Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File:                     lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier:          WtIXtBgXWFr0mmnWgT5+BBCvhWfHy21jAefe3npJmGo=
Subject key identifier:   6A:F8:93:53:1D:AD:83:8A:60:4F:C6:A6:BE:8C:2B:FB:52:68:28:30
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer:       /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial:       01962F3D7D75908E096BF7853EB6D312D1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: qOrodvYAk6Hqo05MfGK/c5rhfIT4RBbuBWvGU7JnfY4=)
                          2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7d:75:90:8e:09:6b:f7:85:3e:b6:d3:12:d1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=6af893531dad838a604fc6a6be8c2bfb52682830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:0d:14:fa:11:74:33:13:c8:31:d8:6a:e3:
                    73:e4:4d:77:e1:13:0e:2a:80:e7:ca:ce:c9:41:e7:
                    90:2d:ae:fd:a0:52:32:9b:3f:8d:7f:c4:6b:76:a9:
                    d8:38:1f:ba:0d:15:76:93:91:00:12:77:a6:80:dd:
                    98:0b:6c:71:1f:28:16:54:ae:f4:35:93:ba:d9:d5:
                    d7:23:10:d5:05:16:8f:c2:2d:44:34:b0:cf:76:28:
                    a3:a2:bd:ff:2d:aa:4c:14:02:6a:d8:14:a2:6e:c6:
                    2b:e7:7c:5f:1b:ed:fe:c2:e2:33:16:03:42:15:f8:
                    98:e7:ba:dd:c4:c0:7c:8e:29:c8:2e:ad:60:ba:a3:
                    14:7f:98:a7:bb:97:65:56:34:ba:84:74:d3:23:bf:
                    02:ad:1c:d7:1e:2d:4d:95:e4:5c:eb:d9:2a:08:a3:
                    1c:4b:e9:73:76:ed:45:0e:f0:39:d6:d2:ed:35:0d:
                    f1:53:f0:03:a6:2b:cb:fc:0e:0f:85:a8:1a:ea:90:
                    ac:13:24:e7:c5:8c:b9:23:3e:df:10:20:3c:f0:de:
                    03:d8:4f:0d:25:45:f8:f4:d4:9b:68:80:42:2a:ce:
                    77:11:73:0f:fa:08:d4:b1:7c:95:79:81:2e:3d:38:
                    ed:d3:00:13:76:72:aa:cb:75:9f:39:d5:6c:95:f9:
                    5b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:93:53:1D:AD:83:8A:60:4F:C6:A6:BE:8C:2B:FB:52:68:28:30
            X509v3 Authority Key Identifier:
                keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:93:68:2d:43:b4:dd:3e:44:38:b4:47:c9:e2:8d:a3:3c:
         83:22:c0:54:c4:33:0e:4e:5b:33:ab:69:17:4f:b4:58:c6:70:
         5c:20:b0:1a:e9:b0:70:25:42:18:86:69:cd:3e:a7:8a:f8:a7:
         b5:be:69:c8:b9:62:7a:95:36:43:91:db:69:7b:e9:3b:c6:e9:
         07:a1:b2:4c:8e:b5:25:bb:b1:33:9a:0f:d5:9d:b5:ef:e2:03:
         d5:ae:df:e7:dc:78:08:c5:a2:25:68:f9:d7:e5:41:3e:c5:5b:
         c7:09:fb:9b:8a:3a:c8:e4:be:9d:ec:e2:8e:fe:79:aa:ca:97:
         26:f6:68:12:bf:66:34:7a:fe:d3:d3:e3:2d:6e:7f:cc:42:cc:
         24:f9:46:fe:48:0e:f2:db:4a:28:15:7f:57:db:6f:a3:fb:27:
         a6:05:6b:20:2f:52:5b:ba:2d:a0:f9:a0:dc:77:21:ea:a1:3e:
         3f:51:40:f0:59:65:3c:5b:51:a9:26:7a:4c:54:e3:25:2c:57:
         94:85:f7:c2:4b:b6:3a:d7:d4:ea:21:34:c7:3a:8b:2a:83:6a:
         54:1e:0a:0c:04:13:69:96:5a:03:49:e8:67:a7:f4:a3:fc:d0:
         62:5d:2f:fb:8f:24:89:b2:47:9e:f5:7d:7a:f7:33:ba:18:ba:
         76:b6:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----