Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
File:                     1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json)
Hash identifier:          SzY7zymeGRx04R3R6sbSsRqOwIySrDUsfwCZaKk1+FE=
Subject key identifier:   C1:C3:D2:A8:5F:42:92:B8:72:1F:C3:3A:15:1E:F8:D2:2E:57:AA:0B
Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7
Certificate issuer:       /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
Certificate serial:       01962E989D4119AD215AA80143348E58A2BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
Manifest number:          09B4
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: bE7hNFzqevq8kR/zNZ3VN2pRMISzr83AubL0ERtDI5g=)
                          2: yhLkTBwFXW9MjzC359UU8CJ6Bcc.roa (hash: YsI+CGd1aoGxeJp5us7qb7YQNNKxFAd0kxBSQecushk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9d:41:19:ad:21:5a:a8:01:43:34:8e:58:a2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=c1c3d2a85f4292b8721fc33a151ef8d22e57aa0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:21:07:9d:67:41:fa:35:3d:a6:12:70:10:
                    ab:71:40:7c:32:a9:9a:d2:dd:5a:00:f8:96:10:89:
                    35:a9:f1:dc:66:43:e6:5d:34:4d:58:db:37:1c:88:
                    8e:84:8f:41:3b:b4:30:74:70:43:33:0b:59:48:24:
                    2a:80:7e:a2:04:e6:a5:d8:28:d5:40:bb:ca:95:e0:
                    29:d1:12:27:3c:a9:09:c3:05:25:07:06:db:cd:94:
                    52:f4:f2:33:6a:5c:67:2c:6a:e2:24:7c:d4:06:0d:
                    ce:e1:08:97:83:ec:a6:b5:b3:c3:20:56:fb:ef:b9:
                    30:39:e6:1f:cc:c4:7d:fb:a1:5c:f1:3c:23:d7:a4:
                    7d:ae:72:9f:3b:d3:9b:ef:3f:37:8d:f6:8e:43:bf:
                    2c:d7:58:60:b1:d2:ca:09:b4:28:30:8b:d5:d9:3f:
                    fc:2d:2d:3e:ff:2b:85:5a:51:6a:b3:b7:3e:62:f9:
                    f3:dd:ca:f6:fd:17:cf:2f:94:60:bd:fd:4f:03:94:
                    fb:50:f6:9f:71:15:ef:0e:5d:9a:2b:11:ad:ef:64:
                    21:22:22:5e:14:04:4d:09:c1:64:ee:41:e3:0e:60:
                    e9:2a:26:10:b9:f3:66:2e:67:f1:8b:38:86:78:da:
                    35:3f:a0:57:50:26:1b:39:f3:c5:9a:f4:86:7f:14:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:D2:A8:5F:42:92:B8:72:1F:C3:3A:15:1E:F8:D2:2E:57:AA:0B
            X509v3 Authority Key Identifier:
                keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:61:79:66:bd:47:a9:7d:b5:b5:5e:9d:ab:94:15:d3:f0:
         dc:ba:89:70:a3:06:dd:e1:46:b1:1d:20:f6:9a:d1:ed:73:26:
         70:52:09:cf:1e:70:f7:a2:8e:ba:27:51:9b:37:6b:34:48:4c:
         ac:7d:f7:73:a3:19:10:dd:8a:f3:8a:31:30:79:d4:c2:da:68:
         eb:c3:d5:e5:e8:74:c2:ab:b0:f4:af:61:2a:48:e4:e4:b9:d5:
         06:57:fb:fb:69:5a:38:c4:35:5e:a1:a2:c6:1e:da:10:8b:60:
         05:6b:df:f7:f3:2a:6e:92:dc:ab:17:3d:87:3d:80:b5:1c:2d:
         65:39:c0:4f:74:8f:53:de:b8:86:c1:af:cd:5b:67:6e:28:47:
         50:a4:e2:ca:88:6f:e1:de:cc:62:d6:9f:72:a8:94:47:17:40:
         6b:c5:fb:b1:3b:99:19:fc:87:47:c4:8b:8d:3d:80:cd:d3:d0:
         53:9a:a8:d9:75:aa:b6:db:ad:5c:52:ee:a5:a8:ae:b6:a7:09:
         cb:ee:77:30:11:88:86:16:56:4f:0d:bf:7a:23:76:76:52:43:
         35:10:ee:33:52:05:cb:ed:b7:37:85:97:03:af:cd:85:0d:a9:
         cd:76:49:23:10:21:bf:90:36:22:75:c8:70:fa:3f:b9:cd:7d:
         e0:dd:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----