Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File:                     am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier:          4ghI7gGPVfmcsBSg9wm+ikeq2RCBPuiOAGvHBJExmBI=
Subject key identifier:   93:30:15:ED:1F:88:5A:66:1A:D4:71:0C:C9:18:02:AC:92:80:9C:9D
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer:       /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial:       01962E998E4D4C9F7FCDC239DC092B3287E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number:          084D
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
                          2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
                          3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: SkKc2IgJS4ZcdGzIOKyeGiA+M9iBEXeElmRu8cDxPdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8e:4d:4c:9f:7f:cd:c2:39:dc:09:2b:32:87:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=933015ed1f885a661ad4710cc91802ac92809c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:e3:6b:95:81:2e:59:64:54:88:fa:d4:c4:
                    a1:f8:ba:c3:bb:72:bf:89:b3:32:5a:a5:92:0f:54:
                    ed:cd:a9:5b:99:05:87:ca:7b:04:a8:db:74:dc:c5:
                    f7:83:d7:c8:7a:4a:a7:1a:a9:a0:83:6f:91:03:ed:
                    60:f3:ec:66:20:be:22:61:5c:a7:7f:5d:80:e7:94:
                    a8:cb:e8:32:c9:23:89:c4:e8:8c:6d:5d:d4:2e:8d:
                    8c:09:5f:9f:eb:37:9f:38:95:48:30:2a:2e:1a:67:
                    93:cf:0c:a4:05:c1:ff:b3:07:4f:4a:8e:ff:5f:c9:
                    9d:1d:7b:b2:1d:ec:22:cd:dc:73:66:79:61:cf:65:
                    b5:e9:4a:f3:6b:15:9b:25:9b:c4:5b:91:20:7e:cd:
                    11:2d:28:cd:58:e5:d3:7c:02:37:f0:11:c4:08:e1:
                    14:e6:42:35:cb:5c:b5:ad:2e:31:ca:17:66:05:27:
                    ac:fc:ef:1b:88:ce:95:69:c6:08:38:7b:9a:66:4b:
                    94:98:2c:d6:2f:71:2b:85:05:7d:55:64:ed:71:33:
                    2f:b3:3e:79:c2:42:09:b3:f5:9e:2b:33:62:ca:48:
                    27:29:9a:a2:d6:e5:ce:36:71:2f:7f:4a:57:38:15:
                    27:65:80:d5:0a:ca:e1:be:fc:30:de:ac:6b:00:8f:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:15:ED:1F:88:5A:66:1A:D4:71:0C:C9:18:02:AC:92:80:9C:9D
            X509v3 Authority Key Identifier:
                keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:78:3e:de:cb:1a:03:0e:8e:17:a8:51:b4:27:bc:3c:08:
         de:36:69:cf:fd:65:d9:a2:26:f9:f6:fc:da:b2:0b:1f:6b:51:
         32:76:19:fb:21:5d:83:69:29:26:a3:3e:28:3f:7d:10:3b:59:
         3c:ef:8f:30:7a:da:45:c5:89:1d:69:54:de:9e:d8:11:aa:b2:
         83:09:83:85:6e:35:1e:33:fd:16:db:cd:59:bd:e9:8b:6e:fc:
         92:1a:08:4c:03:fa:f8:58:1f:18:1b:0c:19:5c:f7:89:d9:97:
         86:d3:fb:a7:1b:d9:36:e6:ef:36:3c:1e:0b:97:79:69:f3:e9:
         2a:c7:10:63:0a:a0:ee:bf:ab:87:36:8d:3c:4b:42:9a:c8:00:
         ce:4b:1d:c4:39:72:6c:07:7b:48:72:d6:ba:c1:d7:3b:9a:6a:
         37:20:bc:88:94:18:c4:e5:56:9a:52:73:66:f5:88:27:c1:54:
         84:d7:8f:3a:d1:48:80:c9:dc:bc:7c:f3:41:4a:90:fc:cb:93:
         b4:bf:80:eb:be:61:7e:64:dd:95:10:44:15:54:10:19:ee:cc:
         12:fb:c5:d3:0e:7c:21:97:7b:7c:66:10:8a:d9:be:37:2a:b8:
         03:6d:a7:26:c1:15:4c:c6:b3:38:25:c0:64:b2:a7:39:97:ad:
         2e:b6:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----