Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File:                     CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier:          PPcLAO0ylPsGj6QhOsHtL4hDTu60tI89ncROPwoAEmw=
Subject key identifier:   4B:39:CE:DD:DE:B0:63:AA:1D:BB:1F:93:9D:02:C5:1B:99:9F:CB:14
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer:       /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial:       01962F071613C8BA850BE074B839DDB4BFBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: QqO98qdtqlKoF1Adz2Rwz27m7O3p6qVsQn+2xJqvTtw=)
                          2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:16:13:c8:ba:85:0b:e0:74:b8:39:dd:b4:bf:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=4b39cedddeb063aa1dbb1f939d02c51b999fcb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c0:8f:a9:4c:4a:a4:95:a6:ca:1c:f1:82:99:
                    ff:97:9f:d8:3f:f0:03:48:81:28:f7:c2:df:1e:b6:
                    d3:76:9f:2e:a7:8b:2c:4a:5f:ff:8b:7b:ca:44:fe:
                    89:b7:33:1d:b8:66:09:23:18:c1:72:23:3f:9f:52:
                    3b:30:64:32:48:6e:80:0d:9e:d2:de:57:b6:86:47:
                    2a:52:e5:30:03:ce:57:bf:94:72:1e:8a:f5:29:e5:
                    96:18:2a:60:49:63:f3:fb:35:4d:dc:da:53:df:b0:
                    2d:77:53:22:1f:71:21:c8:a4:dc:b7:b7:d7:a8:e0:
                    40:91:58:85:c2:97:0d:c7:a3:09:93:e2:33:53:62:
                    38:6c:86:ae:cb:91:c1:64:42:94:82:57:ba:d1:6c:
                    1d:78:15:2c:5d:c2:c7:5b:c2:4f:c7:d8:f1:51:01:
                    8e:6c:6f:8a:dd:b8:61:20:3d:68:3a:d8:96:cf:90:
                    28:91:8a:28:17:5c:47:7a:f5:8c:ed:7e:72:ff:5f:
                    a7:8b:95:e0:1b:d8:d5:fb:74:2c:09:6f:8b:5a:77:
                    13:ef:a8:28:ea:95:41:7c:e9:7f:e8:69:f5:b2:4a:
                    3c:52:41:4b:3a:97:7b:f5:94:43:fc:aa:e8:8b:9a:
                    0e:0b:3d:6d:86:1b:31:71:25:20:c8:63:5c:4d:46:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:39:CE:DD:DE:B0:63:AA:1D:BB:1F:93:9D:02:C5:1B:99:9F:CB:14
            X509v3 Authority Key Identifier:
                keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:10:46:45:28:03:36:78:a7:6d:5e:a3:6c:f8:71:5e:d3:
         93:7c:10:d3:e9:7b:f4:6d:30:fd:fd:27:7a:ac:50:a7:bf:1d:
         d0:47:14:4d:44:8b:5a:5c:98:17:2e:60:48:01:19:9e:c2:fa:
         11:13:e8:ce:b2:2b:1e:ab:5b:f7:14:eb:70:50:4f:d3:92:c3:
         de:e7:68:f3:53:9f:1b:79:9c:24:1a:d0:dc:a0:3d:65:60:fb:
         de:85:fa:90:3f:dc:23:8a:97:93:33:bf:23:8a:32:aa:33:b2:
         03:82:5a:ed:6e:f3:43:97:4e:ea:72:fd:ba:e1:9c:e9:53:71:
         b0:7a:55:7a:30:af:33:cd:77:05:be:56:74:32:db:08:ae:df:
         61:f0:57:92:70:fb:76:30:f1:9f:6e:4e:2a:47:e0:a3:01:7a:
         fa:61:50:d8:bb:81:0f:ee:92:aa:3c:2e:54:76:f7:e5:e1:1c:
         44:83:9b:f1:85:6d:ec:98:8b:3b:a5:a7:78:36:52:f5:43:29:
         20:0e:99:3d:d5:52:74:cb:e3:49:0f:82:f9:5d:7d:ec:4b:e4:
         a2:31:20:fd:65:17:e9:3b:17:1d:d9:77:64:41:98:7c:06:39:
         2d:af:ea:0d:5d:31:ad:48:70:43:33:0e:fc:6c:d6:d8:8e:00:
         0b:06:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----