Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File:                     mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier:          suA1pt4SXxxRYZ5l9bkLb8evmWapMINUg1jx62KU7L8=
Subject key identifier:   7A:90:01:35:33:8C:98:32:22:47:D3:34:BC:7B:75:E2:E4:A0:57:AE
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer:       /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial:       01962E61802879F0B160A180A1C744635BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
                          2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: EwflI3WgD/uKS8mmEircr9F4/avzw8BdlmHKGvGV/8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:28:79:f0:b1:60:a1:80:a1:c7:44:63:5b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=7a900135338c98322247d334bc7b75e2e4a057ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:4b:98:6c:d7:d5:33:c1:3b:c4:4c:f0:f9:
                    18:e5:d3:b7:67:a9:b7:1b:ac:f8:5e:dd:33:49:41:
                    1b:34:57:e4:9e:ce:1f:98:6b:63:cf:15:69:e0:a7:
                    26:ea:40:d2:d4:57:c4:d4:e1:ec:fc:20:15:61:48:
                    84:8b:cd:d8:d1:2c:63:27:b9:37:df:76:f1:27:34:
                    24:34:ac:fb:87:00:7f:ed:f2:c4:7a:97:b2:ef:e5:
                    ad:ec:8c:37:0c:1c:63:f8:2e:99:65:ba:1e:e6:3d:
                    a5:c0:65:40:a0:f1:e8:6a:fd:e5:f6:4d:41:ec:b6:
                    da:7d:27:3b:b4:23:30:56:88:0d:c7:19:4c:a1:bf:
                    31:d2:f3:ee:34:d2:1d:ab:4b:68:01:7d:1e:c4:ba:
                    36:80:8e:b0:47:6c:3c:41:e7:a1:cf:82:1c:aa:87:
                    7f:4e:75:a1:06:1e:3d:4d:b5:a8:92:32:70:bb:15:
                    01:96:49:5c:b6:f6:7c:f7:f0:c9:ad:6e:db:d3:4f:
                    fa:a4:12:68:02:83:fe:e9:db:49:f9:99:4f:e9:04:
                    dd:79:e6:fb:83:5f:7f:10:ce:85:29:36:62:3f:fb:
                    3c:1e:16:80:bb:61:6d:19:ba:27:e1:08:c0:48:6e:
                    91:f1:c3:a4:0c:2e:1f:00:09:e7:4c:3c:d9:55:92:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:01:35:33:8C:98:32:22:47:D3:34:BC:7B:75:E2:E4:A0:57:AE
            X509v3 Authority Key Identifier:
                keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:15:4f:1b:7e:97:a4:7b:0f:e3:3d:d1:e1:ae:64:79:23:
         fb:64:2a:1a:9b:ef:14:fe:3d:2a:32:eb:20:1d:59:7a:a2:0e:
         ce:32:bb:5c:aa:18:16:fd:5c:dd:c1:17:46:f7:c3:bb:9d:74:
         8f:ab:18:7c:99:9e:fd:81:7c:63:3b:f4:6e:ba:2f:22:41:d1:
         8f:f2:26:94:40:76:d6:0a:ef:95:33:6f:c0:74:34:ff:34:e9:
         a4:a7:3b:99:8a:2d:c3:2e:de:7f:9f:35:b6:c6:57:24:ff:c0:
         4f:80:b0:d7:a2:7b:1b:27:05:64:b1:bd:11:bf:1f:c0:11:ac:
         ab:56:1b:e0:dc:fd:1c:71:1a:af:c2:08:f0:8f:3d:03:73:11:
         cc:98:b6:59:80:88:86:47:15:8c:b7:0b:c2:20:77:1b:33:25:
         ee:ea:84:41:d4:8c:06:4f:64:6b:f0:ec:7b:bb:fe:34:40:d7:
         1b:fa:98:66:67:18:51:ce:43:18:6f:97:d2:2a:9f:00:45:02:
         ea:10:dd:f9:f7:2a:2e:1c:78:8e:39:5a:88:e0:7c:d3:f5:7f:
         78:93:ab:0f:03:db:4b:1a:fc:69:99:ab:94:1d:b5:09:64:5e:
         43:4a:92:d1:ef:6b:c6:33:17:4b:df:5a:35:42:38:82:da:8f:
         43:7a:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----