Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File:                     0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier:          eZeEDdPGU+rVJdhiigbc+QvNiW6zSUbVcNS2xLp7mjI=
Subject key identifier:   15:5C:2B:45:BE:2A:83:33:18:60:D2:2D:F7:6E:D8:F6:BE:30:E5:7A
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer:       /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial:       01962F3DB564C7CF02C6E697162AB3823094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: obIK9BtK3wo5wAPsEAhMeWGEgj1j2QkkHM00a5mr2HQ=)
                          2: _XUidn5LGX4qhZ_75ajbeYWe1Ao.roa (hash: b/pfq31DckGw+o1qBs5ugJl7vAflaGA+vdef1tZYmPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:64:c7:cf:02:c6:e6:97:16:2a:b3:82:30:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=155c2b45be2a83331860d22df76ed8f6be30e57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:6c:73:31:3e:eb:2d:3e:47:14:16:17:f3:
                    0e:cd:84:fa:ce:6e:62:91:5c:6e:5d:ea:bc:e0:53:
                    f9:09:a3:84:06:3f:56:65:ed:38:d3:68:b8:2b:22:
                    b5:16:3c:0a:5b:14:26:88:7f:f2:1d:fd:5c:96:15:
                    ab:ca:de:a6:04:7c:28:b8:96:cd:9d:83:cf:eb:14:
                    8e:c4:61:50:e7:d2:36:ed:2b:b5:78:2d:35:80:e7:
                    92:0f:22:49:5e:7b:b2:c2:fd:63:11:f2:83:42:9e:
                    69:32:b5:9c:40:be:41:10:fd:33:90:07:5d:3e:94:
                    dd:ba:3b:84:d0:c7:7d:2e:e9:68:4a:04:f1:b1:c7:
                    61:7c:e1:95:60:1c:67:40:16:1b:81:44:50:73:82:
                    48:d8:b0:fc:43:b6:85:8b:a8:49:86:28:e0:a8:e3:
                    53:74:2a:43:cb:2e:40:e9:eb:42:f1:e9:d2:2b:35:
                    5c:66:4a:c4:1a:f9:30:0a:a1:e2:7d:6c:79:f9:89:
                    8d:87:58:3c:49:e2:0e:c0:7f:e4:52:96:30:6d:f4:
                    f8:fc:20:51:6d:d5:b5:48:71:bb:78:56:6e:cb:68:
                    62:6b:26:55:0b:bf:89:ee:49:e6:df:51:f0:ff:8e:
                    9a:28:6d:cf:86:ee:3f:6e:ea:ed:3f:ef:90:41:48:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5C:2B:45:BE:2A:83:33:18:60:D2:2D:F7:6E:D8:F6:BE:30:E5:7A
            X509v3 Authority Key Identifier:
                keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:35:0e:62:16:c3:35:51:b6:76:a8:f0:44:96:ba:48:06:0d:
         72:09:fa:64:23:66:82:1c:b7:05:80:a8:02:b0:2a:e5:ff:62:
         71:67:bf:a3:c9:91:cd:2c:9b:55:70:8e:03:96:38:8f:bf:09:
         91:70:4a:36:79:1b:ce:4a:4a:e7:37:4b:19:23:0c:9e:bc:d4:
         10:7c:6c:58:0e:21:4c:2d:6f:a0:9f:9d:87:46:4b:3c:65:e3:
         15:e0:52:80:4f:27:7f:bb:ca:bf:05:5d:f0:f5:5e:0c:b2:b1:
         60:9c:d5:ab:93:94:5e:25:f5:cf:bc:d7:97:73:83:3a:8e:bc:
         89:d5:71:80:88:4c:e6:fb:f3:0a:27:65:56:57:7c:d9:1e:7e:
         6c:7f:cb:84:4b:94:f2:57:b9:9c:ed:43:31:05:00:ce:15:e8:
         5c:16:04:f1:ec:78:e4:ea:16:5a:46:ae:48:82:f7:56:7f:1a:
         c8:6e:b5:bc:10:51:6c:be:e0:67:76:4f:81:74:be:c0:37:6d:
         16:f1:e8:d9:5b:09:24:26:16:1c:3a:94:3b:53:bd:74:2a:1b:
         11:bb:e1:59:59:dc:5b:1c:e5:ad:7d:62:92:1a:8c:81:19:96:
         e4:05:45:79:a4:a4:84:be:ea:66:d8:ae:96:6d:17:a4:08:5e:
         66:60:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----