Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File:                     1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier:          J5zhUuUa5w7dQGeqM/tE79CbR1lKtN1JEMw6UMAss3g=
Subject key identifier:   9A:2E:ED:12:D2:57:BC:1B:DB:F0:B7:30:9D:3F:9D:2E:A1:AB:AA:9E
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer:       /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial:       01962F7481774FDB9BF3D01DF7325B9B6BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: GDOcHJ4FzCcoSX8nreALB9r5PgKjYYEm09An9D3xMn8=)
                          2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:77:4f:db:9b:f3:d0:1d:f7:32:5b:9b:6b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=9a2eed12d257bc1bdbf0b7309d3f9d2ea1abaa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:28:7a:05:48:33:08:39:04:6b:a8:72:5e:
                    32:fe:05:da:55:f4:e1:60:b4:31:5f:a1:93:76:e1:
                    24:3e:44:76:02:90:e4:ea:47:e1:51:b0:3f:b3:76:
                    bc:cc:a4:95:d7:66:73:c3:56:a6:65:2d:0d:0a:2a:
                    5d:4f:d5:ec:d7:ac:2d:40:24:24:30:5d:cd:74:f7:
                    ed:19:09:2c:c3:b4:d8:d5:6a:01:9f:8f:a6:cf:2a:
                    02:94:e6:c3:5d:f2:7d:cc:32:5b:de:ee:52:8d:10:
                    2c:d2:98:de:c9:2a:8a:07:41:d6:18:3a:75:43:3e:
                    f4:6b:b5:a1:91:01:a6:79:c3:c9:20:0f:f4:9e:11:
                    85:7d:32:6b:63:0a:7a:7c:02:35:1f:68:c9:de:63:
                    c9:b7:27:8a:dd:97:10:36:d9:c3:43:e5:8b:79:4e:
                    b7:fc:0f:cc:1a:ef:de:c5:e0:07:b0:36:a8:a9:4e:
                    53:91:61:e5:e1:5f:8f:21:20:8f:d9:1f:a2:8c:ea:
                    e5:82:cc:97:55:cc:0a:76:0d:be:47:56:2b:e8:e7:
                    74:22:3c:09:de:76:45:21:24:71:1c:1a:14:41:76:
                    16:64:d5:0b:4d:db:58:13:ba:db:88:ee:20:2b:46:
                    97:ee:9b:20:93:31:e4:38:e4:3b:f7:38:e3:85:58:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2E:ED:12:D2:57:BC:1B:DB:F0:B7:30:9D:3F:9D:2E:A1:AB:AA:9E
            X509v3 Authority Key Identifier:
                keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:09:2e:a5:fe:89:07:06:68:9f:14:3f:24:09:f3:39:b9:0f:
         74:b7:67:0e:bf:96:67:ae:36:2f:a1:e1:bb:7a:e0:e2:be:28:
         92:2c:68:b0:fb:07:f1:16:0a:af:cb:95:0c:1e:5f:ee:b4:16:
         1e:a1:59:8c:48:72:98:f2:ad:2b:52:52:53:f2:18:dd:c8:da:
         be:ff:d4:d9:3e:4b:1b:81:6e:65:dd:47:c9:d7:b1:b3:f7:60:
         09:31:ec:56:60:de:a5:f6:93:1d:e3:cb:77:73:25:b6:72:78:
         8b:a3:10:f1:ca:e5:7b:58:9f:60:cc:d3:6f:1e:71:1d:83:7b:
         51:23:12:44:33:63:4c:90:1f:ca:c4:ad:c6:40:64:c0:e1:b6:
         47:20:d3:c3:fa:5c:80:ea:ee:f7:d5:e8:75:b8:0c:65:34:04:
         84:ef:d3:55:5b:1b:e6:d0:c9:a5:67:41:0e:36:4b:b0:bb:16:
         c5:91:c5:5f:df:cf:72:ad:e4:18:1d:11:b3:78:c2:59:5f:e4:
         03:64:cd:4c:2c:6e:2b:13:4e:49:c3:0e:ae:85:fa:8f:c2:5c:
         a1:94:49:9d:4c:04:3f:27:e9:5f:78:b7:bc:5d:8d:ff:a8:f0:
         6b:87:d7:5e:39:6b:94:20:1f:0e:34:8c:36:d1:16:1d:26:3b:
         39:a7:cc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----