Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File:                     Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier:          prOYsCbBWwIdmbkgPeoFVpJ1Ruj0GPR2oQrJRmbP370=
Subject key identifier:   40:B5:99:13:87:D5:8B:5B:37:A4:51:CE:EE:D3:6D:B9:DA:1A:75:1D
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer:       /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial:       01962FAB26471A6A71D99F8129D4B8C33FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: bzHSt5nBnsq+nOtoPXkl/30kOWIwUrB8fpbKoE/Ar40=)
                          2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:26:47:1a:6a:71:d9:9f:81:29:d4:b8:c3:3f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=40b5991387d58b5b37a451ceeed36db9da1a751d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:ee:13:d3:c8:67:ce:d6:2a:23:25:2d:aa:
                    5d:15:1c:05:2f:79:c1:dc:89:07:78:b6:fd:86:1b:
                    ef:25:d7:00:c5:ea:b3:bd:29:3b:33:25:c4:45:59:
                    da:cd:56:66:20:b2:34:42:89:1e:d5:45:4b:cb:fb:
                    6c:ad:e2:d2:e6:5c:10:cc:2f:50:04:fe:fb:55:6b:
                    6c:ba:db:5c:fc:0a:9d:3d:05:e7:82:60:fc:a7:28:
                    de:a8:2e:d8:b6:aa:a5:c9:bc:96:ef:5f:14:b2:ab:
                    02:6e:e7:98:6a:b4:75:c4:67:10:1a:92:9e:61:70:
                    09:8a:57:27:17:05:d2:22:4c:48:f5:79:47:10:1f:
                    5f:2a:c4:f5:ba:59:ae:01:59:30:d4:b8:2b:0a:d5:
                    e9:b0:5d:37:7d:ad:71:27:bf:bd:83:0a:e8:c0:9b:
                    87:3d:9d:78:b2:b8:24:87:f2:fd:5e:4a:2a:44:48:
                    0e:28:ea:fe:f0:f8:da:17:23:b5:96:da:b5:c8:37:
                    6b:36:e2:fc:03:f6:fd:7a:85:23:16:bc:41:4e:9c:
                    93:70:86:d2:1b:f7:35:ad:79:a4:b0:ee:f0:b0:dd:
                    f3:fc:e8:fc:68:a8:70:08:4d:77:4b:5e:39:94:db:
                    87:82:03:ae:d4:5d:ea:14:b5:32:87:d5:cb:66:44:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B5:99:13:87:D5:8B:5B:37:A4:51:CE:EE:D3:6D:B9:DA:1A:75:1D
            X509v3 Authority Key Identifier:
                keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4e:f8:0d:92:fa:c8:34:ce:aa:4b:1a:14:cd:d7:35:79:c0:
         28:b9:18:1a:e2:a7:87:93:42:03:bb:47:6c:b6:9a:22:58:47:
         c6:90:b8:87:a1:25:cc:a8:ad:34:70:2e:94:e8:0e:24:f2:c3:
         ab:9d:7f:76:7c:66:e2:f1:a2:e0:a3:74:05:5b:77:26:2b:5e:
         e7:5b:7c:06:49:f4:e0:16:48:c9:00:ba:9c:aa:47:2b:f1:3a:
         0d:04:f5:20:78:3a:ff:6b:8e:52:32:e4:c3:40:6b:38:03:c8:
         4f:4a:77:0a:3c:e9:ce:a0:c2:a9:7c:db:d1:46:83:2c:ff:db:
         83:89:81:6f:ca:1f:1e:5d:e3:05:27:b9:59:c2:aa:24:8a:94:
         c0:74:78:2e:36:b4:6c:77:05:75:9e:78:a1:14:8c:6d:e1:98:
         44:c6:a0:44:59:33:89:08:2d:06:27:27:4f:bd:21:41:6f:79:
         ec:ef:a1:5f:3a:fe:e4:75:5e:10:1c:3b:6c:2a:4a:be:ca:a7:
         73:97:62:2f:9a:da:6b:74:52:db:f8:5c:3a:95:d3:65:47:7a:
         e5:48:39:b7:15:10:16:65:05:5f:ce:c2:7a:57:ae:af:68:a7:
         de:10:b1:f7:90:80:77:df:bc:17:49:0a:76:ca:54:eb:b6:12:
         12:3a:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----