Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File:                     g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier:          TwTsrPz+U19eoAmUZ2P7EEdS3KhqaMr3AYsIgdR+ke8=
Subject key identifier:   BC:43:63:3F:58:1B:1A:C3:A4:0D:03:18:3F:74:91:86:EC:BC:D3:B7
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer:       /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial:       01962F3D326476D83C24EDD6E71C3F9F6A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
                          2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: ampS+iB3vpZjspgQf/Xhn7aQ+GXV3BzMgsUvtFaw1Kw=)
                          3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:32:64:76:d8:3c:24:ed:d6:e7:1c:3f:9f:6a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=bc43633f581b1ac3a40d03183f749186ecbcd3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:fb:a2:85:f1:34:63:92:3c:64:c4:2c:2d:
                    4f:ba:4f:e6:0f:ec:49:8e:15:35:74:18:16:4a:c7:
                    78:06:e6:c7:80:16:d7:16:19:81:74:46:06:69:6e:
                    ad:7a:f2:ae:2b:b7:ce:df:a9:72:93:c2:e1:cc:82:
                    54:ef:55:af:e3:fc:dd:53:9b:dc:95:bb:12:59:0b:
                    76:0c:ae:bd:59:6c:28:cb:f2:15:a0:50:03:ed:55:
                    b2:68:8c:f7:27:0d:6d:a4:16:f7:37:e4:4f:47:96:
                    c6:3b:73:16:9d:2b:3e:b6:b0:51:fd:c6:7c:d8:49:
                    d1:c1:38:88:02:eb:9e:c8:7c:bc:a9:f3:08:3d:a5:
                    a1:b6:ea:14:1b:62:0e:f9:02:36:7b:b4:c1:7f:9d:
                    c6:33:c2:ca:85:2b:f9:e8:ff:b3:fc:13:34:39:bb:
                    ce:33:a3:8c:19:ea:23:08:a8:47:d9:e3:f1:21:32:
                    43:68:c7:b3:6a:00:1f:85:e1:9b:35:8d:19:6b:c8:
                    77:9b:16:79:24:76:15:99:d1:cd:cb:91:e8:5c:69:
                    82:b9:63:46:ab:64:8a:b7:92:a4:65:ab:b8:de:2b:
                    5c:b3:76:e5:cc:7b:dd:d3:5f:af:bd:93:50:27:bd:
                    42:03:61:36:17:1c:22:96:be:ec:1f:18:aa:df:57:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:63:3F:58:1B:1A:C3:A4:0D:03:18:3F:74:91:86:EC:BC:D3:B7
            X509v3 Authority Key Identifier:
                keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:b3:05:15:06:d6:da:e0:24:e0:ca:fc:dc:92:ec:ec:76:
         c4:bb:55:7e:a4:d3:63:6c:e1:e3:f5:0b:52:e8:2d:51:b9:66:
         3d:9b:05:69:ac:95:4e:ce:75:87:24:dd:d7:ce:8e:43:cd:e6:
         f4:88:72:2d:ef:73:7f:c3:5e:47:f2:3a:18:85:68:0b:f0:0c:
         c5:ff:55:89:67:8b:37:45:8f:1e:00:47:42:16:d7:20:fb:5b:
         f4:39:c1:29:97:56:fd:26:db:37:ed:14:81:bc:ba:2e:78:6d:
         b4:3e:b3:30:22:8c:09:fc:dc:5f:c5:9f:43:15:68:36:b9:52:
         86:95:d7:ad:53:d1:e3:0e:3d:c5:34:aa:7f:d5:98:72:24:c4:
         e4:ab:85:3d:09:87:26:9f:42:69:fd:9d:5e:e2:0c:56:87:b7:
         6e:ce:3e:5e:1a:fc:00:64:e1:de:5f:04:f8:79:8b:e8:7c:c6:
         15:b7:8d:44:21:81:fa:eb:e4:4f:4e:d4:2d:b0:4d:5f:8a:68:
         a7:5e:18:2b:72:f3:df:c4:65:a1:a3:b9:db:0a:43:8f:5c:ad:
         5d:40:f9:57:be:57:c7:c0:42:87:7c:9d:6b:b9:a4:73:f1:14:
         c9:6c:d1:db:48:69:c9:d4:ed:48:23:c9:08:91:95:dc:eb:80:
         fc:8e:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----