Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          s2atGCMXkNMOxcaBVOWbVsZT/3/0pgXbu9aDMBrk+s4=
Subject key identifier:   15:3C:5C:E5:71:F2:4E:56:79:70:DE:C3:57:34:64:85:9A:7D:95:F7
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       01962F7487ADE0CC0173628B6C8D843708D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (hash: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=)
                          2: ZUdn9XmxmiY2yd0SC6JWA2hWACg.roa (hash: GVvErxNa6lMweOfM26d5UbHyagv3mNP8YwwVTBiOPVM=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: BBWicoWC0oG4HitCQC7kUG6tiaQzh6aNhNknFk4ukaY=)
                          4: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (hash: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:87:ad:e0:cc:01:73:62:8b:6c:8d:84:37:08:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=153c5ce571f24e567970dec3573464859a7d95f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:b5:b6:b7:ec:cd:c1:f7:b8:6c:1f:b2:ea:
                    f7:ab:83:b7:f8:e0:47:bc:29:3a:6f:a4:b3:a6:89:
                    77:cd:8b:c3:91:cd:0d:c0:4a:d6:e5:4e:e5:fa:94:
                    d4:f3:cd:55:34:09:ae:ef:33:41:90:33:56:6a:ff:
                    b7:6c:7f:fd:55:fb:50:14:94:e7:70:c4:2c:cd:95:
                    5e:a8:b5:12:3a:50:f9:96:9b:8c:97:07:3b:ca:a2:
                    a9:ac:78:3c:9f:62:a8:7a:f7:aa:40:af:10:2f:a5:
                    7e:69:8a:a5:d8:43:5a:40:29:7e:26:28:32:40:56:
                    26:4c:bd:fd:35:27:7f:a2:59:50:28:a6:a6:83:5d:
                    73:d4:f1:7d:3a:0e:7b:97:71:4c:3b:a9:b7:76:09:
                    a1:00:c3:1c:c5:e0:dd:5a:e2:95:0b:36:6c:60:07:
                    ed:25:3b:d4:4a:8f:0f:e8:1e:ce:53:cd:83:b3:87:
                    29:cd:83:f1:87:a4:93:52:cd:74:bd:35:dd:d3:f4:
                    67:9d:8f:4f:2c:8d:f5:f1:dd:69:49:f9:7a:43:11:
                    12:eb:20:f0:3a:ac:0a:00:80:21:e3:92:a4:a2:c5:
                    e4:49:f1:00:32:ac:0c:81:f7:0e:0b:47:d5:1c:d8:
                    44:9c:70:59:19:5a:15:a5:b7:6e:37:8f:b0:d7:54:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3C:5C:E5:71:F2:4E:56:79:70:DE:C3:57:34:64:85:9A:7D:95:F7
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fe:97:87:d8:31:8e:db:37:b6:ad:05:10:3c:41:80:f6:1c:
         5e:51:f0:90:d8:46:7e:91:69:25:96:13:3c:8f:51:40:a8:ae:
         4c:71:55:7b:05:a7:13:9c:58:bf:1b:e9:38:af:fa:8c:ed:86:
         59:60:e6:1a:73:d9:01:64:2f:b1:1e:e3:c1:d5:55:87:d0:2d:
         62:56:3b:75:b3:49:7f:34:d2:57:72:54:a3:0e:e7:61:40:b5:
         d6:d9:79:d9:f5:6c:a6:17:3b:08:f4:14:12:54:c0:73:93:cc:
         6b:89:38:4a:ba:d3:a4:82:e0:63:8d:c2:49:8e:2c:39:d0:44:
         79:46:16:50:75:62:a6:39:2c:b8:f7:a1:c4:c3:52:0e:a8:d9:
         20:0d:b3:44:ec:db:60:c5:f9:8f:bd:8b:29:cc:37:1f:e9:21:
         76:b6:eb:c0:db:b4:16:ae:72:62:2f:f4:72:8c:f0:b3:4c:99:
         3f:0c:15:85:b5:97:89:37:3f:79:71:f5:73:1f:e2:d7:a3:14:
         71:43:48:16:60:8b:ce:72:16:e0:ad:6b:9e:50:08:ba:4f:21:
         d0:6d:c5:71:31:29:3b:56:b6:3d:44:a7:04:d2:88:60:ea:2c:
         d9:26:b8:ee:df:7d:af:ee:83:f4:de:4b:f5:47:a5:5b:dd:f5:
         1d:7d:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----