Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File:                     atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier:          W7h1iiEx0crbOkrFqDj6qTt7KS8vSbE5lubEmfQU6F0=
Subject key identifier:   2C:FD:41:4A:E8:C9:58:4E:1E:D3:CC:BA:8B:8A:4D:F4:08:1A:6B:48
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer:       /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial:       01962F06A444555E7DBC858E9A6163637316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number:          04E8
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=)
                          2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: gtTMAyPveWGvh+mbHTd+DVpo95YzEQVzSaK4vrzUm+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a4:44:55:5e:7d:bc:85:8e:9a:61:63:63:73:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=2cfd414ae8c9584e1ed3ccba8b8a4df4081a6b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:b3:02:c2:96:8e:da:77:4a:fc:af:c9:c1:
                    59:10:c1:e3:1f:62:9d:ee:87:c7:7c:6c:f8:83:09:
                    f0:bc:2b:e5:cf:96:b6:0f:14:a3:b5:1a:bf:bf:1b:
                    63:34:4f:fa:a7:59:69:1c:7b:bb:b3:16:a8:6c:89:
                    b9:8b:bb:af:4c:bf:1a:7c:2c:af:8d:25:bf:60:09:
                    aa:cd:eb:1e:b1:cc:7b:a8:a3:c0:3f:39:13:43:3c:
                    2d:51:9a:48:b5:a2:e9:f4:65:da:14:6a:e5:00:f7:
                    21:ca:fd:1c:99:8e:b4:09:4b:9f:7e:3b:73:37:5c:
                    5b:34:c8:85:dd:cf:72:da:b8:35:df:12:50:96:be:
                    5b:c3:4e:d1:9c:cb:f8:12:3a:17:fe:3f:9a:66:69:
                    97:29:8c:ab:71:9f:72:56:32:e1:f4:63:8c:3e:c1:
                    41:48:7d:9e:38:d2:ad:65:4f:41:e8:a0:84:49:9c:
                    a8:d6:1a:b7:7b:e7:7a:18:5f:f6:70:3d:fd:3e:f0:
                    63:8d:1a:39:d1:97:86:26:23:03:5c:06:5b:d6:cd:
                    fe:d6:8c:3e:8c:70:97:2c:99:df:5c:3f:82:82:31:
                    75:bc:27:5b:ac:7f:c1:2f:87:5b:f8:ab:36:c3:a2:
                    22:5f:93:53:e2:70:8b:5b:be:09:2c:9f:26:0b:18:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FD:41:4A:E8:C9:58:4E:1E:D3:CC:BA:8B:8A:4D:F4:08:1A:6B:48
            X509v3 Authority Key Identifier:
                keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:2f:3d:06:f6:24:77:94:ae:9e:e9:e8:91:5c:d4:77:e8:
         3f:b1:29:52:d5:de:29:17:6c:c2:5a:85:e0:47:d5:47:46:fe:
         67:32:66:c7:5e:66:67:04:3a:50:62:07:59:f3:1b:f2:c6:f5:
         67:0d:14:32:13:b6:8c:b5:b5:54:6f:5f:fe:06:6c:2a:17:b1:
         9a:f7:87:2f:7d:11:8e:24:46:e6:88:8d:c1:5d:80:5b:4d:a8:
         59:08:45:e0:c8:82:f7:4b:4c:cd:bf:64:af:11:6a:9b:3b:49:
         0c:0e:62:08:ac:94:a4:a0:37:65:7f:d3:00:f5:8a:f3:bf:3e:
         fe:4c:ac:ea:42:ca:63:98:c0:06:13:05:12:99:e2:a2:b8:37:
         f5:f0:25:4d:13:2b:bb:3b:82:36:ed:40:31:1b:ea:6a:34:3d:
         f3:53:13:f3:f7:25:8e:39:9e:6f:dd:db:3a:2a:f2:3c:30:cb:
         61:e8:56:df:2e:ce:34:5f:85:f0:cd:e6:46:94:26:12:1e:7d:
         50:dd:93:1d:04:96:04:22:32:d7:e9:a6:8d:23:9a:85:b0:02:
         b1:ce:0e:21:30:33:69:b0:dd:bb:f3:c9:2f:2a:30:cf:59:d3:
         b5:2e:cc:a2:21:b8:86:d5:13:36:37:b1:9f:2f:7f:93:91:76:
         4e:35:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----