Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File:                     1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier:          kMsrA7RP18jJ5a8YuX35TWQY16664oXuvVUGeuNorGE=
Subject key identifier:   26:1E:4C:EB:2D:5D:62:EF:C7:17:6A:83:5A:D9:D5:D8:5C:FF:0D:14
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer:       /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial:       01962F74E1F9D0C8EA3B8A2CC29D042AD691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: SisyNwExQwd6u7gm/mRybPfCLOvBwpIUtXw7LHrP5wY=)
                          2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:f9:d0:c8:ea:3b:8a:2c:c2:9d:04:2a:d6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=261e4ceb2d5d62efc7176a835ad9d5d85cff0d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:3a:5d:2d:66:cd:bc:3e:47:f0:9d:62:11:
                    b1:d4:16:d6:c7:d1:93:5a:9e:8f:b6:93:11:be:02:
                    49:61:6d:78:dc:6d:9d:fc:42:88:f5:73:d8:9a:fb:
                    7d:bd:42:35:5d:d0:64:d8:0f:c4:ab:31:e5:28:8c:
                    45:26:17:3c:82:a0:44:1a:89:59:5a:63:f1:13:6f:
                    60:01:31:fc:ba:f5:e2:57:92:07:46:43:e2:9a:d4:
                    fb:aa:f3:22:6b:3c:80:0c:8e:2b:d6:9c:1b:03:25:
                    a0:8b:2c:8c:17:2c:cf:d6:6e:6f:32:8f:bb:75:93:
                    66:a0:f0:ed:14:52:10:ba:c1:9f:dc:bc:e4:9a:ea:
                    b3:e6:96:bb:cc:24:bd:5a:f3:4e:b9:52:e5:51:81:
                    b1:2a:df:21:a7:bc:65:c4:26:73:ff:8d:6d:04:d0:
                    7e:49:60:0d:42:3b:fb:4f:64:d4:c9:d9:b6:85:77:
                    30:76:cb:8d:aa:36:1a:cf:4d:a9:e4:f7:15:3c:e5:
                    31:59:6b:62:a2:32:55:c7:56:66:61:59:26:9e:91:
                    0a:03:0f:e2:53:5f:4a:02:fc:2a:29:42:85:c6:4e:
                    01:ee:d5:a3:cb:98:6c:98:99:67:4a:e8:39:8b:3a:
                    04:ba:76:85:d7:f3:42:7c:35:b7:59:1a:4c:61:a7:
                    05:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1E:4C:EB:2D:5D:62:EF:C7:17:6A:83:5A:D9:D5:D8:5C:FF:0D:14
            X509v3 Authority Key Identifier:
                keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:86:f7:8d:62:c9:64:f0:09:cd:9c:6c:2d:91:7b:d0:65:d8:
         e4:d8:5e:2a:98:48:24:00:04:06:33:90:b9:0f:5b:aa:7d:79:
         a2:ca:85:69:e0:7d:c3:52:8c:34:16:88:56:e8:ea:7c:8a:fb:
         e8:e0:cf:8d:c0:f6:2a:27:a3:b6:98:30:7e:3c:9d:9a:f5:c4:
         65:74:d0:24:5a:8f:d6:76:64:11:f3:a3:dd:c5:22:f2:09:eb:
         78:c4:94:e9:d5:48:75:f0:9a:24:ae:12:3a:91:b1:0d:cc:5f:
         e9:19:26:df:de:d4:35:e9:8a:77:f3:4e:08:19:85:0a:30:f4:
         0e:c6:36:3d:8f:26:09:a4:20:f5:dd:b5:07:33:dc:f9:b1:d8:
         7d:e0:fa:a0:83:8b:08:2a:ce:1a:2e:63:c2:2a:92:c2:91:a3:
         8c:16:e4:82:51:49:17:62:a6:cf:a5:87:8d:0e:b5:d2:2e:ae:
         ac:a7:74:c7:7e:15:c4:b7:89:ea:68:9d:1e:b7:ee:da:a9:12:
         0e:8b:62:6b:fa:39:53:fc:84:5b:87:b1:64:6f:07:19:ae:7d:
         28:86:4c:b4:73:43:0b:96:6b:eb:2f:10:7b:df:ae:55:72:80:
         32:ea:c9:44:b2:8f:6c:ff:d3:86:7f:7e:bd:93:ca:37:e6:a4:
         64:1e:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----