Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File:                     1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier:          riyJhXa3aD6MQ9FJN6h22H+dn+aTlSiuEJw8Y+ziv/0=
Subject key identifier:   90:6C:8B:DD:8E:FE:35:DE:06:F5:F8:F2:A2:59:77:FE:98:24:79:4F
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer:       /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial:       01962F3D40383E7935909D4EBEF524076A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: QSVW7EDT1wMZCpsibe8KTaHgMbwDNGk/bZc7AYxf9SI=)
                          2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:40:38:3e:79:35:90:9d:4e:be:f5:24:07:6a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=906c8bdd8efe35de06f5f8f2a25977fe9824794f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:87:50:77:12:0a:85:cc:ad:eb:10:ab:d8:
                    c9:e3:bd:1d:24:38:c1:8a:98:02:28:52:52:35:83:
                    43:69:16:ba:2d:c4:01:61:9e:3c:d8:0c:d6:bf:eb:
                    a0:04:fd:51:8f:d8:e8:32:f2:41:c0:83:47:f3:fe:
                    e7:a6:e7:d9:c6:10:f7:ec:e4:30:ad:09:3d:1b:90:
                    fa:ed:88:93:46:05:6c:14:fa:57:97:60:0f:82:ad:
                    3d:02:3f:27:bd:bf:57:06:5d:26:a2:37:a9:ba:22:
                    22:cc:89:b2:31:c6:b8:b5:0d:fa:a9:89:d4:12:b4:
                    a3:9e:e9:59:f1:63:21:ae:0c:e2:b9:49:03:8e:ff:
                    45:02:4e:d2:53:63:e3:51:84:9c:ad:ac:13:74:c9:
                    7c:32:a6:c2:64:80:32:4c:c9:a7:a4:f9:23:21:5f:
                    92:cb:4c:30:b4:21:1f:2c:ed:33:ca:17:89:4f:84:
                    3e:77:9b:fd:87:bf:cd:60:33:83:f9:e1:cb:34:67:
                    c6:36:f2:34:65:d1:19:94:bb:dd:83:db:fd:86:f6:
                    ef:b7:fc:e9:c8:4c:69:45:d3:ad:73:07:d7:81:ee:
                    b0:c7:cf:31:4c:8e:23:2b:2b:d0:7f:10:f0:5e:39:
                    2e:34:24:49:af:aa:a3:86:fa:bb:13:4e:40:f6:4c:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6C:8B:DD:8E:FE:35:DE:06:F5:F8:F2:A2:59:77:FE:98:24:79:4F
            X509v3 Authority Key Identifier:
                keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:70:1e:99:9c:2a:8c:49:12:b6:af:c5:47:7c:ac:98:5e:
         42:0e:b7:88:4e:5a:fd:5f:83:51:53:e3:3d:06:4d:86:de:8d:
         f6:4e:7c:8d:ad:b3:04:c0:23:31:47:e9:c2:b0:cd:29:51:af:
         d2:2f:a7:c5:3e:85:54:9d:56:8c:24:a2:b7:69:2d:8f:9f:ff:
         28:e7:f9:81:9a:92:19:6d:30:47:75:4a:42:6e:7e:2d:34:aa:
         24:19:c6:d5:fd:88:7e:7d:51:fe:50:e8:ba:d4:09:12:9f:e5:
         8d:62:9e:0e:33:98:19:93:04:b5:41:c0:31:6b:2b:a9:e9:19:
         b2:11:c2:b9:66:50:2e:4a:97:89:f9:4d:a4:90:da:e3:76:a1:
         b3:23:cf:1c:f9:aa:43:f3:a9:0d:c4:3f:44:fe:03:13:4d:92:
         10:1e:ef:1d:f1:c0:3a:6c:fa:c5:76:d7:35:cd:e6:cf:19:23:
         98:8f:56:21:17:2b:21:90:f1:4a:fc:4d:af:10:14:ad:63:5f:
         2c:87:45:ee:b1:63:6e:82:0b:af:d4:b7:96:bb:23:4f:56:b7:
         82:ab:d5:6e:2c:51:d5:70:53:84:1e:8b:fc:95:2d:4a:cf:91:
         39:03:10:15:95:ea:5c:59:89:3a:8e:5b:40:40:70:55:d8:5a:
         2e:84:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----