Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File:                     Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier:          KzYFwwvJdfEkFM/5uTIebpVbvryFH+LY6kR1PMqMMek=
Subject key identifier:   2E:1A:36:BE:3D:1E:CD:43:36:FD:C2:9B:52:E8:9A:9C:C8:34:25:C3
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer:       /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial:       01962E61DB4E67E774255A0FE57D1F0F6FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: X7IiqE40dz3+S8B6/VqFssLjRngJVfnbSb6QbsHylB8=)
                          2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:4e:67:e7:74:25:5a:0f:e5:7d:1f:0f:6f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=2e1a36be3d1ecd4336fdc29b52e89a9cc83425c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:db:29:e8:ab:0c:20:45:86:f8:84:aa:86:
                    9b:c5:ef:9f:6c:31:f4:63:fa:9a:ec:f3:40:4a:c0:
                    5b:5e:d4:18:24:fe:8b:8c:a8:6a:c0:79:fb:0d:ec:
                    40:58:bf:fa:99:61:98:65:a6:07:76:08:ec:8b:32:
                    82:b4:85:6f:68:12:96:f7:98:e0:c3:dc:cf:ab:e8:
                    c0:cc:2a:53:39:c4:49:09:df:b4:73:3e:14:80:21:
                    b0:20:5c:e9:26:20:90:d9:11:35:19:e7:68:06:cb:
                    5b:bd:6e:4d:e5:96:8a:91:50:fd:f4:3d:d7:f3:d0:
                    37:ca:7a:35:99:ac:ef:19:8a:9f:e9:6c:17:53:c5:
                    4f:35:33:da:2b:f2:39:a8:fc:8a:b9:0e:a4:7b:b1:
                    7f:48:14:b9:5d:dc:df:18:0d:af:70:d4:a1:f5:39:
                    d8:96:86:91:d8:e8:15:c3:57:b0:0b:90:17:d4:34:
                    ce:5d:21:45:f1:ec:f8:7d:3d:d8:fc:9a:6a:8f:12:
                    16:29:22:ea:d7:40:f8:e1:f4:02:f7:9e:72:c7:4b:
                    46:da:c6:72:ce:8f:81:4d:1d:13:cb:ec:e8:0b:38:
                    ce:4a:25:55:43:3a:89:90:e4:04:62:9f:26:c5:e9:
                    fe:b5:bb:fa:ad:1d:52:40:bb:a6:5b:5a:e2:aa:8f:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1A:36:BE:3D:1E:CD:43:36:FD:C2:9B:52:E8:9A:9C:C8:34:25:C3
            X509v3 Authority Key Identifier:
                keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:16:49:90:90:b9:37:eb:5c:9d:c0:0d:3b:a5:27:be:6f:2a:
         d9:49:46:de:ef:0b:e8:db:67:1b:28:9c:12:66:28:eb:e1:fd:
         f6:4f:be:cc:13:f7:d0:f1:fe:d7:df:70:5f:21:7c:f5:91:a5:
         76:cf:bb:89:0a:d7:b2:86:9f:7c:aa:6c:be:f7:eb:fe:17:7a:
         6c:dd:a0:52:6a:76:c6:a7:f5:5c:66:a7:23:2a:aa:5e:ed:06:
         d8:83:11:9a:eb:36:05:23:3e:b5:9d:c0:4b:ff:a4:14:5a:c3:
         96:e0:c5:39:a8:9b:49:3d:f6:10:ba:45:e5:6c:4d:af:28:a5:
         ab:45:ae:6e:09:c1:eb:57:18:4f:d4:2c:d6:f1:5e:60:b8:81:
         55:7c:ee:ad:3b:cd:6e:30:27:c7:1d:00:e2:03:a5:20:02:df:
         c6:8a:7c:e4:88:28:72:a7:e0:cf:d5:68:3b:2f:de:38:06:5a:
         67:61:20:6e:de:9d:ed:df:28:ae:c0:8a:a1:72:c5:1c:e6:17:
         09:8f:50:68:16:58:02:c5:2e:79:8f:11:38:e6:9a:91:9f:d4:
         5f:17:ea:54:69:56:3e:d7:c5:62:4b:da:3d:3e:66:ac:4c:6f:
         4e:d8:1f:de:66:d1:6b:1f:66:bb:52:17:b5:ad:50:2f:3e:c2:
         78:bd:88:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----