Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File:                     1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier:          omfcKBlCaKf1AD/BcUwaEjbxy/lPa0th47HVADwCAdE=
Subject key identifier:   C2:61:CF:5A:86:A1:A2:7E:32:64:CA:D3:CE:9A:33:91:B9:98:F6:11
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer:       /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial:       01962ECFCB53FA5FFDB6B60B907BB62CC319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: VqhAR2PI63ZNxO+vv0VgxbDdT1VICNX1bf9Yew1iNRY=)
                          2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:53:fa:5f:fd:b6:b6:0b:90:7b:b6:2c:c3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=c261cf5a86a1a27e3264cad3ce9a3391b998f611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:3e:e9:81:6b:52:43:6f:62:d4:27:40:f1:
                    c9:15:ba:85:30:60:b4:a8:f1:62:11:7f:cb:c3:98:
                    67:37:d6:6e:b5:da:78:02:0c:fe:07:6f:c1:02:d8:
                    ae:a6:e0:af:af:ff:9c:d4:59:3c:34:db:08:95:c9:
                    7f:4e:c4:65:c4:5c:bd:c4:47:ce:e0:1a:f7:b1:98:
                    de:73:a7:63:8b:b6:3c:93:63:2d:35:f9:45:79:2f:
                    fe:be:8d:1a:58:18:04:3a:87:e0:70:65:51:67:51:
                    8d:ec:42:ff:93:59:e0:a3:f9:c2:e2:c1:09:15:4d:
                    9a:90:49:7f:55:ce:51:14:ac:a2:31:2c:93:61:6d:
                    f4:0c:e6:33:77:18:f4:a9:e1:06:d7:a7:31:0d:2a:
                    b7:8e:27:46:e3:4e:38:10:73:0c:89:e3:84:29:bc:
                    f3:cf:f3:f3:35:61:4e:83:62:f5:7e:1f:b7:c3:84:
                    fe:47:91:b1:95:46:01:3f:f8:2d:6f:31:b9:c8:e9:
                    72:60:2e:6e:15:f1:89:75:3c:2e:77:9f:dc:6a:e8:
                    51:d8:35:19:5b:dc:5e:94:b1:cd:6a:b5:2a:68:e8:
                    39:f6:48:41:04:d1:b3:8c:a7:ef:74:7e:95:c8:39:
                    3d:9d:0f:9b:62:13:45:42:1d:d8:b0:3a:d8:da:54:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:CF:5A:86:A1:A2:7E:32:64:CA:D3:CE:9A:33:91:B9:98:F6:11
            X509v3 Authority Key Identifier:
                keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4e:d0:85:90:24:f9:79:9a:45:8e:bf:1f:e8:7a:89:95:ef:
         1c:91:65:10:d1:ff:1d:dd:68:fe:e8:29:bf:03:08:c6:2d:a7:
         d5:74:a4:8a:a1:de:37:9d:98:69:6d:65:0f:08:aa:7f:bc:6a:
         09:45:f5:cd:fd:71:8e:13:ad:1b:37:cc:ce:82:9a:8f:6e:43:
         6b:f9:8b:04:0b:3f:7c:1b:a9:88:33:70:f8:80:0e:b5:55:0f:
         4e:0a:d5:7d:50:42:a7:98:ed:84:6d:f3:3d:6c:9f:71:e7:95:
         35:45:9f:b2:2d:bf:a3:ce:e6:4b:af:fb:65:13:2a:4a:5c:10:
         21:f8:19:07:13:25:29:e9:6f:09:7d:fe:1d:81:88:99:b9:2c:
         d0:3c:ef:f1:83:20:dd:b7:13:d4:5e:1a:9f:da:78:8f:f2:47:
         7d:e4:76:69:2d:21:57:75:57:93:04:5d:99:68:1f:b2:8a:78:
         c7:70:49:79:9f:64:13:3f:d5:21:a5:90:93:27:b0:c5:54:c1:
         9d:97:8c:55:a5:45:71:af:46:6e:78:97:a3:0a:92:e8:ac:d6:
         de:74:5e:09:e7:65:1d:40:68:92:bb:3c:a3:9a:49:8b:91:71:
         b9:53:2e:3b:aa:7c:f0:24:43:79:6a:64:f2:7c:04:ef:d9:cb:
         99:f5:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----