Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File:                     pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier:          YRkHtaKKtIiGiRZpzF22K0Ka5b9k6dMxLhTmnJXWeQE=
Subject key identifier:   8E:DA:B5:EF:81:8C:5C:27:DD:A3:FA:EF:D5:4E:2B:14:30:A4:50:16
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer:       /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial:       01962F3DC41AB384829444E81CA5942C1AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: h50tCVpf4kLmR4VTi4FvGNvR1DbNhAzEgwObAD5xKt8=)
                          2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c4:1a:b3:84:82:94:44:e8:1c:a5:94:2c:1a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=8edab5ef818c5c27dda3faefd54e2b1430a45016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:24:d1:98:f7:61:a6:a1:fd:db:c8:b1:00:
                    d5:e7:f9:45:af:11:a2:b4:e6:61:e0:17:5b:f9:c9:
                    37:25:cb:58:81:73:80:93:bd:4e:72:45:5e:b6:d4:
                    86:41:5f:e0:83:82:86:19:0c:90:f4:bc:70:2a:dc:
                    10:5a:45:00:13:88:a1:6c:fa:45:cb:f9:13:a2:5a:
                    31:68:0c:e3:3b:8e:2a:bc:b3:3b:39:a8:67:f1:11:
                    a2:ab:e1:45:6f:3d:9d:ab:62:63:a9:b1:c1:2e:bd:
                    ff:07:88:ce:8f:3e:72:cf:57:c3:29:ea:a7:86:ab:
                    b3:6d:ee:0d:d4:0b:78:01:72:43:3a:e0:d3:a8:e8:
                    6d:1a:37:e9:bc:04:2a:46:7d:99:db:0c:c2:a5:ba:
                    25:4b:8f:de:9f:2b:87:f8:98:29:f9:8b:be:1f:f4:
                    66:84:47:cf:64:e0:2d:af:14:9a:de:a8:ed:e3:ea:
                    8e:bd:13:21:3e:6c:86:2a:0a:4e:5c:a1:6d:78:87:
                    2b:f9:2f:ed:4e:91:2d:1c:44:15:ff:da:3f:9b:7b:
                    22:f8:92:7a:4f:38:60:76:33:a1:45:5b:ae:21:51:
                    ae:33:f0:0f:91:d6:01:cb:ed:1e:83:9a:42:8f:2e:
                    e4:53:de:29:8e:a5:53:37:4a:6f:e1:67:25:6e:21:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:B5:EF:81:8C:5C:27:DD:A3:FA:EF:D5:4E:2B:14:30:A4:50:16
            X509v3 Authority Key Identifier:
                keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:43:ca:c5:a7:65:d9:8a:d6:fc:7f:0e:ba:04:5f:d1:ad:
         ea:41:0f:db:c0:a1:ce:92:a9:d8:85:70:20:05:04:7c:b4:48:
         1d:42:55:02:bc:15:3d:27:c9:7e:86:06:7a:12:d6:d0:38:f1:
         f6:7f:9f:ee:5a:b1:b3:1a:87:6d:6a:4e:1b:fa:c9:df:d9:23:
         8e:2e:36:47:01:38:07:67:93:7e:b9:84:1a:94:39:11:65:a0:
         74:6c:bc:d1:17:61:c7:c3:ae:e2:36:6e:73:7c:f1:c5:71:75:
         c8:5d:ed:52:38:98:b4:7e:5b:fe:90:6d:d2:3f:a2:9f:22:cd:
         d5:ea:06:09:06:41:ea:39:0b:6f:5f:7f:65:c9:9d:7a:a7:53:
         2a:03:8b:dd:70:be:19:38:7f:b2:e0:d2:07:80:5c:03:2b:de:
         ed:b9:e6:a3:64:55:af:8b:3d:71:6d:2a:47:2b:6d:3c:64:4d:
         ff:37:3e:c2:80:1a:60:c3:3b:d4:07:db:7b:11:e8:a1:81:c4:
         a0:28:f8:db:36:01:e0:75:fc:b4:45:90:29:2b:aa:d6:28:88:
         c7:e3:db:0c:3b:85:57:fd:27:b7:db:43:88:cd:42:9d:6f:fc:
         fe:28:05:56:90:2b:dd:76:8e:93:b1:2b:6f:e7:bb:a9:aa:51:
         c2:52:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----