Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File:                     j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier:          Kpxz8HBqfQ+ixP3faGtqQZaApVDcz6915CyuIqX6Svg=
Subject key identifier:   B7:D5:47:C0:B5:C6:55:FC:74:0B:C8:87:25:C2:F2:A2:D2:4F:AB:E1
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer:       /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial:       01962DF4386C1E4D064F5ECEBE6E36C9B714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: 4qIb2cm4fugfHkK3xyWXJkTvx5uE7A0Ej1Xzz+zggt8=)
                          2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:38:6c:1e:4d:06:4f:5e:ce:be:6e:36:c9:b7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=b7d547c0b5c655fc740bc88725c2f2a2d24fabe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:49:dc:83:84:73:c0:85:dc:e8:09:86:62:
                    85:ca:c7:30:ea:00:31:25:0e:76:93:5c:76:b7:0e:
                    cc:a6:a7:ba:16:df:4f:54:0e:e9:94:d4:ed:1b:b3:
                    7f:c7:6b:c7:e7:39:38:f4:e0:f7:1e:3b:86:65:73:
                    a0:a7:64:ed:a5:b2:64:8f:53:27:13:3f:e4:51:e7:
                    e7:d2:61:1e:49:e7:0a:f3:c1:50:9c:a9:dc:ed:40:
                    8a:c0:e3:84:a7:84:66:ad:40:9c:49:56:14:d4:24:
                    30:57:91:8e:7e:fd:d9:a1:b0:f4:b1:2d:76:ee:ce:
                    94:64:8e:51:a3:01:dc:ba:f4:c3:ff:dc:8c:5b:d1:
                    8d:38:49:56:37:cf:e6:e5:2b:4f:88:95:42:0b:1c:
                    60:32:d7:87:5f:a2:de:03:53:ad:48:05:05:97:0e:
                    62:d9:5c:c8:2c:69:70:bb:6f:6c:51:c7:50:f7:3d:
                    35:d9:b5:0d:75:68:3e:d8:d2:85:fd:5a:75:c1:7b:
                    c3:f2:ef:73:a1:46:7a:f1:50:b7:a7:65:98:94:6e:
                    ac:c7:82:a9:52:1f:0c:0a:6e:c4:a1:20:b7:bf:02:
                    73:ee:0f:c7:0d:ce:cf:dc:ea:c1:bc:bd:6b:3c:68:
                    e1:c5:4b:fe:d1:d8:83:77:ac:69:e6:23:85:1c:ee:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D5:47:C0:B5:C6:55:FC:74:0B:C8:87:25:C2:F2:A2:D2:4F:AB:E1
            X509v3 Authority Key Identifier:
                keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:87:8e:aa:9a:a5:f0:39:c8:ee:44:12:1a:a2:19:b6:84:89:
         84:02:f0:ed:f0:08:ca:44:d9:2f:34:e0:ff:9f:68:95:71:fb:
         16:64:09:e3:31:3a:d5:eb:ea:08:92:01:34:38:5f:63:34:d8:
         b3:57:3b:e8:9e:c4:2f:9a:49:30:a5:2a:3c:35:b8:fe:cb:c5:
         79:ae:92:96:52:6d:e2:30:93:bd:b4:e0:a8:0f:25:34:a7:91:
         19:a3:e6:85:c9:6c:d2:a2:d1:d9:93:a6:46:85:4b:b0:95:0a:
         f6:7a:b9:ef:e2:e2:ac:4e:3c:a1:6f:07:ac:04:f6:f6:32:f1:
         b4:fa:8c:8b:d8:e2:f5:84:ba:03:e4:cd:b2:2a:dc:55:67:fb:
         84:2c:02:61:b5:2d:49:74:eb:b6:be:31:b8:6f:ad:ad:87:a6:
         3f:90:c6:b2:00:4e:0e:f0:e8:71:5d:66:0e:e7:79:48:ae:11:
         24:1f:90:2b:ad:49:83:ce:70:38:0a:ba:e5:c1:db:ba:82:b1:
         c0:13:c3:e7:c8:e0:b1:cb:95:43:ab:4b:2d:14:28:2b:9f:08:
         45:49:ea:22:c1:9d:59:33:d1:0d:7e:f6:23:12:20:96:3a:8f:
         68:e8:af:c5:8a:f9:fc:2f:01:2a:3c:64:06:50:5f:85:6d:be:
         83:d8:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----