Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File:                     s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier:          hJdXBEO1iYvypz4hHsARixnxAqU0s7LkPxg/xToVQWs=
Subject key identifier:   DE:01:F5:0F:D2:95:E8:10:C1:3E:21:11:CA:D4:E7:D7:10:2C:41:ED
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer:       /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial:       01962ECF92ACE5E48F01EC65786998041949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: mD7Z7YeNOfK8jp-WeYlQt4uS5Qk.roa (hash: foJEvw+8/1mri1uVePD4Fo8lgGoj9wOcsREdvsruLoI=)
                          2: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: 7UVZ722RWSV+N68ODVdzNRUSbHrwnfuyTEditpB/V8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:ac:e5:e4:8f:01:ec:65:78:69:98:04:19:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=de01f50fd295e810c13e2111cad4e7d7102c41ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:d3:cd:de:1a:1f:f1:db:42:a9:a0:d9:6a:
                    b8:2e:3d:8a:b2:16:f9:f6:7d:51:fb:9e:b5:eb:0f:
                    63:49:29:44:fe:2a:00:3d:87:56:28:b0:91:64:76:
                    fc:67:a0:62:c0:45:8d:ab:ea:77:51:3e:55:4f:7a:
                    f7:9d:3f:9d:3d:fd:8a:5e:45:07:70:b0:69:39:32:
                    b1:80:ee:02:02:67:9d:33:dd:82:b4:d5:74:b3:6e:
                    83:27:ea:19:ce:eb:51:d3:14:1c:4d:31:19:af:ca:
                    ce:f1:93:42:bf:58:e7:5d:7f:06:08:51:e7:60:76:
                    71:e4:da:d7:22:7f:af:2f:50:27:25:52:1d:b0:2c:
                    90:7c:2d:61:04:41:f8:03:35:ef:d8:d8:f3:0f:50:
                    ef:58:c4:1e:02:b2:52:f2:ca:cd:7f:c0:4a:ee:00:
                    ff:fc:bf:0e:38:59:b6:c9:97:76:7d:75:37:51:ad:
                    0a:1f:39:c2:8e:3e:66:25:b5:0f:a4:d7:8c:bf:91:
                    a0:94:bd:5b:b5:b1:8a:7c:e6:45:38:7c:e6:7c:60:
                    a4:17:cf:69:d8:61:33:10:54:4e:5f:fe:e8:96:c8:
                    13:6d:c1:54:c2:50:0f:56:e1:0d:24:88:d0:18:60:
                    54:61:b1:1c:c2:24:ac:c4:fe:6a:c8:5f:58:c0:0a:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:01:F5:0F:D2:95:E8:10:C1:3E:21:11:CA:D4:E7:D7:10:2C:41:ED
            X509v3 Authority Key Identifier:
                keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:ca:ca:bf:c7:77:60:e5:16:8d:9a:5a:b5:a3:da:1e:b6:
         7b:6c:00:49:92:0b:0b:22:01:4e:85:d6:e7:31:c9:b0:2b:42:
         72:d0:1b:c1:b4:8e:a7:22:9a:be:e4:68:0b:08:83:b4:4b:10:
         8d:d3:78:7f:f7:74:c3:cd:7b:49:e2:d9:af:3d:02:66:dc:8b:
         87:35:af:05:53:3b:ea:93:6c:98:31:c4:a8:73:1e:3a:7e:0f:
         17:fd:f5:cb:f5:76:6e:d0:db:6f:9c:7d:63:8d:7d:6f:bc:e4:
         79:92:2d:23:b7:65:a5:2d:f1:47:a0:fe:67:92:5d:c4:db:5b:
         a4:c8:27:52:2a:bd:67:46:6c:9b:69:18:14:b5:d3:72:95:c3:
         63:e6:d0:0d:d1:c4:ee:9c:cf:05:2f:a1:7f:69:85:a7:c4:00:
         af:5b:28:4f:6f:99:3e:8f:d7:90:3d:62:01:11:19:b9:7c:4f:
         db:4f:dd:2a:92:33:e2:c0:7b:77:92:3e:74:f5:6f:54:1b:a6:
         c5:36:be:62:47:df:c2:56:4e:93:d4:9b:f9:78:dd:c8:92:f1:
         a1:2d:c6:49:1f:c1:d4:b6:59:6e:5a:5c:69:ca:ec:d7:0c:95:
         90:28:75:d7:d8:24:10:0d:6a:41:f0:2f:88:94:e9:ab:f1:50:
         d0:c0:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----