Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File:                     aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier:          JSKnnrSWZ47kBp9OKtOIeTIWaayLJcu/NdpYQ6P/OGk=
Subject key identifier:   B9:85:3D:52:8D:DA:86:20:1F:DF:2B:BE:2E:C5:C3:D1:65:E6:8A:A4
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer:       /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial:       01962E61DE6A4A3BC848BC75A7C18E68BA07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
                          2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: /pDkV66cDS+jtYWynhEK/DU0WESRLCovMJmevCSrUQc=)
                          3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:de:6a:4a:3b:c8:48:bc:75:a7:c1:8e:68:ba:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6954e90899ff25644520724cde8c211613600bef
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=b9853d528dda86201fdf2bbe2ec5c3d165e68aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:8e:11:6a:07:08:fa:c3:69:84:27:cf:fb:
                    c4:67:ed:e5:56:82:41:9a:29:26:af:be:7c:00:9b:
                    0d:98:26:ea:78:6d:e5:0f:f6:12:0f:aa:11:45:02:
                    55:a9:36:b3:e0:a8:16:4c:5c:0b:b5:5d:e3:6a:06:
                    65:0f:c7:cb:27:89:80:36:c9:98:80:6d:4f:2c:77:
                    6b:ac:8d:a3:f4:71:b6:ca:be:fc:2c:d8:97:29:30:
                    b3:2d:07:d5:ca:9c:ad:7e:e6:3f:56:cc:83:59:9f:
                    05:3c:34:61:c4:b8:e3:2a:d1:1e:14:5b:bd:40:9d:
                    81:06:aa:09:8d:9d:8a:b7:b4:99:32:62:e8:13:23:
                    e5:c2:06:68:3d:a9:02:83:a7:4c:1b:9c:8c:dc:e0:
                    cc:96:1b:31:ff:45:b5:80:8e:ce:c4:b3:a2:d9:43:
                    a1:ef:90:81:3d:ba:99:c4:c4:84:92:b1:d9:d9:75:
                    1e:b8:36:d9:57:1e:ea:85:74:69:81:5e:19:bc:ef:
                    b3:fa:de:7d:11:3c:c1:07:9a:63:86:28:c9:4e:9b:
                    c2:ff:85:98:13:44:1d:58:0e:58:f1:c4:87:66:1c:
                    c5:b6:49:d8:36:46:bb:24:9f:3a:5a:03:0f:03:d3:
                    05:f0:78:fb:a8:4e:85:a5:ee:55:8e:3d:e9:f4:55:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:3D:52:8D:DA:86:20:1F:DF:2B:BE:2E:C5:C3:D1:65:E6:8A:A4
            X509v3 Authority Key Identifier:
                keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:2a:24:d6:52:fb:b7:f2:68:9a:01:41:3e:c0:2e:3a:72:
         cb:01:44:1c:8c:ea:a9:01:e1:a6:9e:4a:36:5a:5c:43:d7:84:
         3b:fb:db:fa:21:49:65:99:71:e6:f3:d2:58:55:3f:6d:ee:dc:
         8d:ec:c8:a8:4f:f1:89:d8:a1:e0:02:28:45:9b:e0:cd:12:92:
         21:f0:02:1b:82:24:11:85:0e:bb:a2:d1:e4:58:29:a3:0e:ed:
         ff:0d:80:6e:09:09:74:2a:f9:16:0a:d7:23:e9:ea:d4:4d:bb:
         c7:d6:89:10:b3:51:3e:ba:2c:4d:5c:e8:96:54:34:d6:26:45:
         a8:be:0c:b2:ea:9f:61:14:01:ee:a8:ea:e2:70:a7:72:df:53:
         6c:0b:af:02:f5:20:59:6b:6a:da:e1:26:73:45:1a:57:1b:61:
         0a:08:40:e0:24:25:e1:25:1f:03:76:db:1c:42:bc:fd:da:84:
         68:f7:6c:cc:40:35:61:16:ce:ab:9e:3a:f3:07:cb:7e:98:0e:
         92:84:50:fd:db:40:7e:0a:5d:85:0d:81:dd:30:24:93:e2:00:
         e2:75:8d:af:9e:fe:6a:15:73:78:f9:23:c0:db:0e:9a:90:1f:
         6e:aa:a4:45:9a:ff:4c:90:d9:1c:81:78:f1:ab:d5:b6:12:6c:
         2c:2a:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----