Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File:                     0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier:          SUI83GcnkQxOfZ5qSkNXLioAurTXBZ4ugtK6RZKR4oQ=
Subject key identifier:   AF:87:22:5D:C7:FC:8E:11:AE:61:0A:B4:09:89:23:9E:65:B5:64:8B
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer:       /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial:       01962F74A4DEAE034A7B63D730DE1CF5D247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number:          14BF
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: 5KLgo0YSv4bYh4eupVwv67H879J5sh2GQC8znsC5MBM=)
                          2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a4:de:ae:03:4a:7b:63:d7:30:de:1c:f5:d2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=af87225dc7fc8e11ae610ab40989239e65b5648b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:80:49:da:e7:0c:eb:aa:ab:46:43:6c:b8:
                    2a:44:55:bb:61:5d:73:10:83:b0:9f:8c:7c:a5:6f:
                    4e:a2:c2:ed:d3:08:af:e6:83:b4:80:d9:c9:b8:4c:
                    b1:79:93:10:05:06:8c:4f:de:59:d2:e7:bb:96:6f:
                    e9:14:5d:d2:72:99:c3:16:fe:33:d5:94:0c:46:72:
                    65:42:e8:2a:8b:31:cd:97:d7:4b:19:47:44:b5:cc:
                    fe:59:0e:67:2e:82:94:ca:96:a8:48:c0:32:29:06:
                    c3:b6:be:d7:50:94:1a:c4:65:1a:72:30:09:b1:7e:
                    40:07:3e:dc:0d:47:1b:2a:fc:28:0c:84:4e:3b:12:
                    c4:43:ef:2a:d1:7d:69:11:5c:bd:0b:4f:6b:e1:b1:
                    be:06:b0:a1:36:90:43:d1:22:d0:06:5f:8d:24:96:
                    5b:f9:ba:a9:22:bd:56:53:46:ee:fd:15:d9:21:cf:
                    76:c2:8c:a2:d1:f5:64:3a:c8:c9:90:7a:a5:1b:ba:
                    75:9e:0f:b5:ae:db:f9:6e:1f:9b:ae:69:a5:3b:7a:
                    f6:b9:35:88:24:95:27:63:7c:60:7f:9e:e0:48:c8:
                    81:69:a9:08:d5:97:54:28:35:78:41:c6:ac:e8:29:
                    0a:9f:40:a3:8b:80:22:f3:4b:dd:9b:43:38:8c:d1:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:87:22:5D:C7:FC:8E:11:AE:61:0A:B4:09:89:23:9E:65:B5:64:8B
            X509v3 Authority Key Identifier:
                keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:76:4b:db:1a:cc:79:ea:87:2e:be:9c:a4:64:08:bf:4f:52:
         44:46:d1:cd:2b:2d:e3:6a:5f:00:a6:e0:8a:4e:c5:3a:33:60:
         4d:f2:91:ce:db:85:a0:83:92:9c:a4:03:e5:f0:c5:cd:25:79:
         96:ba:b3:88:9d:80:c2:e2:33:38:5a:26:93:c1:1c:4c:aa:44:
         dd:4d:1e:5f:9e:08:b9:ba:07:e2:3a:9c:c7:13:9f:71:ec:e9:
         d6:af:70:94:70:d9:e4:bb:f8:f2:d4:1e:8b:62:61:c0:db:d3:
         26:82:19:00:53:0d:fb:78:7a:50:5b:a2:15:43:0e:8e:c3:df:
         46:cf:99:49:4f:9f:18:3f:93:f6:d6:7e:61:ff:d1:f8:01:9e:
         01:53:2e:a1:38:06:b1:31:1b:c4:fa:18:44:cb:f8:fb:42:e9:
         7e:f4:50:d9:63:5f:89:31:60:60:9d:f4:b4:cb:42:e5:ab:55:
         96:a2:4c:48:e5:02:b7:57:6e:99:35:a5:80:5f:4b:00:fd:ee:
         f3:d8:16:25:44:7b:f7:8f:38:ea:74:c5:ab:61:d9:58:4e:0b:
         69:1d:4a:b3:53:5b:f8:5e:16:d5:b4:be:4b:4a:2f:2d:99:48:
         3d:10:64:ea:69:b8:84:96:1a:36:34:55:fa:34:5b:d8:d9:1d:
         e3:6c:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----