Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File:                     pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier:          mQknx6tnbPnFsM5JbHOhPsnIWl0WhtlOBMq5qWweECk=
Subject key identifier:   14:39:05:90:ED:60:39:88:3A:13:24:62:79:F1:FA:11:4F:4A:24:E6
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer:       /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial:       01962F74186873872B9A3BE9A735A9382E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number:          0BC1
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
                          2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: wJlnUm9vQA/y4pm6qMuTemZjlT/kCMBNpwp/dkOm4d8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:18:68:73:87:2b:9a:3b:e9:a7:35:a9:38:2e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=14390590ed6039883a13246279f1fa114f4a24e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:f6:50:72:a9:bb:c4:5b:9a:47:46:8f:ed:
                    16:95:4e:3e:1a:7c:91:4a:45:b8:bf:66:b5:e9:96:
                    9d:a6:c4:07:d9:33:ab:3b:eb:b3:84:c1:6c:0b:d5:
                    16:99:8e:cc:b4:db:ea:c2:66:39:64:15:ea:fb:3f:
                    c7:be:ba:d8:60:85:7f:fe:22:80:04:16:54:76:db:
                    d3:18:3c:bb:34:6a:49:ec:67:d8:b6:76:58:56:cd:
                    f0:b2:f8:8c:b0:61:0b:ee:79:3a:24:19:03:1b:a0:
                    fe:4d:07:b9:ee:ae:f0:7f:37:93:2a:e2:5b:df:87:
                    67:6e:55:30:fd:a1:3c:28:44:88:1e:fb:0f:9e:1d:
                    71:78:bb:96:2e:a8:7d:e4:da:7e:42:3a:f7:7e:08:
                    55:7d:34:94:4f:71:ee:6e:b7:d3:4f:4e:93:f3:ab:
                    89:c5:43:1e:2b:00:92:1a:d3:db:bd:24:27:db:5c:
                    79:00:07:8a:cf:d2:6d:e9:f2:c5:ec:b9:c3:37:86:
                    73:04:49:74:45:59:d3:e5:8c:5e:65:32:82:1d:d4:
                    0d:ed:1f:e6:7f:73:8f:60:91:74:31:5e:87:73:98:
                    32:b0:c3:98:f2:b8:8d:ee:65:1d:57:15:6a:0d:ed:
                    dc:03:5d:04:4f:34:ea:a6:4a:f0:f9:df:0a:a8:ef:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:39:05:90:ED:60:39:88:3A:13:24:62:79:F1:FA:11:4F:4A:24:E6
            X509v3 Authority Key Identifier:
                keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:98:01:f9:e4:58:d1:fe:76:9c:80:8d:10:39:93:ef:8e:
         a8:7d:20:37:c9:4a:a6:a5:02:5b:40:61:a3:c4:70:c1:70:e8:
         3c:57:04:04:d7:c4:61:fe:c0:02:1a:5b:3f:6e:70:dc:34:85:
         b8:0d:45:37:a5:79:fa:d6:24:4c:91:98:f4:d5:3a:4d:12:5a:
         9d:86:c0:a1:fd:65:fe:e1:8b:de:0c:64:23:cf:f1:ac:39:be:
         de:d3:55:59:9c:cb:28:7d:ef:8a:6d:29:f9:c6:56:5d:3d:86:
         7b:a8:32:cd:7e:19:58:4b:07:3e:48:5c:b4:c6:60:bf:0f:57:
         0e:a0:9e:3a:57:13:f2:ad:e0:3f:29:05:c7:ff:7b:be:3c:c0:
         a4:ff:fb:d1:28:38:b3:1a:1a:c2:8b:b9:c8:1b:db:e1:4c:b0:
         dc:87:aa:99:f4:88:e9:83:a7:90:67:6d:d6:5c:83:70:df:ca:
         81:56:b2:b4:58:9f:8c:a1:7d:04:77:c1:03:c3:a7:df:57:fb:
         8a:f7:85:04:d7:9a:20:0a:e7:af:01:32:a0:cf:3b:d4:a6:53:
         95:64:f0:da:82:f9:3c:47:2b:bc:79:5a:e2:28:02:d2:a0:eb:
         d7:24:a0:18:56:87:17:b5:0b:cf:95:25:1c:2b:d7:d0:c3:3f:
         db:64:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----