Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          T1lpX2p0ZqDk4ImOcv31LUatmz2465tmIvLf5BgUtyE=
Subject key identifier:   00:6E:71:42:21:20:E5:54:E9:11:F2:20:81:DF:95:92:26:A4:2D:D2
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       01962E2AD717AC7EDB7248C76E9D62F2D41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: HsCzXJCJSFJErDkMJEMk4AIEpmUYRF/54uBbm2GAH9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d7:17:ac:7e:db:72:48:c7:6e:9d:62:f2:d4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=006e71422120e554e911f22081df959226a42dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:e6:24:15:01:1c:41:9f:c4:fd:47:97:9a:
                    3f:94:43:90:dd:ee:f0:16:ca:1f:46:72:06:61:1f:
                    8d:df:42:2c:1e:4b:04:48:96:ea:fc:da:0a:ed:79:
                    5c:cd:d9:d1:3c:72:14:f4:f2:ca:73:27:7e:12:5e:
                    a8:b1:1c:ff:36:f6:74:1c:60:b8:8d:05:f9:d9:4e:
                    ef:8e:15:be:c0:2c:bf:32:60:d4:bc:69:99:ba:d2:
                    6e:38:d5:af:81:67:04:33:42:59:66:7e:2d:9b:bc:
                    2b:6c:44:73:e6:8d:53:98:98:3d:c3:e2:3f:5c:c2:
                    0b:73:75:d4:3b:bb:2a:d6:4d:d7:66:08:d0:0e:05:
                    d5:5c:df:5b:14:63:85:45:dd:83:63:e0:1f:c9:d0:
                    1a:b0:fe:3f:ed:e1:c7:5b:20:7f:03:79:9c:fd:e2:
                    d5:b8:9c:4d:60:e3:a7:01:c2:9c:84:21:11:db:1f:
                    56:8b:57:f9:f1:45:66:44:cb:81:2a:f7:d4:25:87:
                    b2:39:24:36:d0:d0:a8:fe:ac:35:2e:35:8b:45:62:
                    25:a1:b7:34:ec:77:2e:c6:f4:1b:ad:50:b4:25:43:
                    7a:e9:c1:5b:17:0f:38:31:d6:ad:1e:a0:13:84:00:
                    dc:63:e4:20:4a:f9:4d:37:4b:59:b5:20:d4:69:dc:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:71:42:21:20:E5:54:E9:11:F2:20:81:DF:95:92:26:A4:2D:D2
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:93:7d:68:74:61:df:ee:3d:e4:69:9a:9b:8c:1b:40:46:
         85:e2:4b:02:8e:8d:9d:b5:0d:8b:33:dc:1b:0f:a0:28:73:bf:
         18:c6:18:ff:c6:2d:6c:37:13:fb:f1:c1:24:0c:af:c3:e0:ce:
         4d:33:f1:e7:d2:00:98:b7:37:51:63:4d:ed:02:a8:3c:eb:fe:
         12:1a:66:dc:5b:db:1c:7e:2d:ed:b8:23:98:5d:f0:5d:84:3f:
         74:99:09:0b:4f:25:ba:67:f1:63:df:b1:b1:f8:9a:2c:3e:ee:
         4c:42:33:c2:76:ee:16:0e:fe:ba:07:fb:ee:a2:f0:ad:5b:22:
         9b:5f:7a:b4:ce:a9:56:4c:91:a3:51:89:43:b3:8d:72:e7:63:
         2a:3d:9c:16:96:de:92:30:4c:b7:d8:8f:02:51:9e:cd:b6:3d:
         71:d6:27:48:cf:4a:ec:41:a2:94:a9:b9:b4:89:b7:1c:7f:56:
         f1:65:f8:20:90:9a:92:40:19:30:11:9a:ae:9d:06:c9:6d:70:
         b0:3b:8e:1b:cd:c9:15:89:c9:88:c5:fd:20:f3:9a:f6:87:0d:
         34:d9:a5:71:cc:21:3d:73:c1:30:3b:04:a6:62:1c:5c:ae:87:
         0f:12:fe:29:86:a7:7b:e1:40:0e:ad:9e:be:d5:f2:d3:64:9d:
         f2:f4:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----