Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File:                     RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier:          3NV5kG2WIZ4SGZeYQTYsjJjOy1dOMI28nhTsKpPM42U=
Subject key identifier:   6F:35:59:5D:E9:F9:34:2B:5B:01:CA:AB:80:12:0C:E3:87:2B:98:B2
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer:       /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial:       01962E9913B5E8FCCCF0EE410EAC3D594BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
                          2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: q0qwsqjqAokQZjaxRhuUFZr41PWqTMNcGTbLnsZFQLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:13:b5:e8:fc:cc:f0:ee:41:0e:ac:3d:59:4b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=6f35595de9f9342b5b01caab80120ce3872b98b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:35:2e:84:e5:38:3d:96:53:3e:1d:2d:28:
                    9c:99:94:6a:2d:a3:44:42:5a:27:10:8a:73:91:bd:
                    4a:26:35:c3:6d:83:ed:a3:09:b7:bb:37:a1:1b:16:
                    23:b7:b1:f8:0c:48:40:b1:7d:45:b1:c4:fd:2d:11:
                    b3:2b:fb:77:49:35:0a:87:6a:27:d6:ff:12:71:59:
                    f1:5a:88:a8:bc:e5:f2:62:fb:ea:21:5c:a5:a6:6d:
                    6b:32:48:20:5c:b7:e8:f0:82:29:5c:7a:20:bb:34:
                    7b:6a:07:c9:39:56:47:e2:2f:ce:a4:c5:4f:6b:2a:
                    34:a6:9e:02:28:44:7b:ec:0d:96:7c:6e:ab:16:49:
                    4e:0c:bf:40:fa:6d:d8:db:ce:ad:9c:a8:f8:54:8d:
                    e3:a8:26:40:8f:83:85:23:7f:55:53:b2:f4:29:49:
                    9b:48:f6:37:4e:9f:72:a8:16:61:8e:dd:68:e9:41:
                    30:1c:ba:9e:44:23:ef:36:bd:14:b6:77:bb:c4:70:
                    2b:4b:4b:c1:8e:a5:34:17:93:5b:ab:22:4e:70:f1:
                    ed:f8:ea:9e:78:1d:f2:8b:24:ae:7e:dc:31:eb:6d:
                    58:45:26:f2:f0:48:3a:5f:a2:dc:74:5b:bc:2d:e9:
                    e5:2e:6d:c3:d0:51:54:b0:f2:d0:b2:85:1a:8d:66:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:35:59:5D:E9:F9:34:2B:5B:01:CA:AB:80:12:0C:E3:87:2B:98:B2
            X509v3 Authority Key Identifier:
                keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c1:67:ce:38:67:3d:0a:93:a1:44:ba:57:5f:bf:d2:71:af:
         04:04:66:25:06:6e:d4:be:30:d1:25:1b:a3:44:fb:2e:da:bb:
         d0:d4:42:70:99:50:24:ac:47:1a:03:1a:c9:ff:47:65:74:3f:
         11:96:0e:47:ee:48:b0:6d:ca:17:7e:ae:ee:b9:fe:b4:bc:a7:
         1d:37:10:01:ab:6a:34:77:6b:1c:c0:29:1a:ba:83:19:27:54:
         3c:00:7b:95:a8:7b:5d:91:5b:d3:79:a0:b6:75:6b:48:91:49:
         3e:31:f1:75:44:fb:e0:d7:90:fc:1c:ac:23:d9:65:be:43:2c:
         d1:50:45:94:68:df:f6:f5:87:5e:3d:02:d6:1e:e6:74:a0:5e:
         92:9d:07:b0:30:80:96:8a:41:39:13:a0:42:1a:99:80:a2:59:
         07:8e:70:e7:4d:d2:14:8a:20:38:74:9a:70:36:a8:ca:0a:85:
         a2:ca:0f:6d:61:2f:a4:0b:b6:19:ad:88:4f:71:85:6e:73:75:
         09:83:9a:b7:4d:21:ca:90:1a:02:c0:f9:db:79:23:f5:fa:9c:
         0c:70:c0:03:85:af:42:82:73:21:f5:0d:75:f2:47:58:7b:48:
         e1:bc:d6:c5:c2:f9:10:8a:6c:ce:73:0a:01:af:6e:4c:7a:6d:
         69:cf:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----