Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          TPgqxhE885QNIBDaMCW67orwQRnoaqszbO3HbuK1uvk=
Subject key identifier:   08:B3:BE:38:63:6A:DE:6A:F6:6B:29:2B:A8:DC:33:E5:03:AA:90:5C
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       01962F3DE2E3254D62AC74DE673AAE89F0CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: F3mmIE5e5Y4BeSDKQ3DR2L-rAk8.roa (hash: jbee28DZuoinhmMa1MpH2LACZ/XrJT7Z3vVmbAZdw7Q=)
                          2: Mk3OCH61bD3mOm8DSaSiAzwW7fk.roa (hash: oxlH7V9EjPMbmvgDLqeKQJs9KOwBY0gM7ZfOAxvET+w=)
                          3: dRiT-c0xAt2kngbyOhm_uFIV1zw.roa (hash: Wglqc09L4EahGS8AZXe98XrHNBuQBQLDeHD0KWaBnTQ=)
                          4: fV9G8OutvawEP_xsKieVXci-tIE.roa (hash: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=)
                          5: jx4NNkHPAbONhfyLhU8TOxw7M1s.roa (hash: g2tq87dmJIfsiGuaezvjDvuxwyvPju47/Uw+kKdECC0=)
                          6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: 3HXUFClEfXzkSyxHN3uUWSEK6jOTaosq1giahQFYVRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e2:e3:25:4d:62:ac:74:de:67:3a:ae:89:f0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=08b3be38636ade6af66b292ba8dc33e503aa905c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:f5:b7:68:a1:34:1c:39:20:a9:78:67:20:
                    da:24:6f:93:ec:2e:01:e7:c8:3b:24:63:48:41:90:
                    b8:76:43:c9:e9:d0:e5:47:f0:57:fb:84:af:fa:46:
                    5d:87:2b:5f:38:b7:d1:29:a8:1a:da:76:b2:07:9e:
                    88:57:d3:70:fc:6f:53:09:db:85:da:93:b8:6c:ff:
                    b2:99:49:ba:10:8e:4e:74:94:46:d5:dc:8f:71:78:
                    06:fd:5d:b1:dc:09:f1:ac:41:ac:58:40:06:b9:e5:
                    3a:8f:6f:bd:6a:35:30:30:f5:53:71:d7:d7:1b:38:
                    a7:ae:ff:a3:69:11:30:35:1d:3d:35:ee:3e:ad:64:
                    d7:0d:79:51:1c:5c:be:55:e4:e8:fc:d9:f1:10:99:
                    63:1b:d0:dc:51:e9:ba:6c:67:a7:66:4a:00:5a:d7:
                    ba:5a:de:c2:0d:ac:32:f6:c6:63:74:9d:fb:a3:b5:
                    37:03:07:79:90:95:f1:84:ce:18:99:23:2c:cf:d1:
                    6a:e4:64:d4:5b:5f:bc:eb:6b:95:cd:ca:93:24:19:
                    f3:12:f6:7a:a5:7d:86:7a:ed:8c:61:1a:49:ba:ef:
                    45:4b:81:b7:76:d4:24:d4:3a:97:c3:9c:c7:96:1c:
                    aa:b6:e5:e0:b3:ec:7c:12:b3:7c:40:3b:d1:c3:10:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B3:BE:38:63:6A:DE:6A:F6:6B:29:2B:A8:DC:33:E5:03:AA:90:5C
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:db:19:fa:d5:73:5e:d0:d7:9f:be:9c:c5:69:bb:df:14:0d:
         e4:23:f4:b1:8e:4f:01:e8:97:65:24:71:33:92:88:94:13:74:
         46:17:24:f0:c1:e9:7d:a5:b3:eb:08:36:8e:f3:b1:b7:bd:e2:
         fc:2d:c7:5d:0c:ae:25:b7:2f:62:c8:55:60:90:b4:1f:3b:3b:
         e3:74:3c:46:92:10:6f:8c:59:c1:ad:c0:e1:97:20:4a:97:cd:
         d7:79:0d:38:cb:42:d7:a3:b4:51:ad:0f:21:5f:ba:e3:e5:7d:
         5b:9c:94:fd:c9:af:51:9e:aa:07:1e:9b:61:51:42:99:27:81:
         e1:2a:04:f8:d6:87:e4:2a:8c:a4:5d:71:36:61:bd:07:8b:cb:
         36:74:6e:22:03:f0:35:0f:fb:19:9c:5a:a8:4a:c2:a8:09:b6:
         37:d2:10:90:4a:f4:b1:28:ab:f9:4a:82:61:c6:16:7b:59:8a:
         ec:23:19:a0:d0:d9:6f:31:97:9c:f8:8e:25:67:6b:fe:bd:1b:
         04:67:a6:aa:a8:6e:e2:34:25:b6:6f:27:46:e9:12:14:ea:88:
         bb:3c:dc:e4:ff:38:13:d6:f5:ef:a6:e6:83:ba:db:7d:a8:01:
         ef:cb:77:ca:cb:b5:43:93:ba:0e:e5:3d:d2:93:2a:0e:97:d4:
         8a:83:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----