Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File:                     mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier:          f3vqiM5z0ypPRu177KaMUhctUjEjxBnSk+RK3DSWDUg=
Subject key identifier:   65:D5:35:AE:15:D4:D1:F4:1A:D2:B0:95:0E:B2:0B:93:64:FA:90:1E
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer:       /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial:       01962FAB1EFEEDA1263E650BF5F8D99B110C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
                          2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: mL2HOlkJD8r4JU2BY8AqPJsicYcDLIpYorOVyKO0Ac0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1e:fe:ed:a1:26:3e:65:0b:f5:f8:d9:9b:11:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=65d535ae15d4d1f41ad2b0950eb20b9364fa901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:54:65:fb:c7:bf:0d:71:01:42:70:ec:1c:
                    ba:52:da:57:d0:07:ea:e6:18:10:c8:7c:14:53:28:
                    ef:46:54:e5:f9:6d:83:ef:96:ac:b0:31:f0:04:67:
                    d8:9c:39:aa:dd:28:4b:3f:10:81:95:3a:81:b9:e6:
                    c5:36:38:7f:f0:7c:5b:e1:28:c3:6c:1d:ac:a9:0d:
                    03:78:88:dd:a7:23:1d:be:71:dc:4f:33:66:e3:47:
                    57:4a:6a:5a:b3:1d:d8:11:f7:92:1c:49:0d:d9:69:
                    a3:8e:a7:bc:cc:99:c2:c1:3f:ac:4d:24:01:1a:ab:
                    65:59:38:04:f7:d4:5c:f2:56:ba:2b:92:37:f4:8d:
                    b7:a7:12:a4:70:d1:eb:d9:8e:e6:7d:d8:33:dc:d8:
                    c6:5f:59:f4:98:af:3b:f7:01:7d:48:48:72:5d:b2:
                    09:2a:a8:a3:ec:d6:03:49:bc:18:56:58:dd:ba:b2:
                    99:6f:20:9a:40:95:7e:ea:a9:e6:c6:bb:ea:73:fa:
                    13:77:5b:88:44:34:35:13:6b:8c:09:71:df:ac:e9:
                    d7:d0:5c:91:e8:47:5a:4e:ec:83:e2:15:9b:b6:68:
                    4f:86:fe:17:8d:1e:93:ea:22:6e:4b:c6:dc:11:f5:
                    2f:f3:69:1d:0a:0a:59:a8:82:23:98:0f:34:c3:94:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D5:35:AE:15:D4:D1:F4:1A:D2:B0:95:0E:B2:0B:93:64:FA:90:1E
            X509v3 Authority Key Identifier:
                keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:dd:28:c3:30:d5:ee:4a:7a:6a:15:50:20:d3:9b:51:51:
         51:74:32:50:0b:3d:23:3c:ea:4c:35:93:f8:84:12:05:92:74:
         c4:a5:45:bc:14:ab:c8:da:91:f6:c1:9e:4b:26:29:4b:fb:ed:
         22:7c:ed:27:35:1f:ff:d1:db:44:02:83:68:c9:76:cc:73:aa:
         c1:6c:45:9b:d6:6d:4f:e9:1d:fb:69:22:33:2e:34:70:ce:40:
         e4:2c:b8:f5:11:4d:87:77:0d:09:38:70:58:bb:b8:d5:8b:38:
         e4:57:14:d9:0b:30:b2:b9:ea:9d:0e:28:18:33:31:f7:ee:20:
         ee:67:3d:7e:a7:31:35:3e:34:00:32:da:cd:f9:53:cf:96:5a:
         96:3c:ba:42:65:98:d6:da:e3:e3:42:3c:56:e1:6e:53:9a:db:
         8a:e0:f1:e2:0b:95:51:52:dc:ca:07:36:6a:6c:f2:85:43:75:
         6f:e6:e3:0e:e1:9b:39:60:40:a8:eb:e8:d9:b5:40:b9:de:17:
         83:a2:5f:01:30:e3:50:f6:bb:da:ea:45:ea:d2:e0:ac:08:9b:
         29:6f:c9:c6:47:e7:03:61:20:e9:6c:5c:50:9a:d0:ac:78:25:
         e3:24:60:a4:50:a8:54:d0:1f:05:80:f3:3a:21:06:84:f9:54:
         ba:1f:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----