Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File:                     rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier:          VFweKx++IKrFmwcRNPMzwq0SVzxbdAlCvBABkjbjcwA=
Subject key identifier:   2D:23:35:05:8B:86:EE:21:1F:40:78:5D:14:0D:31:17:6A:DC:74:A1
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer:       /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial:       01962F0729BA5BEDC477A09BA94F3EB4930E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
                          2: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
                          3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: a5W2NECdhkKY4o8E5Wj0qrXscCKK/G2WtjVfFF0BvKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:29:ba:5b:ed:c4:77:a0:9b:a9:4f:3e:b4:93:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=2d2335058b86ee211f40785d140d31176adc74a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:e0:05:c6:88:cd:36:04:52:17:35:81:e2:
                    3a:b8:41:2c:95:f9:4f:d8:fb:5a:52:27:eb:53:71:
                    c9:33:a0:91:9d:46:0d:82:e5:99:5b:47:08:1e:f4:
                    9e:a5:bb:36:4e:a2:7f:c9:da:06:ab:5a:39:25:84:
                    07:e4:15:50:f1:58:cf:b8:e0:65:7a:8d:1e:78:1b:
                    a1:a7:ac:ce:09:65:a1:af:d2:46:74:7e:a3:7b:66:
                    0b:3b:86:5d:b4:84:12:4d:a4:1e:87:50:1f:e9:e5:
                    8b:3c:6a:05:87:ad:a4:aa:14:0c:5a:7b:36:38:a0:
                    28:fb:29:4a:d3:ea:a1:a2:b6:20:87:c6:72:b8:cd:
                    19:59:bc:63:fb:b9:d7:48:86:9d:90:ea:ec:c8:5f:
                    e6:e3:39:66:29:75:8a:99:4e:d9:65:6a:af:74:e2:
                    5e:60:72:77:64:0f:0c:ed:5c:32:79:43:24:5c:7d:
                    66:f8:85:01:4d:3d:f7:b7:af:26:44:35:79:80:1f:
                    00:20:49:bc:06:3e:39:ca:1d:47:6c:88:bc:2e:69:
                    3f:f8:32:9d:af:93:f8:07:a0:c6:1b:ae:a8:3b:3f:
                    57:4b:58:88:20:36:56:54:6a:be:ca:78:73:39:96:
                    c2:37:64:87:a6:58:78:45:5f:95:7e:31:71:4b:d9:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:23:35:05:8B:86:EE:21:1F:40:78:5D:14:0D:31:17:6A:DC:74:A1
            X509v3 Authority Key Identifier:
                keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:f8:e4:57:f6:b7:38:2c:d5:22:a9:cf:27:bc:73:0c:ae:
         62:39:67:a0:db:33:bf:ba:4b:0b:47:15:c2:42:d3:e0:f6:86:
         85:de:ff:3b:92:5f:c3:47:6b:44:57:fe:dc:a3:ae:26:4c:59:
         5d:83:83:b7:d8:f9:ff:e1:b9:f6:05:40:e9:e1:e2:6a:cd:20:
         f5:0b:a5:83:ea:75:4c:9e:e0:8e:89:4d:30:de:38:0e:38:88:
         0d:b0:84:0f:fa:24:8d:6b:03:57:ed:f3:00:bc:ea:ea:b6:2d:
         b7:04:0f:43:6f:08:e5:13:30:ca:4b:aa:7b:59:00:43:91:c8:
         3a:7d:b3:14:70:7d:15:43:b8:f9:02:05:6d:62:01:ef:45:fc:
         26:ef:89:31:bf:4d:8b:69:7c:fe:b1:23:89:96:08:8c:c6:cb:
         13:d9:30:c8:fb:22:1a:1c:77:3d:17:17:46:a4:f9:0c:b8:c7:
         72:a1:f8:aa:6f:3b:f4:07:05:4d:b6:fc:cf:eb:13:b1:75:51:
         bb:f0:1b:17:0f:9b:32:34:8b:4f:d0:0a:74:c7:01:f4:d6:e9:
         e4:86:80:6d:d1:2b:51:c1:be:55:1a:4f:68:b3:4e:35:32:51:
         e6:fa:24:96:ea:f4:15:d8:19:6c:eb:81:85:44:24:e7:bc:9e:
         dc:a1:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----