Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File:                     j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier:          Aa4FZ39iauMQ3ZkIBmi8GYqRSHNEolcohN7M2IzUkdM=
Subject key identifier:   EB:86:27:A8:F7:ED:A2:91:21:CE:0D:82:D3:E3:A2:98:42:95:84:CC
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer:       /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial:       01962ECFF9494F0BF633CEEF6AB75F665CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 11:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:43 +0000
Files and hashes:         1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
                          2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: mjddVHD/vdzSqaVvr7LNf6SI0cJtIL/ox4ACLsEpyPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:f9:49:4f:0b:f6:33:ce:ef:6a:b7:5f:66:5c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
        Validity
            Not Before: Apr 13 11:01:43 2025 GMT
            Not After : Apr 14 11:01:43 2025 GMT
        Subject: CN=eb8627a8f7eda29121ce0d82d3e3a298429584cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:fb:f1:4f:4c:40:37:e8:cf:77:59:80:a1:
                    40:ee:b7:8d:66:cd:8a:03:d6:04:6d:7e:81:4d:57:
                    84:fa:25:dc:67:87:56:f2:70:fa:07:9f:93:9c:4a:
                    bf:16:71:4e:2f:ad:87:d8:05:72:c3:85:44:a0:fb:
                    9c:50:a9:03:20:02:5c:57:a8:e3:f8:1c:9a:66:01:
                    46:05:30:9c:8b:12:a3:23:56:61:26:58:4b:3e:a7:
                    a2:24:4e:db:23:4a:cc:1c:af:c2:8a:4c:77:e4:04:
                    f1:cb:db:5c:f2:cb:e4:38:c5:ce:2f:44:6b:96:60:
                    de:e2:d1:2d:e5:93:e5:4f:d9:41:92:b2:af:4a:40:
                    3c:5c:99:fe:1f:75:f2:ef:87:c1:5f:78:0b:53:db:
                    f0:7f:ff:6c:60:0f:77:4e:1e:ec:f0:21:2c:64:aa:
                    b9:1d:bb:72:92:3c:0f:de:19:51:fe:da:90:49:97:
                    37:8e:d1:02:8f:88:bf:28:be:e1:db:16:b9:cd:7f:
                    02:9c:52:4d:17:af:20:a5:bb:e0:9c:fe:c2:37:96:
                    19:20:e2:e0:26:23:9a:0c:16:26:95:5b:54:a9:2c:
                    98:61:15:b5:56:d9:e8:03:56:c7:a3:50:81:3e:8d:
                    72:97:a0:e1:56:77:96:4a:e3:9b:73:60:b9:f8:93:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:86:27:A8:F7:ED:A2:91:21:CE:0D:82:D3:E3:A2:98:42:95:84:CC
            X509v3 Authority Key Identifier:
                keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:71:f1:6d:cd:e2:87:7e:c4:47:06:d3:5d:4d:9d:c6:70:
         61:f5:c6:b9:e8:e0:2f:2c:af:95:48:bc:fb:67:4b:2f:4c:0a:
         d2:86:de:e0:61:2b:65:bc:d3:00:c7:27:8c:4a:48:49:a8:13:
         a8:f8:39:2a:2e:67:84:f5:b3:54:1f:5c:c6:5c:1b:e4:37:65:
         95:3d:7e:00:28:3e:f2:2a:da:39:be:ea:58:74:21:46:79:26:
         4f:e9:16:87:f1:29:33:31:39:d5:70:7b:1c:f1:03:7c:b7:ac:
         ba:19:e1:8c:fc:cf:2c:ab:d5:7f:29:a1:72:98:3b:f0:fd:a2:
         8c:3c:e4:b5:28:d6:6f:50:6a:55:3c:74:e2:13:9a:21:ed:d4:
         17:7d:c5:81:c7:76:39:4a:61:b2:1d:54:fe:4e:ab:3a:41:a6:
         ae:bc:9b:64:87:b7:10:7f:7c:9a:84:d2:f7:37:8a:48:a3:60:
         9b:1f:63:94:fc:f5:57:54:60:f4:80:df:ff:49:3c:ac:74:2d:
         59:2c:fa:06:86:de:df:0b:6f:06:83:2e:86:2c:a5:94:b9:5b:
         18:3e:ab:5f:a9:3c:5f:d6:20:fa:76:d8:c2:fc:3c:9a:da:5c:
         f4:c8:6b:13:9a:0e:03:4d:45:52:3c:2e:80:fc:9c:46:2d:a1:
         68:17:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----