Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          NEF24IxTGiQFPENXP8x0xAPXcik90hPBxCpSewJ+TtU=
Subject key identifier:   5A:A3:A7:2F:27:D5:C0:2F:7F:EF:83:22:CC:13:66:D6:F3:8D:F5:53
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       01962DF3CA55F737F4127AB6B62A5AD5D514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: JRBKUkHNExSMD01tCxoDl56hjlfsgwXrTfFKut+6GIo=)
                          2: duO9LxBTkVs9bWkFXNzc7GNBnLM.roa (hash: qNyvixX6BJstTr21KHWMkBm39t0mtYSLiR/YYgK3594=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ca:55:f7:37:f4:12:7a:b6:b6:2a:5a:d5:d5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=5aa3a72f27d5c02f7fef8322cc1366d6f38df553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3b:fe:77:85:53:3a:96:c7:17:61:94:2d:9d:
                    8b:53:06:95:fb:cb:b3:89:1c:7e:ef:fa:7b:1c:c7:
                    21:35:f0:06:fc:72:c5:41:3c:24:35:33:ec:08:56:
                    cb:5b:a2:6d:0f:59:b8:02:c5:8d:56:cf:6d:88:8c:
                    b3:a0:c4:79:6d:e0:81:fd:6a:ea:27:9c:2e:01:9e:
                    29:08:25:bb:40:db:19:6e:d8:15:c0:3e:8c:73:5c:
                    d6:63:6f:d5:04:2b:34:17:19:c3:26:31:59:0d:f1:
                    48:8a:70:72:04:a7:2f:3c:24:fa:87:70:9c:2d:32:
                    62:a5:2c:4c:34:17:77:6d:4a:26:87:28:8c:b6:46:
                    5b:67:5a:d9:42:60:d0:ee:f1:8a:02:7c:43:6c:07:
                    2e:06:e9:6f:8d:b9:3e:94:f0:4c:cd:43:f2:87:c6:
                    2f:f0:dc:57:21:57:1e:df:0a:d3:63:c3:f1:81:1d:
                    b6:75:42:df:14:1e:b6:34:f4:7c:64:50:a8:6c:31:
                    78:0f:a0:da:c0:3a:e8:ac:31:db:dc:dc:75:6e:c3:
                    60:f2:f7:bb:f5:f1:0d:60:a5:7b:d1:cd:3e:70:33:
                    bb:bc:41:88:45:fa:f5:dd:3e:fd:bc:69:0b:c3:fc:
                    08:ac:bd:1e:7c:1b:d5:cf:0d:63:74:9f:91:04:dd:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A3:A7:2F:27:D5:C0:2F:7F:EF:83:22:CC:13:66:D6:F3:8D:F5:53
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1b:6c:00:26:41:c9:34:1c:33:31:95:86:54:13:e6:93:a3:
         98:3e:43:ef:1d:c2:34:6a:76:8a:93:0e:26:d6:25:32:b9:f8:
         76:34:66:79:9b:65:45:6f:85:6b:b0:0e:bd:9e:5e:ae:cc:33:
         5f:66:b1:9e:d0:eb:86:47:76:30:6d:12:05:c9:e4:ec:c1:08:
         74:bc:c9:a7:5f:4b:76:b7:92:be:92:48:c4:92:dc:45:c4:68:
         f3:b6:89:9c:f8:f6:01:43:95:92:cd:a8:a0:e8:cf:65:0b:bc:
         b7:34:76:90:82:2d:5c:f0:29:bd:bb:01:b5:d5:67:c8:79:29:
         08:82:7f:f5:17:ae:7b:3a:ae:7a:f8:07:66:11:36:28:75:ab:
         87:22:91:59:a1:3a:7b:59:69:be:6c:10:68:93:ef:66:bf:49:
         f6:07:77:7d:8f:7c:37:04:bd:c2:64:7a:91:e1:b0:8e:c5:60:
         c9:53:32:a9:88:80:7a:fe:34:e7:c2:df:25:f1:df:9f:0d:1c:
         0e:7c:29:d5:9d:e5:c5:61:e0:4a:8b:7d:65:21:e1:92:eb:bf:
         2e:8f:33:cc:e2:5c:20:d0:2f:fb:a7:29:e8:d5:27:ca:4c:06:
         53:a2:70:e8:7b:3a:f7:29:d3:b7:19:fc:b1:eb:f7:08:bf:d3:
         13:42:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----