Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          L+SensdYtLtBystalhX9FBFG+1i4oC4HkiHANRIWhe8=
Subject key identifier:   2C:DD:DB:74:D3:10:2C:DF:54:54:CA:1B:5A:C2:2C:3B:70:A4:4F:0D
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       01962E99B4C0B151072EE70147191F3A4302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          14FF
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 5WdH5i+Ar9HFzQ7FVsLLjgiz+/ASG+5qtaQNetoxmq4=)
                          2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
                          3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
                          4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
                          5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
                          6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
                          7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
                          8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
                          9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b4:c0:b1:51:07:2e:e7:01:47:19:1f:3a:43:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=2cdddb74d3102cdf5454ca1b5ac22c3b70a44f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ad:93:c1:90:c1:94:f6:f3:b5:0d:7b:1a:5f:
                    61:97:3e:0e:3a:47:83:0a:d8:47:42:6d:08:82:e4:
                    c5:1c:7e:57:53:08:db:fc:17:04:52:85:5a:5b:64:
                    87:8e:83:07:3a:ad:db:5d:5e:34:b6:52:5f:8b:dd:
                    75:83:82:7b:38:80:d9:ae:f2:05:cf:ea:ae:f2:67:
                    ef:df:e8:cf:ba:97:be:40:80:b2:1f:02:c3:96:fc:
                    53:56:2d:81:ff:29:6b:63:80:13:60:dd:be:8e:c8:
                    70:8e:8a:07:5c:98:bd:15:14:61:38:6d:df:1c:c2:
                    a8:7b:3e:f7:00:d0:6c:8d:05:8d:f7:06:2f:94:da:
                    be:fe:6f:71:5d:b3:dc:86:cf:b2:00:44:83:4c:a9:
                    7f:c9:18:f5:70:20:a6:92:dd:e6:9f:0d:0e:fa:9b:
                    84:fa:82:b3:54:20:47:7c:33:95:48:1f:b4:1e:fa:
                    59:52:56:4e:0f:35:23:d5:5a:a0:af:43:43:cf:67:
                    ad:24:e5:5a:32:ec:fd:ba:7f:f8:da:bc:40:02:ff:
                    71:8c:6d:b8:b6:3b:86:bc:aa:cf:e7:a4:bc:d6:f6:
                    18:de:25:c7:0e:86:fa:22:dc:e8:3e:fc:5c:16:e4:
                    da:4b:70:9c:4a:a3:c5:ab:e1:7f:43:2c:03:62:7a:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:DB:74:D3:10:2C:DF:54:54:CA:1B:5A:C2:2C:3B:70:A4:4F:0D
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:96:74:10:79:da:18:b6:31:63:8a:75:94:c1:6c:94:73:55:
         c2:0a:94:8c:44:18:4c:fa:26:8c:ac:6c:8f:04:fb:e7:a9:70:
         e3:5a:af:c6:f5:92:76:65:47:d3:39:38:3a:66:6c:0b:a6:f0:
         af:e7:8e:a7:c4:9d:a8:7c:01:82:58:ef:b4:a5:fe:46:88:37:
         88:07:0c:e7:f9:47:fc:b1:53:97:e1:d9:f6:f0:80:76:4f:33:
         bc:3e:6e:d4:85:ad:98:db:5e:d7:b8:bb:dd:f5:04:d3:74:21:
         b5:ab:89:db:5f:25:dd:8b:e0:66:dc:8f:56:11:32:de:17:58:
         8e:04:6a:1c:db:66:11:5f:f1:17:e2:aa:66:a0:9b:f9:6b:22:
         5d:1e:c8:4b:29:f8:47:43:8c:cc:09:b3:41:e6:8b:74:c7:35:
         c9:84:b0:1c:2c:87:1d:cf:41:c6:72:c5:b7:1f:63:71:0f:9f:
         d6:bd:93:d4:d5:57:7c:b2:a7:11:b7:52:03:d3:cf:69:4f:52:
         1f:a3:e9:9b:c2:40:0c:f3:3a:76:c4:84:ca:41:90:2c:b0:e8:
         1e:c8:d1:c7:e0:14:aa:05:8e:a1:16:e7:38:12:83:8b:cb:64:
         79:9a:be:80:27:33:92:99:21:0f:7d:fa:12:31:5d:63:c6:95:
         f1:42:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----