Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          K11RSd0A4lJhbjIIZIOfVQWQhlZRr1L/3GQHcM81VMU=
Subject key identifier:   43:57:95:A6:E3:D0:62:1F:F3:05:D4:4E:DE:85:BD:30:2E:F3:1D:92
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       01962F74AF644E940502B7349ABEF668D5A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: pfepQYPMWuFAUCBpHoLm+jB8gPqSOWsjDr3DHKoBVb0=)
                          2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:af:64:4e:94:05:02:b7:34:9a:be:f6:68:d5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=435795a6e3d0621ff305d44ede85bd302ef31d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:3e:b5:7a:5b:76:c1:0a:66:e3:08:e5:e5:
                    4b:5b:12:db:17:6e:ae:0a:bf:f8:ce:72:83:e6:fc:
                    22:3d:6b:82:72:7e:af:a5:3c:44:22:9b:a1:73:92:
                    95:02:16:fc:f6:88:86:b7:84:62:c0:da:cd:d3:6e:
                    95:84:3a:0e:4c:0d:4f:23:df:39:6e:ab:8e:4c:e4:
                    20:50:ee:51:85:09:21:1a:5e:c5:bb:e8:ec:dc:29:
                    64:20:14:74:15:9f:41:22:c5:98:32:57:63:d5:1f:
                    11:07:90:f8:58:d4:b0:df:9f:22:38:3d:8a:8a:2d:
                    c0:64:46:75:41:ba:f7:41:99:59:a1:10:f2:fd:9d:
                    18:e0:08:97:10:8d:e5:7b:dc:f1:b3:5a:da:0b:fe:
                    b6:fc:66:30:2a:26:a8:5a:77:68:d7:cb:8b:32:26:
                    51:b3:e6:89:7c:e5:17:bf:48:97:32:4e:24:bd:b4:
                    c0:ec:f7:50:08:82:fb:03:98:dc:48:8c:c9:b8:b3:
                    32:43:a5:1c:11:39:ad:20:1a:96:e8:c2:77:d6:68:
                    b0:87:77:39:4d:d6:fd:ef:19:f5:c7:27:3f:fa:50:
                    65:3a:d2:54:85:23:24:57:42:b9:13:07:0e:83:d2:
                    02:3f:f0:9a:2e:bf:c3:1b:38:b9:ec:a5:2a:42:66:
                    4f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:57:95:A6:E3:D0:62:1F:F3:05:D4:4E:DE:85:BD:30:2E:F3:1D:92
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:dd:a9:26:0d:dc:83:f2:bf:95:ba:6f:ee:dc:15:50:be:
         28:70:65:6c:8a:3f:04:64:8e:1a:46:08:2a:9a:73:09:3e:64:
         e2:00:cd:59:13:52:b0:ec:88:d8:b4:3b:68:5a:82:77:ae:06:
         fe:d6:a9:25:de:e1:a3:16:61:7e:f1:ab:f0:9f:dd:1a:10:62:
         99:2e:11:d9:bc:ee:ca:73:bc:ad:93:26:3d:3f:fd:aa:bd:53:
         eb:62:f5:a5:b3:7e:c9:b2:1b:a3:c6:87:47:61:d6:46:1f:19:
         cf:20:78:19:2c:cd:23:7e:21:1c:30:ad:ac:e5:49:6b:ef:cb:
         6d:0a:31:b1:09:12:4a:fc:d9:54:8b:3e:4f:07:f4:01:cb:63:
         36:3e:59:21:da:aa:27:06:4a:37:06:d6:38:4f:69:1a:b6:61:
         b7:99:33:a5:4c:20:7a:9a:bc:ac:ba:58:74:1b:5d:8e:ff:42:
         3e:a3:ab:c4:26:e5:25:a8:dd:97:fd:0f:1b:78:40:02:71:ac:
         c8:be:e1:ed:9d:ea:ff:28:84:47:67:98:56:e0:d3:c1:35:fb:
         db:ff:a0:45:98:35:0e:e9:f6:8f:ef:b1:06:5c:75:b3:f4:cc:
         cf:ea:c6:2e:ec:c9:6f:71:79:b9:e9:a4:4b:60:71:74:ab:bc:
         a6:46:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----