Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
File:                     brhre7AKRC4IyzuFpj57SEh0LnY.mft (raw, json)
Hash identifier:          UitWXzPCs0+fH8aqoKg2izUknKDVJbXzPFN0PaLsp04=
Subject key identifier:   6C:A1:D2:5A:F4:5B:1F:F3:3C:18:1B:91:5A:2F:14:72:CB:62:B8:FE
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Certificate issuer:       /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial:       01962DF3DC289E942C3C1634055D60567FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
Manifest number:          0BBF
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: V-vZgRS8mAjoRUqoJ2bRVighD-g.roa (hash: UA46xIFUmg6Yei6BvPPyRg4XYtnlQ4qpnfSfvDj9Jd0=)
                          2: brhre7AKRC4IyzuFpj57SEh0LnY.crl (hash: 19KIjy0EgYuuSAkYFrtH9zq7ANiNMzBRqr8BLhChrCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:dc:28:9e:94:2c:3c:16:34:05:5d:60:56:7f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=6ca1d25af45b1ff33c181b915a2f1472cb62b8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:38:a2:7c:81:1e:c2:91:f0:bf:3e:e2:11:
                    49:3d:82:0f:52:be:fa:93:75:63:55:25:4a:df:9e:
                    35:6a:80:7d:bb:49:ab:bf:55:06:63:a2:00:7a:8d:
                    5c:7e:9f:7a:73:da:e7:c4:e0:31:55:88:d8:e5:e1:
                    c2:b2:b5:d3:2a:de:36:bd:ec:28:c7:42:e4:44:f1:
                    da:4f:35:04:bf:26:f1:11:34:c7:71:72:56:0d:70:
                    79:80:bc:3d:8c:19:e1:54:a8:e8:36:39:86:56:8f:
                    95:80:18:43:18:92:34:1d:d0:e2:4e:98:66:67:31:
                    d5:93:90:b5:b0:af:ed:3b:bc:38:a8:62:e5:3a:f0:
                    c5:dc:e1:7a:d5:21:fe:3d:94:b1:e3:ba:ed:50:da:
                    67:0c:4e:cf:e8:92:38:34:a0:71:b2:3b:57:f0:cf:
                    c7:04:cb:bc:01:34:63:44:45:2e:15:d7:86:ce:86:
                    50:09:c3:bf:cb:76:7e:e1:12:e7:e8:e8:a2:11:96:
                    d8:a8:b4:f1:59:dc:c3:99:9e:ae:6d:ef:30:da:37:
                    a7:76:d3:65:c6:e7:75:00:00:32:7e:6f:6f:db:9a:
                    b7:23:f3:d4:17:2f:79:a0:e4:2c:8e:7a:a7:22:d6:
                    7e:76:25:1c:de:61:82:18:26:68:f9:0b:6b:c9:66:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:D2:5A:F4:5B:1F:F3:3C:18:1B:91:5A:2F:14:72:CB:62:B8:FE
            X509v3 Authority Key Identifier:
                keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:70:97:06:13:4d:ef:97:8e:d0:64:33:b7:e7:f2:b4:4c:28:
         90:b7:53:91:4c:cd:1c:9e:f0:bd:0c:fd:30:d6:38:9b:13:0e:
         93:74:11:4d:3e:6b:19:f3:07:99:ed:79:73:2a:8c:78:ba:67:
         b4:de:a1:a4:63:60:50:2d:6c:21:ba:8d:68:8a:c8:9c:fb:85:
         a1:24:01:08:5e:ac:5e:a4:f2:08:ae:14:f5:31:ac:37:af:00:
         a4:b1:4b:35:c0:64:39:9b:f5:23:b7:1d:d2:bd:80:9d:54:9f:
         47:fb:c4:f1:5a:67:e6:8d:91:dd:6d:4b:ad:39:1a:80:4f:72:
         f8:25:3c:a4:7e:3b:56:d6:a5:9a:a7:a7:f1:a0:f9:ac:0a:d2:
         75:ae:21:ca:b2:5a:13:45:e7:aa:d4:a8:9f:73:25:2e:9f:15:
         24:b1:5c:db:4d:29:e1:3d:5c:ef:0b:15:4c:dd:9e:63:60:5c:
         07:71:a8:79:fb:f3:6a:9c:d1:70:d9:f4:e6:5f:89:64:cf:19:
         71:01:73:4c:ba:db:a9:47:7b:32:bd:d7:f9:2a:6f:92:4e:b2:
         69:94:0a:a9:d8:26:9a:cd:74:60:52:0b:bf:b3:2d:a2:0b:64:
         12:f6:86:95:f5:1b:b2:f5:5a:75:99:a0:86:d5:5f:8f:18:84:
         13:08:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----