Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File:                     MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier:          iWlGLMtjMZ6AUBdJSrWLN309P27c7pVkwLg+Fnaw0F4=
Subject key identifier:   13:2F:2F:A7:32:16:A6:E1:13:08:48:16:D6:6B:DF:69:2B:45:93:3C
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer:       /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial:       01962E61D66020772D87DC5F7C5A5892CB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: nbJSL9NXMDL1eK657dpksF6zMImKeb1/srRQQt4B4sk=)
                          2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
                          3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:60:20:77:2d:87:dc:5f:7c:5a:58:92:cb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=132f2fa73216a6e113084816d66bdf692b45933c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:51:c4:2b:dd:86:2a:45:f2:4f:a7:00:d5:
                    5b:b0:7a:52:7c:32:06:e7:ee:f7:76:af:98:7d:8e:
                    9f:74:ce:72:d2:13:09:05:01:45:71:7d:67:c1:7d:
                    e1:4f:85:0c:71:b8:a5:b7:78:e9:76:7e:72:c1:d2:
                    02:af:1a:bf:fa:27:72:de:f3:36:b2:f4:6b:03:1b:
                    74:1e:1b:2a:d3:d5:dc:24:a2:75:3f:79:e4:5d:7f:
                    bf:85:0b:f4:f4:da:0c:83:03:70:19:d9:ac:26:22:
                    b9:84:85:16:d5:aa:4e:6d:69:fe:62:62:f3:d9:62:
                    ec:1e:c9:5c:78:0f:17:54:3e:fd:23:f5:fa:9f:1b:
                    22:57:cc:57:f0:f8:f5:0b:61:30:a9:c8:03:a0:53:
                    de:eb:56:46:a5:e6:d4:8d:61:9f:29:99:a6:ee:f7:
                    39:6b:11:04:d0:d7:61:56:ba:26:46:75:6e:6b:9c:
                    2f:c1:f9:0a:6d:28:02:b8:9b:17:ef:8c:0b:e1:17:
                    fc:a7:76:a8:a3:6d:7b:b9:ad:a6:a2:6c:07:ab:15:
                    7b:35:46:be:5e:3e:0e:2d:08:c3:32:12:c5:2d:44:
                    a7:3d:3c:65:3c:5a:0e:56:6d:ad:de:68:3f:96:63:
                    fc:8b:87:01:15:57:af:50:2c:e6:78:51:4e:3b:9a:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:2F:A7:32:16:A6:E1:13:08:48:16:D6:6B:DF:69:2B:45:93:3C
            X509v3 Authority Key Identifier:
                keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:08:ff:df:2d:0b:de:e7:40:86:67:b3:76:88:9a:db:67:
         e9:85:af:8f:01:64:3b:bd:c2:02:98:94:4a:1c:d2:9c:85:6b:
         e7:ca:ec:77:07:a6:b7:09:a4:bf:1d:81:73:b8:2d:0f:63:68:
         8b:e8:c0:eb:bc:eb:50:f3:85:65:de:63:68:3b:10:8c:06:2e:
         41:93:6f:4e:10:03:76:b6:79:87:2a:22:e9:81:dc:b3:dc:71:
         81:b1:16:1a:a7:3e:2a:06:77:3a:a5:b1:07:b0:de:58:9e:18:
         cb:1e:0c:71:ef:6f:7d:f2:01:7a:76:42:f9:f6:2c:44:e0:a2:
         dc:de:9c:93:7d:7e:5f:d8:a2:f1:e7:70:e3:11:60:98:f4:56:
         61:57:0c:ec:de:92:a5:88:c0:50:93:0f:b5:c9:f4:36:fc:c5:
         6c:a7:a1:9a:42:86:59:14:af:2c:24:16:a4:c6:aa:78:25:86:
         a4:e9:51:10:55:ec:be:b1:e2:41:60:2e:8d:e7:f6:cd:96:74:
         e6:2c:fc:f0:8f:72:49:3e:29:9c:9e:7c:94:c0:56:39:77:5c:
         5d:94:d2:17:9a:89:03:07:01:0e:95:79:46:fa:5d:92:bf:92:
         22:98:37:32:5d:53:3f:c4:62:4d:c7:20:1d:45:0b:ef:ef:14:
         f1:52:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----