Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File:                     1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier:          BTk1RoUov3kf1mvcjxhmQAgenvPesmuVIdeOca0mLX8=
Subject key identifier:   B5:F9:8E:0E:82:5E:D2:9D:F8:D6:AC:B6:56:D4:8F:88:D6:AD:B4:C1
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer:       /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial:       01962DF3D0C85BCCDA4BBFD0E7D68CB63177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number:          14BA
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: R/x8YNBXjh0hX9fKZVqQ1pCp7XaPtARKj1LdbeEkBjs=)
                          2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d0:c8:5b:cc:da:4b:bf:d0:e7:d6:8c:b6:31:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=b5f98e0e825ed29df8d6acb656d48f88d6adb4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:a0:8f:8d:55:bd:b9:03:a1:de:51:9c:d2:
                    65:7e:7d:f6:cd:4b:aa:a6:78:45:3c:a6:95:2e:a2:
                    d7:26:74:bc:79:3b:7b:bc:96:d1:87:4e:a3:11:d0:
                    81:9f:ab:02:a3:45:0a:c8:40:9a:68:28:39:0e:5e:
                    24:ce:f8:e8:e3:95:fc:b7:04:4a:a1:56:61:bd:3a:
                    ed:bf:5a:00:1d:aa:a3:75:3e:62:10:88:bd:96:e0:
                    ad:3d:40:b0:66:d6:38:17:8e:6b:58:97:ed:ed:86:
                    b7:ff:09:90:74:f5:97:06:41:47:66:18:f7:22:d9:
                    f7:34:0c:1c:b1:d9:fc:e3:5c:7e:54:bd:05:18:37:
                    b2:b2:a5:27:9e:f9:2f:dd:4d:a8:bf:fb:e8:a9:c5:
                    eb:5c:e1:e3:9b:58:9f:a4:c7:ea:68:ca:07:97:b3:
                    3e:e7:6e:c3:90:43:19:ea:7a:05:94:e3:36:63:fd:
                    2f:ef:d8:eb:7b:f6:85:38:43:7f:8c:2f:b1:6c:22:
                    97:b9:24:90:36:db:dc:1b:97:4c:25:aa:20:9d:4f:
                    22:20:25:73:e9:aa:b7:52:15:4c:e6:87:e9:27:e1:
                    aa:57:30:b6:cb:91:12:8f:6c:9c:cd:61:fd:e2:d7:
                    ed:5d:5e:99:94:7f:12:1d:0b:e5:ac:ee:1a:e3:72:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F9:8E:0E:82:5E:D2:9D:F8:D6:AC:B6:56:D4:8F:88:D6:AD:B4:C1
            X509v3 Authority Key Identifier:
                keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:ef:1c:9b:3c:11:8e:14:a5:d1:eb:1d:27:4d:84:e9:cd:
         98:69:ee:50:b3:34:a3:45:c9:0b:bb:a7:7f:43:3a:25:1d:22:
         72:45:ec:b6:10:3b:e3:56:95:12:67:99:22:31:ef:9a:d1:1e:
         46:91:44:43:7b:b4:56:33:f0:a5:ff:46:09:f2:45:ee:8c:ac:
         0c:ff:21:ab:5b:33:84:22:a9:f9:40:41:b1:f0:74:c3:31:e7:
         10:e6:20:2c:ad:f3:d5:d5:de:5f:e4:4a:fe:bd:e7:a0:19:61:
         2e:70:c0:fe:cd:52:6d:e8:49:89:e6:8a:cf:11:b0:d6:ca:5e:
         8e:84:5b:7d:c6:46:0b:9c:89:cb:7b:a2:cb:2f:73:88:b0:1d:
         13:4e:8d:da:62:8b:fa:f7:c8:78:8c:aa:2a:7f:fd:0f:d4:96:
         9a:08:53:c5:3c:64:a1:fc:18:49:5d:07:4f:a8:68:7c:a2:d0:
         3e:a8:19:46:b6:6e:b1:45:f2:de:39:99:a6:15:c9:1b:1c:5b:
         0e:db:93:26:3b:00:95:26:3b:43:3d:d5:d3:43:31:e7:16:04:
         61:1d:82:0e:23:39:dc:3d:e7:3a:cb:9a:f5:ac:41:92:aa:33:
         a5:be:ff:80:4a:12:37:8b:d8:53:df:25:93:cc:fd:f1:98:25:
         2f:44:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----