Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File:                     CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier:          kWpHHle4l8x6qi5QO69B/EbI/6cYuRQDcTeJIxJloYE=
Subject key identifier:   20:9E:52:13:C5:16:C2:65:04:9A:5C:F3:78:C1:9C:EA:AD:61:F7:D6
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer:       /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial:       01962E6189A64A7A057F9238FE38815ADA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
                          2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: m0dMhuTph5WBc0QH4/sCiwh04syl0VV7tjYOO39Hris=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:a6:4a:7a:05:7f:92:38:fe:38:81:5a:da:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=209e5213c516c265049a5cf378c19ceaad61f7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:a2:41:30:6c:68:94:1c:ef:4a:04:d2:a2:
                    8d:00:37:34:34:29:35:a1:a3:99:3e:a8:9a:81:5f:
                    9c:44:ba:8e:fd:87:2f:b9:12:4e:21:7a:97:f2:5f:
                    da:6b:6b:9d:2f:08:a7:ca:17:46:bd:c5:e2:27:7f:
                    13:04:2a:94:59:d1:cd:0d:bd:38:c5:13:e5:86:20:
                    46:cd:7d:54:53:67:df:c5:4b:a8:9a:7e:a9:6c:20:
                    cc:27:9f:8c:df:b3:62:38:15:14:a8:3f:1b:c7:f8:
                    79:45:4e:d2:79:7e:34:ef:f6:45:a5:20:99:1d:5d:
                    0a:a4:65:c3:8a:de:0d:62:11:13:93:f3:75:f3:20:
                    a1:a6:4d:e0:f5:1b:03:a6:ca:e5:f1:44:48:4a:9c:
                    64:bb:03:da:d5:a3:e8:ae:ec:c7:3a:76:6d:0b:1a:
                    10:f9:48:2d:bc:ce:fe:5f:90:7e:bd:d3:16:04:5a:
                    a6:0a:ce:f6:16:de:a2:2d:26:c9:5c:a2:f0:e2:48:
                    8d:ad:10:e5:88:39:a0:96:87:79:40:f4:12:16:ea:
                    53:65:96:8f:23:f5:bf:c0:7b:a0:73:81:09:f2:7d:
                    c1:8a:53:9e:94:0f:e5:76:7b:43:e4:79:f1:36:e1:
                    de:89:0c:8b:b7:7d:fc:66:fb:a4:00:5f:75:b5:14:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9E:52:13:C5:16:C2:65:04:9A:5C:F3:78:C1:9C:EA:AD:61:F7:D6
            X509v3 Authority Key Identifier:
                keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:89:1e:da:d8:81:74:3a:d6:08:d9:cb:35:51:53:eb:56:63:
         67:96:c2:5e:14:3d:65:8a:d2:68:10:1d:42:c9:db:0c:b6:2d:
         55:65:76:44:ba:c8:83:79:7f:34:0a:ac:d7:7a:c2:e7:7b:f3:
         4d:93:10:67:04:8f:59:78:b2:1a:87:89:30:2e:ce:c5:b3:c0:
         da:23:e2:6c:bf:d5:c9:8a:ce:0f:ba:52:35:c3:7b:31:b0:42:
         b3:0f:ff:9e:be:83:95:66:1b:0a:96:f8:04:e1:58:f4:19:3e:
         86:e7:38:a0:25:b3:b5:bc:0d:75:fc:77:4c:4d:1a:84:cf:2b:
         a2:40:f9:35:d7:f3:a8:90:fd:56:29:6e:a0:fd:b1:fe:f3:1e:
         de:c4:ce:c2:08:74:4b:6e:05:66:58:1d:68:a8:ba:8b:91:1a:
         41:52:5a:52:78:4a:41:15:72:cf:cd:09:74:04:81:de:01:e8:
         98:2c:6b:7f:b4:75:44:e6:cb:4d:d6:70:3b:0c:49:f4:7f:35:
         80:8c:db:27:13:d3:03:5b:4f:da:9a:78:ed:d1:57:46:f1:97:
         bc:80:76:99:2d:f2:4c:d2:7d:74:4f:6c:49:a0:3a:12:ac:0d:
         a1:14:f9:4b:a2:93:f6:55:1f:5b:ab:ec:d8:ac:13:6d:02:8d:
         92:8a:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----