Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          6LKeKk5kEAITT3FZAEUzIBgHa7061lL9TWN2JflkFc4=
Subject key identifier:   FD:69:DE:CF:48:2F:2F:C0:C4:00:25:E1:8B:10:0C:69:4F:91:7F:21
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       01962F74A28D087A29702BC09CD24AD5016B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          14C9
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: wTbB8xqRsY/xn5kEnbUBe4CcHhS6y+NtVEyncRDMDyA=)
                          2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a2:8d:08:7a:29:70:2b:c0:9c:d2:4a:d5:01:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=fd69decf482f2fc0c40025e18b100c694f917f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:02:58:79:ba:f5:16:9b:bc:1e:7e:9d:0f:8e:
                    2e:0b:cc:0a:04:cc:1d:7b:1f:f8:f3:6d:a8:a6:e0:
                    c0:e0:c3:ac:50:d0:ec:fc:f6:b1:41:12:cc:b9:af:
                    1f:dc:b1:9f:e1:ef:c3:f9:71:ac:a2:e6:6d:46:6d:
                    68:1a:9a:f2:b6:e2:8d:3f:b2:e3:d9:12:ac:a7:45:
                    99:43:24:c2:45:30:0a:be:de:5c:53:2e:0d:21:d2:
                    5d:f7:72:77:d8:80:7d:8e:10:8c:c3:d9:38:45:01:
                    b9:8b:ed:bb:d0:fd:fc:43:7b:fe:42:c4:0b:f4:90:
                    c8:3d:21:0e:ac:d1:0d:62:a7:83:29:bf:30:7d:52:
                    66:24:f6:7b:b0:8c:4e:bf:51:55:6f:81:22:12:e0:
                    ae:24:30:78:40:bf:81:8c:17:62:f7:0c:dd:a5:2a:
                    cd:c8:af:8d:86:6b:2d:16:7f:9f:62:85:e9:41:a2:
                    01:3a:55:f7:f0:50:78:13:4a:04:91:23:8f:60:17:
                    d0:e8:08:fc:b3:2a:02:19:a6:61:df:0a:85:56:e7:
                    f5:45:11:4c:8c:df:79:3f:d0:68:4b:a9:a4:16:d8:
                    14:9a:10:49:39:43:8b:f7:11:42:74:f2:34:d9:b1:
                    c6:c6:c7:b2:b2:dc:9b:7e:56:12:8d:67:42:76:fa:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:69:DE:CF:48:2F:2F:C0:C4:00:25:E1:8B:10:0C:69:4F:91:7F:21
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6b:b1:10:aa:f5:8f:a5:50:cb:4d:4f:b9:85:d5:1b:f9:d6:
         3a:eb:55:2b:02:c2:b0:44:11:06:6b:34:19:9a:4b:f8:f5:67:
         cb:f5:34:4e:00:b7:c4:0e:ad:ff:20:ae:38:9b:12:6c:33:5f:
         ee:8f:d8:d3:91:36:79:91:82:cb:96:39:7a:16:b2:ed:22:6f:
         0b:7b:60:be:43:2e:31:dc:52:d2:f7:d1:59:aa:bf:93:29:ab:
         c4:0e:66:7c:1c:ec:b6:17:1a:c2:9b:bd:af:ad:c7:8c:15:03:
         25:41:fd:57:aa:76:53:79:ae:a7:26:a6:c0:fb:b2:25:07:29:
         09:6f:df:b6:58:5b:b6:50:80:18:13:c0:23:b0:4d:87:c7:8c:
         6b:bd:e2:80:67:ba:b6:32:d3:f4:ec:8e:e7:8b:33:c0:2e:de:
         3d:ba:d0:70:d3:37:e7:c1:da:f7:7b:c3:cc:29:0a:24:0b:33:
         10:4c:ae:84:70:69:67:15:af:f1:31:99:38:a7:63:fc:00:db:
         01:dd:39:1d:d0:4f:48:5b:cb:95:18:18:d3:39:42:7a:3a:2f:
         53:e5:6b:bc:a6:54:53:ed:e4:f1:4f:ff:cd:bc:8e:d4:84:d4:
         c6:29:30:ba:03:3f:fe:b3:df:90:de:21:71:12:66:e8:48:66:
         87:01:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----