Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
File:                     00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json)
Hash identifier:          CttltzF79FYO/6uyvEyV5fE20joMm1hLYhbhVg18YrY=
Subject key identifier:   B2:0D:EF:07:24:F4:C1:6C:74:23:B4:84:4C:DC:A5:69:80:79:98:52
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Certificate issuer:       /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial:       01962E2B112D3C1D19D86BC80222464AE001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: x7lDuAaAcOtnj+1AYflfJsf145SWq0D6YeRQEf0LhfE=)
                          2: JfpCcJQQ7HN-Dv4ophHtkQofaT0.roa (hash: xefZz0TBx0gKqWeUjL3ez873hj1QBBW9YJlq5BqFZZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:11:2d:3c:1d:19:d8:6b:c8:02:22:46:4a:e0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=b20def0724f4c16c7423b4844cdca56980799852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:58:fa:46:cb:08:8c:4d:f2:f9:78:07:b0:
                    e2:06:48:3f:dc:81:09:b7:68:26:7b:5c:0a:bb:0c:
                    0f:94:50:b0:9f:b3:04:e3:94:71:29:f4:da:ec:ec:
                    0b:82:8e:1d:7c:5c:66:4c:68:25:1e:f9:51:ec:2e:
                    99:2f:27:78:22:70:52:72:ed:68:65:a3:f1:a4:ed:
                    ba:fb:a8:62:f3:d1:8f:bb:02:85:14:a0:11:a0:63:
                    43:1d:81:bf:a9:12:f3:ac:01:56:b4:7f:6d:cb:79:
                    66:18:4a:d7:bd:fc:40:b2:bd:7e:38:3c:12:9a:8e:
                    17:46:02:39:10:1a:f0:6a:da:24:2f:54:fe:44:11:
                    13:90:76:b6:f7:66:f2:11:49:42:1a:2c:24:b5:fb:
                    3c:17:fa:5f:2a:7e:1e:20:bd:d2:87:c8:b7:27:50:
                    e9:3a:56:db:11:9d:ff:ac:6d:30:cb:8f:0f:36:dd:
                    57:c4:ef:1b:4b:22:86:18:c5:b7:77:42:c7:ce:30:
                    47:47:2f:b5:30:17:fd:3d:d9:38:f6:f2:f3:6f:86:
                    ca:4f:57:6b:8e:2d:7c:44:d0:93:ef:2b:30:96:07:
                    a1:53:db:22:61:03:be:75:06:69:b3:1c:d1:49:89:
                    50:42:d6:c1:dc:bc:f5:0d:e7:b1:7e:a3:c0:40:92:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:EF:07:24:F4:C1:6C:74:23:B4:84:4C:DC:A5:69:80:79:98:52
            X509v3 Authority Key Identifier:
                keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f9:fb:33:6c:76:78:be:37:4c:ed:a9:e0:5b:be:11:af:4c:
         99:19:75:fb:95:38:f1:e1:4c:28:dc:0e:fb:23:e7:29:87:0d:
         3d:75:fc:56:7d:2f:38:96:c1:42:18:f3:0f:b7:ac:5f:ea:b7:
         21:4a:14:fb:53:ab:71:70:46:06:b4:24:f7:6f:63:7f:6a:d0:
         5c:d4:5d:41:15:81:6f:6a:e4:4d:44:6c:d8:a3:d8:bf:b3:91:
         c7:04:bb:f9:d9:49:5f:6a:63:aa:c9:70:03:fd:f5:e4:5c:3f:
         db:68:c2:ee:93:b0:22:bf:2e:37:e0:bb:0a:8c:04:94:03:3e:
         07:d8:04:86:58:d7:42:bb:16:6f:41:9e:62:7f:bb:be:52:e9:
         d5:4f:3d:32:7f:91:9a:32:9f:b0:cb:da:1a:1a:98:37:c9:16:
         86:b2:d9:ce:31:87:c9:e6:7e:b9:c0:87:8b:9e:c9:ea:db:c0:
         21:f0:9a:77:94:86:dd:6c:81:12:59:d2:5a:fd:cf:41:32:da:
         9f:e2:c7:c4:ce:16:e9:13:62:74:30:dd:9b:01:93:aa:37:66:
         c6:ef:5a:15:a4:62:2f:98:f4:c7:6a:e9:22:e9:38:64:32:0e:
         94:55:4e:69:d1:c6:66:21:62:f9:5a:51:17:0b:05:52:eb:9a:
         fd:52:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----