Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File:                     al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier:          43MJS9xXfNpyGfRs1YXEOGodgTEnxpqHCiu4RrHYX0w=
Subject key identifier:   A1:EB:09:C1:14:16:AB:36:FE:DE:48:ED:46:17:C2:1D:DC:F0:5A:DD
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer:       /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial:       01962F06D0A232E4978EB444B52A99ACC569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=)
                          2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: 6qZdOS4eLUJVmx9NK/VpeyiXyCy6FX2gsz6vD69bKKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d0:a2:32:e4:97:8e:b4:44:b5:2a:99:ac:c5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=a1eb09c11416ab36fede48ed4617c21ddcf05add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:72:09:0b:01:d5:5d:af:a9:af:18:a8:57:
                    d2:bb:e3:83:bc:f6:78:65:4c:83:1e:d8:24:32:c6:
                    46:50:26:87:8d:94:8f:3c:b1:72:cf:95:96:c3:99:
                    aa:a4:1b:ae:e1:42:29:d1:74:d7:f2:2d:d7:63:36:
                    7a:b6:0c:7a:20:1f:dd:f6:88:75:ea:82:1c:ed:9c:
                    d4:ce:64:74:7d:72:9e:79:57:b8:3b:bd:3e:cd:dc:
                    cd:98:06:10:b3:e6:fd:55:c1:76:7e:ca:80:32:8f:
                    39:a2:b0:c4:9d:42:ad:16:88:26:ed:17:ca:58:d1:
                    4f:8b:00:e1:3f:a6:8e:dc:24:1b:2e:e1:8c:89:5f:
                    de:81:c3:d2:2e:0b:68:e3:ce:7d:cc:49:25:d5:73:
                    a1:71:ac:01:5e:39:e1:ea:6e:70:b3:5a:b1:de:d8:
                    f6:95:b8:e4:0f:14:4d:82:1e:1d:40:cd:f3:70:83:
                    6b:58:cb:10:55:cf:5a:31:63:12:81:90:d3:28:ba:
                    86:80:d1:c2:a5:ca:04:d8:ce:b6:2d:88:10:36:b5:
                    9b:47:35:4c:a6:16:9e:44:3c:5a:87:1c:f7:91:41:
                    46:1e:d1:f2:02:83:b1:cd:24:be:8f:aa:4c:15:95:
                    c2:5e:61:ae:93:1a:7e:88:5a:ca:13:6d:ff:20:e7:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:09:C1:14:16:AB:36:FE:DE:48:ED:46:17:C2:1D:DC:F0:5A:DD
            X509v3 Authority Key Identifier:
                keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3c:7a:b5:a4:57:b7:7a:84:54:2f:1b:59:30:5f:83:3e:74:
         d8:40:46:63:7f:58:c2:7b:f7:5e:a2:3e:d6:59:f0:6f:c5:88:
         bd:a0:0b:d1:9f:39:bf:e3:e6:2f:f5:10:fb:25:84:a2:00:8c:
         37:57:fc:f6:7e:34:2e:09:44:eb:ca:7d:fe:02:82:c6:99:1a:
         05:c5:a8:10:72:c3:b0:d9:53:a3:94:cd:6b:98:64:8a:45:81:
         1c:88:26:96:5b:fe:04:0e:5f:84:9f:22:6c:fb:85:2d:6b:a9:
         44:4c:e0:28:cf:02:05:2e:b5:2e:6c:51:47:80:76:10:b3:77:
         56:7e:37:15:3e:eb:87:fb:62:31:2f:17:c3:9e:d0:a9:85:59:
         68:86:d6:28:f1:ba:25:ba:1a:ef:ff:20:a2:cd:ff:8c:1f:34:
         39:63:b4:11:fc:7b:7a:e5:12:84:3c:0e:5d:d0:be:fd:08:d0:
         78:43:95:8c:2d:5a:1c:71:28:bf:6c:9a:78:9a:fc:a4:28:b7:
         c0:79:26:47:c9:2f:b8:32:07:56:f0:bb:8e:c6:de:e4:0d:86:
         24:0d:b5:96:9b:4e:ba:0f:5e:f0:4a:ce:75:56:e8:94:54:ab:
         1f:13:21:36:bf:20:a2:f4:9d:3d:1f:c8:ba:74:3c:51:55:60:
         77:21:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----