Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File:                     awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier:          hTqVE6Ps/HOUlm7IyKk0DXeSWSOQJvFObkfOSJ0v+v4=
Subject key identifier:   44:E4:EE:C4:8F:6B:A4:CB:20:B9:99:CB:D5:01:47:72:80:03:75:62
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer:       /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial:       01962E620C736CA069C5824259D53D1D18F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:39 +0000
Files and hashes:         1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: 2kwtduqsNhf+SKAnG0XWkQ3Vt76clV+DZ1slok9xqSE=)
                          2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0c:73:6c:a0:69:c5:82:42:59:d5:3d:1d:18:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
        Validity
            Not Before: Apr 13 09:01:39 2025 GMT
            Not After : Apr 14 09:01:39 2025 GMT
        Subject: CN=44e4eec48f6ba4cb20b999cbd501477280037562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:f6:03:e8:ab:07:9a:ed:d0:a9:7e:0e:0d:
                    e8:1a:b8:c8:88:8f:38:c4:95:98:ec:13:38:02:b6:
                    78:93:a4:d3:bd:d5:bd:0a:58:2d:fa:5c:bd:82:28:
                    f8:41:64:7c:67:da:28:49:94:8b:28:ec:ae:29:9d:
                    17:04:8b:ae:e4:aa:49:7c:0b:58:2a:95:92:88:f3:
                    b3:e7:e8:b5:0f:98:c9:66:49:69:56:c3:14:8d:dd:
                    f1:c2:9e:ac:ea:0f:28:8e:76:3d:37:ae:20:cd:f0:
                    0e:7c:d9:8c:e0:4f:87:69:2b:30:88:0f:d2:79:57:
                    4c:64:59:bc:72:e9:53:18:53:28:cd:08:2c:05:b5:
                    27:7d:bc:ea:af:73:fc:5c:3c:9b:8e:76:af:88:07:
                    19:c9:b4:4a:1a:a1:ed:5b:db:8b:fa:2a:88:20:07:
                    24:d5:6b:c3:62:f1:52:68:ca:f0:91:31:4e:35:b5:
                    8c:1b:4d:cc:c1:c7:10:11:cf:95:81:6c:fe:f2:0f:
                    fd:9f:b8:e3:62:68:7a:cf:d4:57:97:85:9a:b4:7e:
                    9f:ed:a3:f9:0a:4a:54:c6:94:ea:ce:d7:04:a0:61:
                    57:f5:21:a0:35:f2:4f:38:6f:9e:ea:c4:dd:2e:09:
                    7f:0c:ae:09:ad:fc:c5:3a:6c:ca:f6:2a:d2:e4:96:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E4:EE:C4:8F:6B:A4:CB:20:B9:99:CB:D5:01:47:72:80:03:75:62
            X509v3 Authority Key Identifier:
                keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:76:a3:a8:cb:4e:a5:82:b3:f7:be:82:f4:ff:6a:17:2e:a2:
         60:2e:ff:cd:80:48:e6:62:20:8b:51:0b:87:dc:f2:3f:30:1b:
         7d:03:5e:f2:88:c7:95:e4:69:07:88:3c:80:83:89:75:3c:8c:
         88:f6:39:d9:4a:39:62:37:6f:2b:b5:ce:75:59:57:38:41:91:
         d3:3a:10:1c:56:1f:88:a0:9d:ff:a5:44:6c:7e:0e:27:17:f8:
         8f:b4:14:88:c4:cf:6e:14:ad:77:ec:59:d7:f4:28:cf:bf:fe:
         34:16:14:08:a3:f5:c1:1f:03:f8:85:c6:35:c7:9b:50:f7:d9:
         ae:31:3d:c8:7e:d5:62:a6:09:fb:ab:ed:94:af:44:82:48:d1:
         d2:41:21:ab:65:fe:41:bb:28:51:22:6f:6b:38:4e:a0:eb:bf:
         56:87:91:f2:ff:8d:ec:e7:6b:7f:b3:3b:75:7e:41:13:de:e3:
         56:64:92:9d:a4:33:8b:ba:c3:31:0f:62:28:0d:b5:43:9c:fa:
         8a:4b:fd:09:5e:58:f5:d8:37:2b:a3:60:3b:f0:15:4f:70:99:
         e2:13:79:3b:ab:c7:ff:95:94:e1:c5:d0:d3:e5:f7:6a:06:35:
         07:6e:b9:70:d7:ae:31:4a:92:60:6c:5b:13:23:bb:0f:5a:16:
         24:69:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----