Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File:                     lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier:          ZiQc2Q1JtkmrphN9s1Y0bQziinIg+wLkZTvtMbW3yRg=
Subject key identifier:   0A:86:63:DC:55:C1:EF:87:02:D9:EC:03:E5:15:85:B2:71:F3:C9:CF
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer:       /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial:       01962F7423CB5973AE3872BADB4D3A6699B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number:          14A5
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=)
                          2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: Aq+rg/NOjo2MRHgt7HL95vyviZXO3A8fXA447thrt0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:23:cb:59:73:ae:38:72:ba:db:4d:3a:66:99:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=0a8663dc55c1ef8702d9ec03e51585b271f3c9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:f1:6f:9d:5d:b0:e3:6d:55:94:9b:1c:b9:
                    4b:bf:a4:28:89:5a:50:13:f4:12:a2:48:51:94:d2:
                    d1:fc:7b:3d:87:a1:26:bb:a4:71:42:7e:3b:96:c8:
                    c0:49:7d:5b:39:2c:2f:82:be:54:ee:08:f3:aa:0f:
                    3e:71:32:9e:32:ff:75:b2:43:21:83:f5:2c:34:e3:
                    84:eb:f1:de:96:63:90:62:bd:1a:08:9f:aa:63:6b:
                    41:6c:5a:16:8f:2e:b7:8d:db:20:ea:b0:e9:6f:2e:
                    32:d0:e3:40:5a:f0:d1:99:53:3c:ed:97:51:51:9c:
                    69:d2:82:fe:7a:89:65:8d:d5:dd:8a:e0:b4:89:af:
                    be:c5:4d:d2:1d:c2:8f:d7:5a:76:0b:9e:d2:3b:40:
                    da:fc:6d:6e:5a:10:cf:19:c2:a2:3f:6a:33:d8:99:
                    8c:a0:5b:ec:b0:f6:b6:39:c5:0a:eb:6d:6b:11:d3:
                    8b:50:4b:8f:bf:a8:69:d3:19:25:98:91:4d:57:1a:
                    95:19:85:bb:2d:8e:1c:5e:6f:bb:16:e3:67:5e:ba:
                    97:a7:d7:fa:c7:39:37:db:9c:75:e9:e3:2b:2d:d2:
                    f7:30:3e:53:cc:8c:16:76:24:11:36:c2:1c:de:5f:
                    a8:c9:bc:27:74:b4:38:2d:a6:25:bd:94:09:8a:d0:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:86:63:DC:55:C1:EF:87:02:D9:EC:03:E5:15:85:B2:71:F3:C9:CF
            X509v3 Authority Key Identifier:
                keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0f:17:f2:37:6d:0f:ea:5f:53:b8:aa:5a:29:4e:6c:7d:a2:
         c8:e7:a0:b4:ac:3d:8f:69:94:12:85:2f:9b:d3:f1:c7:1a:a7:
         6e:d7:a3:e6:4c:14:65:0b:a2:71:5f:30:51:67:e5:79:f1:02:
         8b:84:a9:a0:3e:9b:ca:90:0d:20:2b:92:4b:7b:4d:43:29:4d:
         32:71:f4:ac:3a:f7:23:44:b8:25:5f:d5:e1:7e:46:c4:ff:73:
         53:2e:7a:a2:28:e8:ef:ed:6d:96:19:03:8d:67:15:d9:90:21:
         18:6a:65:79:02:78:69:83:0c:78:99:f5:f6:12:69:ce:df:5b:
         db:15:74:57:ee:99:9a:68:81:09:03:15:80:ee:85:a1:d2:17:
         9c:bb:37:24:5b:97:1d:cf:a0:3c:17:89:dc:96:29:5e:de:cb:
         8e:20:4b:b5:cc:3f:9a:22:8e:f3:ad:96:38:40:22:89:d4:c6:
         4f:47:17:a1:28:f4:8b:c3:61:ce:04:15:a7:69:81:87:e5:53:
         ec:2c:6d:fe:a7:ce:35:ed:42:a2:f3:f8:7b:38:a5:ec:6a:ff:
         c5:aa:42:44:d8:8d:de:9b:85:8c:7d:91:06:2b:cc:96:03:31:
         52:45:5d:cf:85:b0:8c:8b:54:c3:8d:70:3a:ba:31:30:d4:d4:
         5a:5d:80:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----