Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File:                     brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier:          kwDaG3to8nEHU9mP/aJPHXtkOuEf9NuhgN49pL4XFj8=
Subject key identifier:   14:AE:35:ED:4E:62:CB:35:74:56:DD:69:30:B4:D2:80:D4:C3:FA:74
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer:       /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial:       01962ECF74B37758292D0241BE6409A3561A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number:          0A9B
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: Ok4j3kiPWCLQ9jcNdWujNm_MVrA.roa (hash: nZXhOq2r3JC9ctLBU1jIFYVtIuvQKy3kuUGg+TXWe5Q=)
                          2: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: 7kGjGts/BHhPP/+WNrfepY6FTHg4SeL7Nt1Z8EKgqKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:b3:77:58:29:2d:02:41:be:64:09:a3:56:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=14ae35ed4e62cb357456dd6930b4d280d4c3fa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:54:34:29:6b:bc:e5:d7:f2:b2:bf:18:cc:
                    11:0b:2d:01:4c:0d:c9:90:bf:ed:8e:ca:40:32:84:
                    39:12:a4:f8:63:c9:8e:0f:d7:d2:cb:48:06:c8:5b:
                    79:9e:2b:b3:d2:76:a1:32:6e:26:07:9c:fb:da:de:
                    10:eb:f4:14:c2:19:f9:02:31:2f:a6:0b:95:35:20:
                    bc:c3:a2:69:e9:23:09:0b:2b:ea:94:26:b8:20:a8:
                    90:d7:a7:1c:b6:76:bb:f8:5b:e1:7f:48:4e:41:df:
                    d6:d8:30:b2:d1:0f:49:4b:c0:30:32:42:0b:86:67:
                    dd:38:8d:e5:aa:f7:6a:fe:f8:c8:f5:cb:58:cb:d5:
                    12:97:73:8b:56:a0:6f:96:95:6d:11:56:59:ea:69:
                    15:16:98:7e:16:62:b0:b0:09:8f:04:08:1e:30:b7:
                    6a:bd:70:5e:4b:09:9c:5d:a7:bd:37:69:e5:33:d9:
                    82:da:7f:99:dd:75:04:bd:70:85:ee:29:14:b3:40:
                    de:0b:a2:1e:3f:6f:cd:27:d1:e2:6f:32:9e:ac:be:
                    69:6e:30:a6:74:54:ef:0d:b9:e0:fc:f3:6f:82:08:
                    e7:99:04:14:ef:e7:e5:91:3f:20:a3:e1:39:66:4f:
                    9a:69:39:26:74:35:8e:1c:e4:b6:7b:17:0a:a3:ea:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AE:35:ED:4E:62:CB:35:74:56:DD:69:30:B4:D2:80:D4:C3:FA:74
            X509v3 Authority Key Identifier:
                keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:53:1f:27:dc:16:a9:4f:f6:af:f0:3e:8c:4f:fc:9d:ca:
         05:18:98:55:4c:95:36:3c:8a:2f:ac:59:49:12:f8:17:26:77:
         31:d0:a6:f4:23:41:69:fb:1d:35:41:19:7d:98:bb:94:49:73:
         bc:42:65:a4:45:f8:2d:2a:55:3a:44:a1:7a:71:e4:e2:47:0c:
         c4:a1:56:3e:21:cf:16:20:ef:f0:db:8c:24:c9:77:40:3d:d9:
         be:b9:e1:cb:99:06:60:80:ec:52:36:7a:a5:84:ee:67:11:5f:
         86:6e:ec:38:f3:4a:7e:e0:c5:e1:cf:7e:53:88:de:44:c0:fa:
         99:2e:90:92:39:ae:80:cc:65:f7:d6:8f:1f:5f:bb:56:e6:7e:
         a1:19:f6:b1:0e:70:60:b0:96:d7:3c:6e:7b:65:0d:49:70:22:
         fe:af:bb:cb:6e:b5:0b:88:03:f8:a3:bc:f4:62:53:1c:fb:b3:
         95:39:c1:fe:3e:5d:42:1d:fe:4e:4f:b4:e0:eb:48:70:01:3c:
         a1:77:57:67:37:1a:b0:70:5c:1f:dc:43:e0:62:48:76:b6:a7:
         cd:b7:b8:16:5a:29:54:6e:7d:1b:ad:09:8b:3e:da:5e:63:b3:
         7c:31:5d:2f:e1:18:11:14:b2:90:38:a2:de:05:c1:76:35:e8:
         22:d5:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----