Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File:                     rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier:          Vp99uz9NzGKgJD9OXhoRXEyzXT+glinRLZVyePYW1d4=
Subject key identifier:   14:05:95:72:23:A8:A2:0D:94:20:EB:89:37:0C:03:84:D7:13:89:2B
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer:       /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial:       01962F06B9DF5B080143356694EF0F1CB36B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number:          1164
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
                          2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: ClNjvmWqCz34jxQ6lY37AitQtAlnjhusYG9rWAyzSMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b9:df:5b:08:01:43:35:66:94:ef:0f:1c:b3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=1405957223a8a20d9420eb89370c0384d713892b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:38:37:ac:05:95:6f:01:b8:ae:c0:f6:51:
                    6e:c4:a0:d2:65:2d:e5:60:8d:c1:ca:b8:99:31:27:
                    1e:b2:b1:97:ce:b8:ee:a6:69:88:3f:d1:7d:9e:69:
                    ef:fa:d2:2a:72:f7:4a:22:e8:c4:c8:cf:47:a5:cf:
                    db:e9:81:76:a4:13:79:9c:2d:01:dd:71:ec:9a:4f:
                    4d:ee:f9:f9:3c:fc:b8:b9:a4:15:a3:80:04:cb:dd:
                    af:4a:d5:4d:7d:15:df:da:c5:b1:90:29:81:8d:d1:
                    26:71:28:97:e8:e9:f2:39:5e:7a:fe:50:8a:e7:4d:
                    b4:01:31:3b:7f:b6:ac:d9:eb:0f:0c:f3:a1:81:2e:
                    ef:a1:2b:67:da:da:10:66:1f:85:96:9d:0d:32:fd:
                    e2:69:30:9a:fb:96:df:c1:6c:7e:9e:f6:ab:93:ef:
                    99:a6:a9:22:db:fc:0d:56:99:ef:17:f4:6c:92:76:
                    63:0e:21:9b:3f:7f:d4:f9:ef:24:59:45:f1:d6:a6:
                    d5:d9:bc:49:6c:bd:9d:a8:88:07:8e:86:b3:8f:7b:
                    5c:1a:a4:96:22:3a:b8:2e:fa:32:d0:8e:90:45:72:
                    0c:5e:e9:ff:43:cb:51:28:74:27:05:9b:ee:ec:03:
                    18:d8:e2:0f:30:7f:ff:01:45:ab:d2:ea:36:ed:0b:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:05:95:72:23:A8:A2:0D:94:20:EB:89:37:0C:03:84:D7:13:89:2B
            X509v3 Authority Key Identifier:
                keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:5d:c4:cc:d7:f9:68:46:de:4b:e6:7e:a5:2a:b6:f9:16:
         61:78:0f:a9:c5:92:93:56:2b:38:a2:f1:ed:76:6c:7f:5e:9b:
         c0:82:6b:a5:ea:81:f8:1c:c0:1d:0b:fb:dd:3a:9a:30:88:a0:
         e6:fb:7e:ff:a5:fc:5a:2c:17:70:9d:b7:ba:13:e4:cf:18:ec:
         26:22:bc:67:60:80:09:57:d4:8d:af:d4:c0:a5:7e:4c:e6:24:
         57:83:5c:38:1c:48:20:36:0e:7b:14:08:19:04:f0:52:72:86:
         0e:ef:4f:cf:06:d9:79:d2:ee:3c:bd:e3:a9:95:cf:30:73:d0:
         51:9e:dd:0d:8f:fd:f8:b9:9f:02:ea:4f:af:cf:dc:88:8c:7e:
         d7:a5:4b:ce:bc:ee:cc:78:81:c4:03:a8:1a:d2:8d:e3:6d:a7:
         df:c4:68:4b:bb:54:5b:06:4e:87:74:ca:6f:03:67:3a:5d:41:
         e3:7a:a9:fe:32:77:1c:ce:b9:05:61:9d:3e:88:aa:f3:8d:4b:
         b0:41:62:0d:1a:ba:16:78:4f:be:fd:7e:1a:e5:a2:66:9b:d2:
         93:b9:11:c9:ca:61:54:c9:17:72:27:47:55:de:7c:e1:47:2d:
         5f:c7:01:42:77:c5:52:af:fa:03:73:b3:5a:8c:b6:b2:45:65:
         e9:84:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----