Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File:                     C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier:          JW1rlqC2N4M6z6EccBTqghUeq4ddqBzdrzxvG6LztjE=
Subject key identifier:   1F:9F:C4:85:E0:7D:71:1A:0D:5E:34:83:64:93:CD:64:8A:F9:58:E2
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer:       /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial:       01962FAB42EFBBDCA04E5A6F4FB5FE7A0867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: BW3A__rx2CbIUTDEiMn83o5J6Rc.roa (hash: +W0IBSEcBlBjIDnc0zQLUrT47ugJKv3Fw0kJeub5rgs=)
                          2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: bbCraVBmVrjbaYO+kgkGs717R2L8lUp0o/WTItkotyI=)
                          3: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (hash: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=)
                          4: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (hash: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=)
                          5: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (hash: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:42:ef:bb:dc:a0:4e:5a:6f:4f:b5:fe:7a:08:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=1f9fc485e07d711a0d5e34836493cd648af958e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:46:77:91:bb:37:21:f9:07:1b:d8:e1:34:
                    db:0f:ae:a1:7c:d2:9b:d7:db:27:c3:b9:61:be:47:
                    03:8b:48:34:0b:19:64:e6:a6:8b:da:08:09:f1:25:
                    62:e8:3a:d3:16:fc:ba:78:85:8a:70:96:07:86:91:
                    40:e2:ad:26:63:3a:a2:2d:42:f6:6a:13:20:41:7b:
                    5c:76:9f:c9:34:0e:47:6e:81:80:b0:79:01:2a:f4:
                    96:de:7e:0f:f9:05:84:9f:ad:7d:75:4e:0d:8f:21:
                    44:30:a9:e8:cd:db:11:9a:bd:5b:40:b1:54:6e:06:
                    75:37:87:42:d1:8d:1b:ee:49:14:43:c7:d7:41:17:
                    3d:25:2d:f1:c9:0b:e4:5b:8a:af:51:97:bd:4e:dd:
                    a0:25:75:ae:97:29:d3:ab:98:dd:cd:da:04:13:be:
                    7f:f0:2c:a8:b5:f3:92:97:5f:87:39:68:73:d3:4a:
                    1c:75:a6:c9:47:fb:2d:df:38:a2:66:71:8b:02:25:
                    28:c7:03:26:b7:48:64:ab:71:c4:a9:85:5e:eb:03:
                    53:8c:ab:24:87:39:2f:39:49:f0:90:19:2b:bf:09:
                    69:0d:ee:5f:07:6b:d5:0a:28:85:a8:4f:55:29:bd:
                    09:74:29:74:bc:a7:4e:be:9f:97:68:7e:a9:a0:84:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9F:C4:85:E0:7D:71:1A:0D:5E:34:83:64:93:CD:64:8A:F9:58:E2
            X509v3 Authority Key Identifier:
                keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:96:6b:ef:d4:a6:54:df:52:21:6e:16:4f:ea:6e:d9:75:
         5e:39:05:1d:5a:c3:fd:02:4a:f3:c0:75:36:69:1d:76:27:de:
         01:96:39:eb:a0:d9:9b:ad:1c:71:d6:37:13:ef:9a:c5:44:32:
         ac:7d:a9:b7:d3:bd:98:71:ce:b2:f1:69:ca:38:65:ed:dd:89:
         9f:f6:b1:61:8b:df:20:f7:68:5e:98:41:1e:6b:bb:7b:b5:9f:
         05:85:9d:63:91:90:c7:ad:78:2c:04:44:58:33:de:4c:4e:8f:
         bf:f4:cb:72:25:18:d7:fb:34:c4:84:44:27:7c:98:de:7d:20:
         09:29:e4:97:5a:a5:2f:86:c7:b6:6d:e0:10:f6:82:aa:64:58:
         38:90:93:b4:0b:40:01:d4:cd:42:cc:70:a7:dd:32:14:6e:fd:
         09:9b:6f:68:3b:fe:ee:33:d1:aa:63:17:0d:75:74:04:c2:73:
         d0:10:d9:85:f0:ac:15:62:99:fc:b9:27:bf:46:cb:1d:74:f8:
         ce:80:6c:f0:c3:80:72:3a:0d:64:bb:35:40:8d:33:62:77:bc:
         6e:b3:03:2f:fe:da:bf:9f:d8:e0:2d:a1:f0:40:46:ae:20:84:
         d6:55:ce:49:fc:cf:51:de:5d:6d:09:4f:b2:f9:bd:56:7c:3b:
         aa:8b:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----