Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File:                     1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier:          VYIg5Ky3iayhyKFSwV1ZDmQVIXKb/XTVjyaMyMgvfQ8=
Subject key identifier:   69:E1:F7:BB:1E:0E:53:36:75:8E:B9:51:66:66:22:70:1F:AF:E9:6F
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer:       /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial:       01962F067A17ECADFF8E4F1982BF2881E219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: Q6FAOzvx3wbC7Gj7Qq/Qs/VoIvLOLmSeZJtoYNuwcdE=)
                          2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:17:ec:ad:ff:8e:4f:19:82:bf:28:81:e2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=69e1f7bb1e0e5336758eb951666622701fafe96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:58:7e:93:78:da:46:8c:50:ac:cd:18:e3:df:
                    3e:13:86:3e:69:e1:89:44:7d:0b:6d:8d:90:35:7a:
                    34:39:f9:2f:c2:8d:31:5d:82:f4:07:73:e8:99:e7:
                    99:8b:04:16:c7:f6:c1:cc:46:15:47:cf:15:e9:80:
                    a6:84:00:ac:7d:45:75:93:b6:c6:85:12:17:fd:2a:
                    37:8f:30:02:72:09:ec:7b:03:a7:12:2b:e4:b3:35:
                    78:cb:ec:39:f9:62:16:c0:74:68:43:13:69:f7:94:
                    1e:97:a8:ff:5d:31:6b:40:80:2f:8b:c7:d5:7e:6a:
                    b7:b5:56:74:78:9f:c6:b3:93:07:75:33:83:a1:c6:
                    f5:72:76:ae:1c:be:e9:85:87:39:bc:d3:08:69:53:
                    3c:7b:3e:e0:8c:a3:12:13:ba:2d:95:cc:e7:60:d8:
                    29:ce:3d:f6:52:ee:a3:2b:fe:3b:40:0a:08:38:0e:
                    14:d9:36:0a:c5:c8:78:ca:e3:60:88:fd:4f:9a:5e:
                    21:fb:9b:cd:7a:bd:e0:85:5f:34:59:7e:b8:46:50:
                    c7:94:98:74:ee:eb:a4:9e:39:77:e1:74:08:80:89:
                    a5:b9:2e:bc:db:22:81:ac:85:87:51:f3:8a:1e:56:
                    44:63:cb:f1:9f:a7:f5:db:2f:20:9a:f2:20:5b:74:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E1:F7:BB:1E:0E:53:36:75:8E:B9:51:66:66:22:70:1F:AF:E9:6F
            X509v3 Authority Key Identifier:
                keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:9e:f4:00:42:6c:dd:33:4f:23:72:aa:d0:20:a7:a6:b4:
         b4:0b:67:d8:17:0b:ce:d7:3e:85:75:f8:db:e3:34:b2:ba:24:
         4f:78:4e:59:55:07:44:35:95:d6:6c:1a:a9:db:1d:76:55:a0:
         2b:cb:bb:ff:dd:84:9b:95:fa:58:29:3e:87:97:65:b8:70:31:
         0a:a1:12:11:86:21:4b:b5:5a:09:81:27:ed:cc:d2:34:45:87:
         46:55:69:e1:e4:ee:26:df:63:48:df:cb:29:c2:1f:10:fd:e4:
         ff:80:c8:07:9f:be:95:05:00:51:cc:02:8c:d3:df:27:86:cd:
         80:85:ac:d9:3a:b5:13:d9:ef:70:17:6e:35:24:ec:10:63:05:
         a4:ea:a6:ac:ee:e2:44:5f:95:a9:cc:28:c8:86:41:56:36:71:
         ab:f3:91:2d:22:0a:fe:d4:e4:82:c0:3d:21:be:57:7d:ff:c7:
         8d:71:bc:05:3c:c0:c2:8e:0f:ea:37:a7:a1:c6:6d:da:1c:ed:
         e7:2a:93:a5:cc:88:f1:d0:ed:f2:61:e2:2f:8d:0e:2b:3a:b6:
         d5:00:3e:be:f6:d6:85:dc:37:5c:85:7f:59:57:fc:c0:7d:c5:
         89:f5:e1:c8:a1:7f:73:93:51:3d:6d:bf:68:4a:c6:20:9b:8e:
         4b:cc:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----