Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File:                     mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier:          GBVaXoUcSo03gycPJPRONvki3bPag5yM3+1udw7Q1NQ=
Subject key identifier:   C4:87:6A:45:F8:F9:8D:C9:64:21:2A:BC:0B:B3:AB:98:A5:53:05:E1
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer:       /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial:       01962E2B11C16347B1875B7829415C031AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
                          2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: XOWHMkMC61eagwkdODXGbfZvL8TY1VzGFVOusMH4wEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:11:c1:63:47:b1:87:5b:78:29:41:5c:03:1a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=c4876a45f8f98dc964212abc0bb3ab98a55305e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:94:5b:f4:e5:e4:c8:0c:5b:ba:5e:2a:80:
                    f8:7f:70:b6:1c:fa:6c:e9:c3:19:0f:ca:db:d5:da:
                    eb:52:89:0d:4f:fa:e0:8f:3f:8f:85:ab:b3:8f:97:
                    81:96:a5:ca:fd:bd:2f:8b:87:86:d0:13:6e:36:f7:
                    3b:0d:e0:7c:d1:69:f7:88:27:08:47:db:a5:a6:07:
                    1a:03:1e:84:99:00:1a:52:39:26:d9:d8:62:62:bc:
                    52:5d:15:31:40:ce:73:d0:39:fc:0d:33:b6:9a:f4:
                    ac:77:bd:24:5b:74:4b:fc:6b:c3:38:59:ff:17:eb:
                    75:bd:53:e6:b4:d9:4a:51:1d:a7:4e:6e:67:b4:9a:
                    47:a7:49:81:4f:f2:d6:97:07:d4:97:af:f9:92:af:
                    e5:4e:35:44:26:16:56:89:60:a6:24:f2:73:9d:6d:
                    ba:5c:84:19:09:bd:71:f6:3b:f7:1d:27:cc:b1:0f:
                    85:2d:af:01:d9:96:53:5a:51:d8:97:c7:2c:2d:2e:
                    e3:0b:88:54:8f:51:58:a9:20:2f:0e:b4:6a:80:8f:
                    62:1e:21:6f:24:0a:ac:4c:eb:5b:a4:f7:34:cc:25:
                    87:63:9e:6b:d9:be:b1:b3:1e:e6:c8:a1:ae:6c:91:
                    c7:9b:43:d8:e5:3e:a1:2a:79:9a:71:bc:d7:8d:09:
                    7a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:6A:45:F8:F9:8D:C9:64:21:2A:BC:0B:B3:AB:98:A5:53:05:E1
            X509v3 Authority Key Identifier:
                keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f1:63:32:00:8d:81:5a:a0:1a:1e:86:ce:c2:36:c5:c9:77:
         6e:fe:31:c9:c8:c1:d5:01:55:d2:bb:ec:81:ff:0a:a3:e7:94:
         58:4d:2d:ea:62:d3:49:dc:c0:0d:b0:26:76:ce:2c:2c:28:e3:
         5c:4f:72:03:29:87:5c:b6:74:97:cc:b4:47:cd:7d:46:9a:43:
         a8:8a:3b:80:2a:20:58:bb:d4:aa:2e:28:2d:89:a8:66:20:91:
         1b:fe:4f:bf:37:89:1f:2f:db:75:70:f7:2e:7e:8b:ce:a3:b6:
         8a:e0:3c:b9:37:ae:4c:8e:1a:09:66:63:bb:32:4e:96:ee:76:
         74:f4:8c:7a:2c:2a:61:b2:14:39:2e:91:f4:c2:5a:7f:d1:62:
         34:f5:d3:cc:66:b2:ab:99:23:a5:b0:f2:2c:4d:b7:e4:32:ad:
         3d:b0:2a:b4:b6:d3:72:3e:de:1f:d6:d4:d6:19:2e:c7:79:73:
         11:5e:c0:a4:d2:3f:0c:a2:ab:c9:c7:fa:23:0a:8d:9f:2d:7f:
         ec:7d:9d:df:9c:72:0f:69:a8:5e:1e:dd:c7:44:25:ef:7f:f7:
         72:d4:85:90:32:da:df:9e:ad:15:6e:a1:31:08:c9:0a:7d:17:
         dd:6b:45:3d:9f:ac:aa:da:a1:5a:53:a2:46:67:d7:ef:5a:00:
         c3:e1:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----