Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
File:                     2pa1va-ygzLa_oR87RT3pfrUXmk.mft (raw, json)
Hash identifier:          BYoZjvlhYwi4FoHAoNzJ0acZgOfnFREkLgXcR11nLLk=
Subject key identifier:   14:59:96:57:D6:3A:D1:65:6D:19:5E:27:93:DD:18:A2:E5:2A:2A:49
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Certificate issuer:       /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial:       01962E986E0A3C5953E84E16B33F1BAD4B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: 2pa1va-ygzLa_oR87RT3pfrUXmk.crl (hash: BN1JL0owLGFe3Xl32WxUBcnPs0tZkh3tccHWkIfFeww=)
                          2: 99kZ91L5k4nve2PYsWtipJThPHU.roa (hash: bVtLb94sDBWJmE1C3lJHiBUqgO9xT7zdCZpTZaX8mXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6e:0a:3c:59:53:e8:4e:16:b3:3f:1b:ad:4b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=14599657d63ad1656d195e2793dd18a2e52a2a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:18:c8:03:f5:41:59:c1:ca:07:90:e6:02:
                    f1:5d:ba:39:24:26:00:91:42:7c:a9:d3:e5:1e:98:
                    0c:66:51:80:c4:1d:0f:04:19:17:93:94:60:94:3f:
                    a1:2c:a1:dc:a5:ae:1c:4c:d6:f0:c7:2f:06:40:04:
                    36:db:23:53:38:d0:71:20:bc:df:db:05:07:5c:e5:
                    ac:42:cc:b0:1a:23:c1:04:29:c4:3f:ee:09:09:cc:
                    a2:75:e2:c5:3b:be:cc:25:04:03:c0:26:9a:35:d4:
                    08:70:e9:e0:22:8d:a9:d1:50:bc:e9:fa:6b:46:10:
                    70:d3:62:49:2e:d1:55:ae:18:50:b2:05:9d:46:4d:
                    7f:06:ed:d4:62:f8:71:61:10:68:7c:0c:75:12:ba:
                    15:ae:7a:3e:3b:ca:f8:cc:d3:04:b8:f3:cf:39:16:
                    c4:d1:f4:59:fb:77:49:86:b9:93:9d:5e:81:91:c2:
                    04:32:26:6a:2f:8a:74:35:46:fa:59:ae:db:98:db:
                    d0:c5:c7:a8:a4:92:57:05:f5:6e:f3:0c:e5:67:c5:
                    b0:dc:2f:19:cd:9a:01:77:13:08:3f:71:88:30:c7:
                    83:2c:66:aa:34:fb:04:69:2f:88:af:5a:18:68:d2:
                    1f:4e:2d:9e:02:80:14:fe:8d:2f:d4:26:c3:f0:7e:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:59:96:57:D6:3A:D1:65:6D:19:5E:27:93:DD:18:A2:E5:2A:2A:49
            X509v3 Authority Key Identifier:
                keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:ab:6f:2a:ef:7e:74:e3:60:87:33:4e:6c:13:37:4a:e5:
         9d:26:a1:05:a5:20:15:e4:6f:99:e6:61:2b:61:47:dd:62:65:
         e7:7d:9d:51:a9:1e:d5:21:32:49:b7:17:3e:af:7d:e4:e0:e8:
         84:13:44:8e:12:f3:7a:e6:13:f8:33:2f:14:64:78:e6:94:7d:
         e1:36:ae:b7:b7:a5:b6:d2:54:37:eb:3f:7b:7c:94:44:1d:6c:
         53:88:48:76:10:b9:8e:08:14:c5:f8:4d:26:52:57:80:3c:8b:
         f6:79:55:c6:4d:67:a6:f8:27:6c:3d:a6:3f:e2:34:10:c9:65:
         cd:5d:c5:47:2e:b9:2f:33:d3:a7:bc:f1:05:db:05:e0:63:72:
         30:51:ad:f7:6b:06:7f:db:71:08:bd:ba:f4:45:7f:c6:18:1d:
         27:01:f5:27:79:ef:1e:9d:f9:a6:a2:05:54:94:e2:49:d5:3e:
         90:aa:d9:27:b3:e6:72:38:22:e4:f9:36:eb:2c:5a:67:9a:c2:
         72:ea:76:7f:25:c5:53:20:33:2e:9f:5f:27:99:a0:c7:21:15:
         91:c7:c2:8e:1d:df:dc:56:2a:ff:eb:99:09:7c:f7:08:99:c4:
         b4:32:b8:6e:91:de:c0:04:fd:cd:ec:7b:32:d1:0e:80:a1:0d:
         9e:da:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----