Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File:                     il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier:          3k4TCKFwYVgtROdvV3iyPsELltnBiwzH9h9hjVtvH6w=
Subject key identifier:   54:EA:AE:85:E7:18:7D:D8:A0:B8:9F:93:5B:79:DF:F7:CF:1F:63:EF
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer:       /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial:       01962DF43171244F35C0CE1471B05307E697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=)
                          2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: 1eTuJ3M6N25OoLSygRW4rvcwM8GFbMS9/kj+bpzvkwA=)
                          3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:31:71:24:4f:35:c0:ce:14:71:b0:53:07:e6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=54eaae85e7187dd8a0b89f935b79dff7cf1f63ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:1b:94:c2:4f:c9:ab:21:92:65:ac:42:f6:
                    74:b1:e1:8d:30:75:5b:b4:92:ca:01:b5:ea:fa:3b:
                    65:de:d3:ec:6e:0a:2f:1a:13:87:67:6e:73:00:f2:
                    50:bd:d4:30:b0:ae:7b:1f:07:5a:17:e5:2e:59:76:
                    94:d9:f3:8d:b0:be:cd:9a:00:31:78:98:9a:ed:bb:
                    60:4a:a6:d0:06:8b:d7:e6:2c:d7:bb:b8:d3:6d:c9:
                    46:bc:88:6b:fc:db:0f:df:bf:4a:9c:63:2d:40:a5:
                    ec:69:9b:7b:08:68:d9:e7:88:66:dd:7f:fa:90:57:
                    e5:ad:c5:76:01:12:f6:f5:a9:c1:29:aa:57:b1:2b:
                    d0:7a:c8:95:63:45:bf:ce:1a:5c:89:32:22:1e:17:
                    22:56:03:e6:c4:e4:dc:a1:26:48:cd:a7:65:a9:d8:
                    10:c6:c6:c2:60:8c:86:d5:e4:35:70:3c:db:5f:e9:
                    aa:09:ab:47:55:e2:53:d2:e7:bb:ce:18:c0:d6:c4:
                    98:52:c7:37:15:52:65:a1:eb:ab:b0:95:6e:82:fc:
                    ec:3e:36:65:11:6a:2e:ff:70:98:a7:09:70:f6:7d:
                    45:3f:31:c5:d7:2b:98:7d:95:3b:77:fb:88:9f:da:
                    c8:09:10:c1:b9:f1:3b:55:0e:95:8b:fe:cc:25:f4:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EA:AE:85:E7:18:7D:D8:A0:B8:9F:93:5B:79:DF:F7:CF:1F:63:EF
            X509v3 Authority Key Identifier:
                keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:d7:2b:bc:dc:29:fd:ff:2c:cf:81:be:be:c8:ab:29:c9:
         6b:79:a1:4c:8c:08:2a:53:fd:6f:1a:80:8a:79:0f:e8:84:5a:
         c0:80:1e:2c:9d:ef:4e:dc:9c:60:81:25:97:fe:33:f2:b0:b0:
         57:71:8f:f7:ac:8a:2a:94:c4:7f:da:54:ff:66:a0:54:ee:d5:
         da:d3:52:13:db:49:7f:d8:be:0b:ab:a4:38:3a:99:6a:4b:e4:
         f8:de:b6:c9:8e:97:73:b2:66:9c:0f:03:eb:4d:d0:e0:01:c3:
         6d:1b:cd:ff:f8:5d:6c:13:0d:90:ff:15:0e:b6:bc:f5:91:4e:
         86:d8:df:4f:b3:a0:93:0a:9f:83:d2:e6:a3:16:d7:d3:73:f7:
         fd:55:5f:0b:57:b2:14:3c:23:d1:f3:6d:aa:96:b6:65:f5:55:
         e2:27:03:04:9d:0a:a9:9e:d2:ac:97:1b:ac:c1:dd:e0:51:f1:
         20:f4:99:72:12:57:07:9e:61:02:3e:14:19:d5:4b:c4:d2:42:
         0c:81:42:2a:7d:37:d0:61:80:be:aa:12:09:18:12:46:23:84:
         75:06:ca:1a:06:08:1d:f3:d4:e4:7f:c9:20:da:9d:74:a4:31:
         0c:22:35:60:63:27:b6:a4:f9:43:a0:08:d6:5f:0d:c8:35:f0:
         d8:92:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----