Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File:                     adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier:          dZzFsQlDbQy9wmZv0h2iIuNHiKkp5MiCjYft3Aucc/o=
Subject key identifier:   40:24:39:3D:26:79:6A:04:25:D9:8F:79:48:68:13:BC:F5:54:3B:1A
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer:       /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial:       01962ECFC987C86CF1322AF5D090F98130BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number:          0E29
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
                          2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: paFd3GUv/6UsG6oAp2XquxhPuitWdZMG6atsuog81xQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c9:87:c8:6c:f1:32:2a:f5:d0:90:f9:81:30:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=4024393d26796a0425d98f79486813bcf5543b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:f7:91:27:b5:aa:c8:88:2d:6c:09:bb:72:
                    bd:14:b9:8b:46:4f:b4:98:dc:63:5e:99:bf:09:a3:
                    8b:7c:c1:ce:fa:98:89:fe:e3:5d:6d:25:29:43:00:
                    6f:58:64:22:42:a0:d5:51:5b:d6:9f:98:e6:e1:85:
                    6d:df:74:0d:68:c6:4a:fd:9e:e0:0a:88:18:3f:68:
                    36:c1:e7:31:53:06:87:4f:92:72:ab:a9:c5:0f:29:
                    5d:8a:a9:a2:5a:73:ee:37:68:fc:6d:8e:f8:a1:e3:
                    10:20:58:20:03:c4:82:1d:d5:ad:fa:eb:eb:3d:ca:
                    2b:1f:99:ac:04:3e:c8:30:c5:c4:ab:b8:44:ed:34:
                    09:7d:ed:f7:aa:93:7a:ef:6f:87:78:37:55:16:c1:
                    99:2b:21:05:7b:5d:e4:bd:f6:4f:b7:c5:ee:bc:cf:
                    75:b8:89:4a:9b:48:bf:a5:e4:44:fd:ad:b7:ea:12:
                    aa:8a:14:18:15:81:1e:93:8a:62:3e:32:c9:9c:0a:
                    74:43:e0:15:da:cb:38:50:a0:40:a4:1d:2c:bc:9c:
                    22:91:56:31:0f:a5:ae:b8:ca:4d:30:40:43:da:0d:
                    13:1a:6d:8e:d2:28:76:9f:64:d1:7a:6a:bd:ac:4c:
                    35:ef:c8:9f:7e:dc:16:c7:a2:26:9e:76:fa:be:c9:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:39:3D:26:79:6A:04:25:D9:8F:79:48:68:13:BC:F5:54:3B:1A
            X509v3 Authority Key Identifier:
                keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:8a:cd:56:a0:67:d4:ba:53:bb:20:82:08:88:d2:b4:c5:
         a9:a4:8f:df:87:bb:3d:29:c0:36:13:73:ae:fa:56:1f:43:86:
         69:fa:b8:2c:f0:e4:36:91:80:90:98:fe:49:06:70:ae:b6:7b:
         a3:a9:48:a1:33:3c:44:98:11:7d:95:ab:8f:78:93:57:44:8e:
         c2:a1:df:f9:b4:96:86:20:2c:87:3a:c5:e7:fa:f9:bb:ff:f6:
         79:b7:68:25:7d:ed:b2:30:d7:01:6f:af:ab:36:db:3d:a7:b5:
         3d:e0:1e:52:01:f1:94:62:6e:56:e3:ab:9a:a0:16:00:8e:77:
         f9:eb:a5:5d:bc:90:3b:36:f5:95:cb:84:ad:12:82:09:20:bd:
         2e:78:be:37:64:4b:4d:3a:a0:f2:fe:41:0e:44:f3:a3:0a:92:
         be:cd:e0:99:32:b1:e2:85:e9:a3:24:15:57:2f:30:70:de:a1:
         63:56:d7:29:7e:b3:0b:3a:5c:fe:9e:b8:21:19:f0:0d:94:b2:
         3c:a4:57:91:80:f1:e5:0a:7b:02:39:db:6d:be:bd:27:55:fd:
         c9:19:46:4b:3a:06:d9:52:aa:50:07:45:f3:34:78:ad:40:2a:
         ea:51:5d:a4:41:9e:8e:ca:58:83:8c:a7:6d:29:b4:4c:87:c5:
         76:26:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----