Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
File:                     shUnDjtZdrRPOt7OVwR9HgeHunU.mft (raw, json)
Hash identifier:          YGsR8dPbkF9TZqUz7xWGP51cYpg9TO0mJ4C6svrGWQ0=
Subject key identifier:   9D:E4:56:F9:F8:3E:BE:73:3A:41:AF:74:14:3E:4A:F5:A4:95:CD:33
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Certificate issuer:       /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial:       01962F0697CCAA21502EBC3B8F80CA1F64CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: P2sE-3tUICXx7cfC0favLdtRCZ0.roa (hash: ayIaE8Pk074Tx7I6FVVUWCPvr0NKwOuaUa8Xe24IzDg=)
                          2: eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa (hash: i9IHtchSCoTvu2jWZ+d1LDgXIzrS7PbiIZtxvaQvRRk=)
                          3: shUnDjtZdrRPOt7OVwR9HgeHunU.crl (hash: 8WHszNJQy90KlN0vjeDLiMst5qcMYzVD+a4wJLqETd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:cc:aa:21:50:2e:bc:3b:8f:80:ca:1f:64:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=9de456f9f83ebe733a41af74143e4af5a495cd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:8f:2c:18:78:87:82:44:ba:15:f0:5c:46:
                    b0:c8:6c:45:a8:d4:9d:c1:67:73:01:5c:14:42:0d:
                    d7:3c:97:5f:e1:df:03:f4:41:2e:db:43:3a:11:32:
                    7c:82:d0:15:18:05:f5:32:04:98:58:05:c5:e2:e7:
                    79:1b:04:29:53:a8:6d:41:7c:11:2d:a3:5c:7b:d2:
                    3c:22:3e:1e:8a:5e:e0:ea:9a:c4:fc:0e:d4:53:59:
                    90:7d:1e:d4:32:b6:b4:a9:fd:b6:6b:9c:07:9f:8d:
                    2b:70:96:cd:ec:7a:cf:b4:53:68:6f:48:2c:81:66:
                    02:f0:e9:74:00:f8:34:7c:c3:e9:5b:a0:a3:f6:13:
                    87:7e:a6:ca:1a:6e:19:6b:bc:1b:8d:48:a7:74:82:
                    1b:f2:3b:f1:12:c9:f4:20:36:9c:15:83:3b:9d:25:
                    58:5a:7e:23:99:07:01:09:60:9a:e1:e4:c4:65:68:
                    16:bc:af:eb:02:89:d9:0b:a8:35:15:e8:02:22:40:
                    4d:cb:ca:bd:05:17:f7:a3:99:55:8d:e6:c5:11:45:
                    e1:8d:ac:c4:1a:cc:ea:4e:83:c2:22:ed:b1:e2:c2:
                    a4:5d:51:d3:27:44:f9:b1:47:f8:65:81:5a:d2:8e:
                    22:24:17:ee:22:48:2f:64:10:c6:b7:0e:42:b9:45:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:56:F9:F8:3E:BE:73:3A:41:AF:74:14:3E:4A:F5:A4:95:CD:33
            X509v3 Authority Key Identifier:
                keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:82:b4:b2:79:60:67:f1:cf:12:56:1d:5a:1c:91:0d:ed:
         a7:fc:4e:54:94:01:9a:52:03:87:d6:05:2d:94:c8:8a:3a:78:
         c4:80:80:62:16:2d:8f:a8:a5:1e:a4:45:08:e4:8d:4b:83:12:
         21:6f:aa:b8:7f:11:f4:88:c8:3a:57:66:49:1b:cd:68:09:8f:
         9c:f3:df:fc:24:11:64:8d:d5:9a:31:b1:7a:cf:9a:7f:0e:75:
         01:56:34:60:f1:9b:7b:89:d5:df:c9:3d:a6:57:69:b3:10:c0:
         64:ca:ac:11:d1:bd:89:00:07:71:af:77:42:89:f2:9d:ce:96:
         27:1c:b7:c2:7c:02:1c:5a:2d:2e:d1:9e:d1:6a:a9:15:8e:18:
         0a:21:cc:a1:97:8c:c5:c9:83:14:82:57:28:a2:10:db:c5:7f:
         e8:4a:f8:62:71:5e:f5:ce:be:b3:0e:a0:57:8f:96:6d:64:70:
         1a:c0:41:54:14:48:b8:ad:42:7b:07:41:2c:20:d1:5f:5b:b4:
         64:e7:29:3a:fb:16:b2:90:9a:cf:9c:35:c7:7f:38:63:ff:25:
         9f:07:47:82:3a:25:2f:ff:c7:a4:e0:01:7b:17:6a:0d:73:1b:
         5a:f5:93:36:73:af:ae:37:85:83:1e:93:0c:66:5a:13:43:1b:
         cb:ed:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----