Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File:                     1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier:          3AR+n2mVG2fMmVWLxiIhMhDGEuwj01J2KulkQxCl4wU=
Subject key identifier:   A2:04:3C:2C:AB:9F:EF:17:CE:62:F4:93:80:D3:4B:65:49:01:29:D3
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer:       /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial:       01962F069A975A7048CFA47022D26C4ED226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number:          014D
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=)
                          2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: W6UUzQLzRiaeZ/Bp6E+jAxtSdRPxBTIyg8e6ccpqQdg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9a:97:5a:70:48:cf:a4:70:22:d2:6c:4e:d2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=a2043c2cab9fef17ce62f49380d34b65490129d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:97:3d:0c:02:6b:7b:78:25:b6:fa:d4:1f:
                    19:a1:6e:93:09:48:67:23:fb:25:e5:c8:f1:a3:e8:
                    37:49:92:1a:5f:90:15:e8:cc:24:48:37:d0:ea:84:
                    52:c9:7f:50:79:32:b4:70:a1:b8:25:e2:2c:3f:ab:
                    39:ca:b4:5d:6c:98:e8:5b:33:35:87:56:b8:8b:ff:
                    32:0b:a0:66:1b:fe:00:2f:ce:3c:28:94:0b:01:34:
                    1a:51:04:05:5b:49:0c:8d:9b:61:4f:8f:95:11:41:
                    70:e8:19:25:b7:2d:26:41:ff:54:e0:81:ec:36:dc:
                    be:34:ac:c8:33:89:53:a3:33:f8:c6:f4:d4:7e:29:
                    b2:a0:ba:bf:1f:22:1a:a5:27:0d:ed:81:55:ba:e9:
                    f1:40:be:37:9f:89:d9:1a:7c:1b:ae:1b:c1:b3:d9:
                    7d:12:95:82:c5:a5:70:d3:3b:0b:9a:59:ce:0b:60:
                    d3:09:f6:fd:05:5b:9c:18:09:16:8f:0d:ac:b9:f1:
                    6a:f0:4e:66:5f:72:93:45:ff:4d:16:9a:c0:1a:48:
                    fb:07:84:dd:cf:3d:45:7b:bb:76:1d:ad:6b:6f:3f:
                    d4:9f:91:f4:7d:4c:69:90:bb:1f:44:6b:be:50:8f:
                    8d:31:e8:2e:64:b5:21:91:b8:f5:95:bc:94:49:48:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:3C:2C:AB:9F:EF:17:CE:62:F4:93:80:D3:4B:65:49:01:29:D3
            X509v3 Authority Key Identifier:
                keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:0b:e5:3b:1a:ef:b6:e4:30:68:8a:c9:bb:ea:8b:51:0b:
         bd:4b:0b:b2:e2:d4:4f:c5:b5:22:6c:f5:9a:40:43:f9:c1:91:
         39:18:32:ea:e1:da:f7:b2:2d:af:77:54:05:51:63:c8:bc:c1:
         bf:48:9f:43:c7:3d:96:c5:67:16:b9:c4:63:23:f6:3b:e0:f6:
         26:a7:e0:32:b1:ae:ce:69:0d:14:42:c1:a9:81:17:a8:44:24:
         49:eb:1c:ab:21:46:76:42:97:5f:57:11:e5:5e:e2:ea:f6:f3:
         77:4d:7e:b0:dd:f3:43:66:ad:c3:89:20:21:a8:ba:9d:a6:f2:
         eb:5a:63:1e:50:d8:08:0f:04:4d:d6:a8:76:b2:c7:a8:f6:3b:
         c1:80:7a:1b:76:9a:22:ac:a2:4e:5d:4f:60:b3:b7:1b:18:fe:
         0a:84:c9:91:da:72:81:21:f1:1d:98:08:87:b5:8b:6f:fb:d6:
         bc:7d:7c:74:1b:6d:0a:6f:d7:8f:dd:7e:2a:92:0b:f2:85:c4:
         e3:e0:e2:0b:a5:49:01:58:d8:2c:9a:06:16:89:5b:de:66:14:
         c0:07:0a:c2:9f:69:b6:42:b7:7c:10:eb:c0:cf:a3:92:27:93:
         7f:7c:23:f3:be:b4:9d:6d:08:97:6b:1d:2b:bc:f7:ee:90:1a:
         2a:2f:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----