Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File:                     ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier:          Hm0/ueQd3IIxnecYgO+0/iOdI8Hqwy3Ke6MQa09UgNE=
Subject key identifier:   D6:F1:9D:F5:19:61:E1:65:AB:84:6E:93:D6:F9:B1:0C:27:07:15:6D
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer:       /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial:       01962E98E9AE8F13B260269501211C001977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: cNAKnwXRpodIUpUQCcu4b2IFdq2F3j+XRHKa/P5FzGU=)
                          2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:ae:8f:13:b2:60:26:95:01:21:1c:00:19:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=d6f19df51961e165ab846e93d6f9b10c2707156d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:36:8c:7d:be:85:d1:ee:b9:a4:14:bd:aa:f5:
                    a5:81:dd:92:f7:c1:1f:7e:81:ea:f7:8c:56:90:84:
                    c9:1a:37:ea:6a:22:d2:8f:43:38:a3:fc:fb:be:89:
                    12:b2:8c:81:72:eb:57:1c:87:0d:46:65:42:31:20:
                    59:f0:ea:b4:c8:92:06:30:f3:dd:ca:08:92:c5:da:
                    fc:0b:27:83:6a:d5:7f:62:d2:24:8d:be:bd:42:1a:
                    60:97:68:33:32:5f:c8:06:c3:21:8a:e1:3e:53:f9:
                    a8:6e:47:6e:43:5e:7e:4d:b3:e5:0d:85:69:76:cc:
                    3e:d4:1f:74:bb:f9:f4:f2:dd:c1:e1:c0:23:96:e3:
                    1e:ed:76:69:4d:9e:e8:97:0a:9a:68:4d:b9:f7:91:
                    21:c8:d5:8c:e9:5b:3a:86:12:f5:1b:59:b5:de:51:
                    6d:81:ac:fa:95:6d:00:39:82:1f:63:9f:1f:27:3d:
                    41:36:26:70:ef:40:55:5c:28:d2:36:ba:c5:6a:4a:
                    d0:f5:f9:d9:d3:0d:aa:d8:0c:de:fe:20:2a:02:23:
                    c4:c1:04:8e:a1:38:ab:50:f1:99:e2:be:6e:13:1e:
                    4c:37:78:6b:60:0e:e9:fe:c3:07:45:28:c4:21:df:
                    a4:19:d3:7d:a2:9d:a2:c0:fc:29:aa:61:3e:ce:62:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:9D:F5:19:61:E1:65:AB:84:6E:93:D6:F9:B1:0C:27:07:15:6D
            X509v3 Authority Key Identifier:
                keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:14:0d:66:d6:78:d3:29:fd:48:62:10:fe:4a:9b:4e:43:
         bb:9d:68:88:3b:84:57:ba:63:97:bd:48:79:8d:89:07:05:75:
         2a:cb:5d:04:bf:47:00:ec:5b:e5:d2:b6:74:7c:d7:82:d0:11:
         11:64:04:48:3a:1c:3c:52:dd:df:a2:b7:4a:f9:bf:4d:38:74:
         89:ae:83:4a:e6:78:5f:3d:6d:d9:8e:66:14:a7:af:4d:48:83:
         4a:e8:a0:45:8f:b5:24:60:dd:54:3e:d8:b4:87:00:a6:e6:99:
         37:ff:04:87:d5:03:d4:18:26:f5:71:c6:82:fa:65:d5:85:21:
         f2:94:19:be:70:bd:c9:fd:76:f1:7e:1d:84:9c:15:20:81:96:
         b5:3d:38:89:8c:99:c8:7c:06:62:fa:80:59:ba:74:2f:21:96:
         66:12:7b:16:65:f1:96:0e:0f:69:80:44:9a:5e:cc:75:ed:7c:
         3c:08:e3:50:46:b5:c0:46:cd:9b:9a:88:ac:dc:8b:56:08:ec:
         5a:16:93:aa:7d:cb:60:5c:41:ad:bf:fe:aa:97:d9:70:e0:14:
         6f:7e:b2:d9:c5:e4:90:3e:9f:68:45:77:a7:a3:88:f4:93:3d:
         93:f3:81:6c:40:6a:82:12:ed:0f:66:14:a0:c9:3e:70:52:c0:
         65:0c:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----