Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File:                     invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier:          pDKdc6G8H7makDO3lqiTj2T6bKL1uNkvWu2ha3/enzM=
Subject key identifier:   1A:D5:35:EA:B0:3C:6D:B3:39:03:71:3D:3E:6B:51:E2:EA:6A:DD:2E
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer:       /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial:       01962E98989CACA28591A71B9BE7F8D28DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number:          027B
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
                          2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: qWhcFmZu/1ydsCvtIxvUzMrSb+1j8pXScMMphJlggBU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:98:9c:ac:a2:85:91:a7:1b:9b:e7:f8:d2:8d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=1ad535eab03c6db33903713d3e6b51e2ea6add2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:14:7e:59:92:62:48:4d:52:2b:c0:59:ac:
                    64:c3:a3:99:18:2d:f0:bb:4f:2a:7c:7c:c5:b3:50:
                    3d:04:be:a5:b4:54:47:29:5a:b1:af:af:3a:79:69:
                    c7:f6:56:fb:d5:0c:73:3e:f0:cd:6b:1e:52:30:21:
                    44:94:d7:97:a9:3f:29:dd:34:6d:e4:ec:76:55:57:
                    5f:bf:5b:d4:c6:09:54:4a:34:40:e3:77:54:76:e1:
                    fb:f5:12:c4:bd:8d:66:53:73:62:ea:f2:6e:cc:47:
                    60:6c:f9:df:16:2e:f2:15:42:49:17:68:63:ee:ba:
                    19:23:e5:0c:69:92:3e:d3:b9:4d:f4:c9:fa:b3:7f:
                    89:50:61:02:e7:6e:4a:06:70:89:32:fa:52:f8:51:
                    3b:fe:a4:ab:15:f8:54:df:31:a1:88:a1:39:72:93:
                    d6:d1:69:07:75:23:66:36:8b:b3:05:f4:9d:15:3c:
                    42:20:d4:7e:e2:c7:bb:90:7d:ef:2f:83:c9:ee:11:
                    b8:65:24:d6:c9:0f:e3:0f:ca:42:47:d9:ff:7e:f7:
                    85:38:24:33:2a:62:3d:a2:d8:9b:8a:74:2c:69:80:
                    9a:3f:69:33:7e:38:49:b6:6d:7a:de:b7:4e:4c:04:
                    b8:a9:45:49:a0:8f:84:ad:ec:18:22:c7:e2:cc:e2:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D5:35:EA:B0:3C:6D:B3:39:03:71:3D:3E:6B:51:E2:EA:6A:DD:2E
            X509v3 Authority Key Identifier:
                keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c6:8c:88:49:0e:8b:c9:97:a9:2c:9c:aa:9c:ef:f0:c4:8e:
         04:34:a2:99:06:fb:1b:90:68:21:fb:24:d9:91:79:f9:66:e5:
         e6:99:04:c1:90:aa:19:43:30:b1:e1:6a:e8:23:16:a1:8d:d6:
         d5:9d:32:9f:2e:87:ea:d5:91:5d:bf:4d:44:c4:cc:20:35:1d:
         7d:cd:6d:da:bc:5c:83:c3:33:68:63:6b:44:77:16:71:eb:d7:
         c4:c0:57:ca:2a:57:42:ff:5a:a3:86:72:3c:79:36:55:78:f1:
         8c:20:6e:47:09:ee:b7:25:5a:01:32:49:c8:10:a3:85:cb:12:
         3b:29:7d:d1:66:ea:4e:61:0e:2b:c9:d0:73:d2:15:8d:21:81:
         d7:88:33:8d:bc:16:5b:33:a4:69:38:25:8c:3e:3d:66:51:2c:
         a2:9c:d5:dc:16:da:ec:2e:f9:e4:eb:c8:5f:70:b4:7d:ed:0e:
         27:19:19:b9:3f:7f:03:82:7d:2b:a2:96:98:8e:a3:24:63:9d:
         5d:f0:4d:29:27:f2:7d:a1:51:75:73:f0:48:31:11:4d:f1:c3:
         37:37:17:3b:cd:5f:d1:43:7e:c6:68:7e:0e:36:11:f3:93:9c:
         a4:17:23:5d:6a:cf:76:de:ed:a3:f2:81:e8:c4:60:fe:7f:e2:
         6c:b3:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----