)
                          2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: RaFowdnIs97fch+HBOGH3V4TIgUG+pjGsq/pQcV1/Ls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4e:12:e0:67:e2:23:d3:4a:a7:1c:06:e8:86:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=1244a735389dec1be9a883598f18378d71bab4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:7e:4a:3f:4a:d3:a3:4d:a1:31:83:9a:ce:
                    84:bb:c7:be:18:e9:1d:3a:96:27:e2:64:0b:d6:de:
                    76:91:75:ee:b2:81:e1:e2:17:2e:21:9d:b6:17:13:
                    04:81:b8:ff:53:e6:08:2e:dd:34:c8:71:0e:ce:57:
                    14:de:61:91:6c:7a:f4:59:32:9b:f6:92:9c:9d:a6:
                    c0:2f:ee:ac:72:df:ba:58:53:12:df:83:e6:5d:4c:
                    e8:a3:5d:00:fb:cf:0d:e8:db:56:f5:c3:e2:fb:25:
                    dd:c3:cc:af:ea:94:4f:d1:e4:fa:7b:55:3e:02:e5:
                    67:b0:ee:90:74:60:01:43:8e:66:5e:a5:2c:0a:a1:
                    e2:3c:c3:3c:94:bf:85:27:f5:3b:a8:cd:11:21:b8:
                    6f:15:05:13:c7:6d:b0:97:7d:80:c2:76:d8:1a:fd:
                    08:28:7f:5f:7c:14:e0:02:00:18:6b:4d:cf:da:55:
                    b8:5b:9f:1f:84:1e:48:48:93:45:d3:e4:36:2c:71:
                    88:f9:a1:9e:7e:50:99:9d:66:89:52:ed:f7:f4:30:
                    fc:ae:81:0a:d2:ac:35:3b:df:c7:86:e4:1c:47:d6:
                    3c:48:b1:c4:f7:77:e6:06:f4:c0:b7:e4:85:75:e5:
                    76:c9:50:fb:c3:38:8f:e4:85:16:9e:63:85:d5:03:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:44:A7:35:38:9D:EC:1B:E9:A8:83:59:8F:18:37:8D:71:BA:B4:DB
            X509v3 Authority Key Identifier:
                keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:92:e8:88:d7:c1:00:50:ba:66:e7:df:7c:4c:c9:dd:63:
         5c:35:7c:8f:5c:d3:dd:b8:02:76:0c:25:17:f7:be:75:9d:15:
         93:f5:80:ab:b7:fb:5a:02:06:d4:d2:56:90:33:0d:c7:68:1d:
         1c:96:6f:7a:66:ac:f7:59:52:b5:d4:c9:8e:49:2b:9a:76:2e:
         de:0e:ba:40:9f:90:b4:e9:89:5a:9d:d7:00:03:4c:87:f6:45:
         0a:24:dc:aa:1b:6d:48:9a:03:9b:8c:ec:eb:05:51:e4:8f:80:
         73:55:cf:b7:85:c2:fc:63:9b:51:64:2a:ec:9d:84:a6:7b:1e:
         d2:ea:36:49:d2:ca:8c:c8:37:ab:9b:d5:66:83:b4:c0:a5:b5:
         35:a1:dc:68:49:7d:a7:64:89:89:9c:be:91:fa:7b:97:15:1e:
         87:89:dd:83:ca:72:79:5c:79:5c:85:b9:7a:86:7f:a4:3a:32:
         7e:b5:7b:9d:e4:8b:de:c2:7a:08:fb:cd:c6:52:b3:da:ce:cd:
         65:1b:b2:b7:f3:0e:c8:8b:40:45:9f:fd:0f:49:70:c9:72:70:
         da:12:59:a0:05:67:02:85:83:66:a4:ef:52:98:01:87:bf:6f:
         a4:e6:02:ed:33:73:21:1e:d8:3d:96:e7:34:29:4c:b0:52:c5:
         cb:9c:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----