Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          I1rqqRxlKb1R6gI9lY7o5+yKpIajxuzYkU0ZoBaw2+w=
Subject key identifier:   17:69:89:5C:56:4C:35:FE:8A:25:3C:01:08:A8:AA:FE:56:3C:EF:88
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       01962E2B343B7FA2ED39A67CFE861E85AF58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: q2W/siqliV3ODXS8XamEGU8JH1XfRFbPcBwiUusaIC4=)
                          2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:34:3b:7f:a2:ed:39:a6:7c:fe:86:1e:85:af:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=1769895c564c35fe8a253c0108a8aafe563cef88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:cf:af:3e:a1:2b:1c:e5:d4:16:45:9b:91:
                    77:fa:27:7f:30:2f:49:c8:8c:6c:8a:32:57:50:ac:
                    b9:0c:e1:53:39:49:6a:3c:ad:1d:37:c8:be:3a:22:
                    97:c7:f0:8f:5e:14:32:4a:d4:fe:4d:0c:ff:e7:77:
                    21:d2:32:02:02:20:95:27:03:c9:3f:4b:13:30:06:
                    e8:c3:a3:b3:2b:1f:3b:b4:61:50:af:6f:ff:6c:89:
                    c4:42:15:e3:74:ef:3b:61:c7:d9:f1:b0:52:c1:63:
                    47:54:61:1d:16:62:e3:7e:57:03:fb:d6:38:78:32:
                    83:14:65:9f:68:9c:a3:b3:93:46:de:f4:00:25:d7:
                    10:c5:b2:17:78:c1:23:df:70:5b:ab:d7:3f:07:77:
                    a9:cd:11:94:83:20:f4:3d:02:73:62:ea:92:99:68:
                    67:e3:d8:ee:72:66:98:6e:95:72:09:cc:22:64:29:
                    65:07:fb:51:ea:06:a9:2a:20:ba:f5:8a:40:ce:9b:
                    ca:ed:74:fc:a8:ba:84:b6:e3:d7:5e:cf:79:97:45:
                    69:d2:b9:17:67:4a:ad:33:c4:a9:fe:83:a0:8c:71:
                    12:da:59:3b:41:2f:6f:ad:0f:eb:04:f2:de:08:0d:
                    55:cd:04:dd:58:37:2f:43:10:47:58:8b:38:1a:6a:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:69:89:5C:56:4C:35:FE:8A:25:3C:01:08:A8:AA:FE:56:3C:EF:88
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:50:82:2b:18:c3:3e:50:7c:57:56:36:67:6b:d5:b7:e4:fa:
         7a:f4:24:e1:1a:cf:b0:3a:c9:a5:d3:38:34:79:ac:bc:f8:a6:
         da:69:b2:7e:39:5c:57:8f:b1:dd:d4:12:0e:47:d1:f2:02:90:
         06:c8:bb:54:ef:db:7d:1f:53:69:63:f5:fa:ce:bd:7d:f2:08:
         99:77:2f:90:3d:58:d6:ec:7f:b4:9f:4b:6e:19:da:18:67:27:
         37:49:25:f1:f6:49:be:b7:2c:d6:fa:e0:e7:29:06:8c:a6:84:
         ed:15:e3:d6:da:44:26:86:1e:71:36:eb:7c:f9:ed:c9:05:68:
         bf:0a:3d:89:b7:64:44:f2:92:a7:49:33:91:4d:69:09:ad:32:
         ff:fa:6d:20:52:e6:6c:af:78:ca:83:95:ae:42:c2:2a:72:3e:
         b5:e5:34:89:a7:52:c3:26:e0:5c:ad:46:c4:b1:12:2a:a9:ad:
         4c:a9:9a:42:77:c0:0a:a1:7f:7f:70:75:a2:64:34:62:04:b2:
         9d:35:1c:ae:c9:3d:f6:67:6a:f3:43:51:28:77:8b:62:e8:03:
         84:7e:85:96:a6:6f:06:10:fc:8a:d8:89:39:96:d7:47:dc:73:
         4e:c1:5f:58:6d:78:80:d4:fc:52:b3:13:d2:62:c4:33:0f:c6:
         d2:18:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----