Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File:                     I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier:          MFPl8wK7KBZnKlYMDwGS2el5/wj/qj25ZZuUbyaKvjw=
Subject key identifier:   B0:1E:18:35:83:C0:69:85:0F:AC:7F:1B:74:ED:00:ED:77:05:90:CD
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer:       /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial:       01962E9873477472786E551E6A3840AA03D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: xDHSFE0PuNjaWlKoKkSbeJEsTrE0LVPn0iESvZW/cXU=)
                          2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:47:74:72:78:6e:55:1e:6a:38:40:aa:03:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=b01e183583c069850fac7f1b74ed00ed770590cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:55:10:e8:c7:8b:e6:99:42:9e:70:84:1c:
                    30:18:81:f4:19:8e:d2:c0:fe:49:6d:08:e7:85:80:
                    e9:aa:93:79:fa:3a:e1:75:31:f1:15:05:e3:84:33:
                    b5:41:98:23:2c:42:4b:71:b2:87:e8:04:e6:31:c9:
                    11:7a:23:46:e5:cf:e5:b1:f2:3d:a0:43:6a:dc:d0:
                    d4:f1:97:64:5f:53:f4:f1:c5:04:b4:ff:34:00:52:
                    49:e6:85:8d:a1:b0:a2:08:d1:57:e7:a3:9e:cc:80:
                    8e:d3:9c:f6:18:7c:65:78:73:53:b5:1b:d6:82:35:
                    7e:46:5e:d8:2e:50:0b:b1:e0:ca:30:77:e7:3a:0c:
                    88:ae:81:e7:0b:cb:8e:96:de:8c:d8:f3:69:31:94:
                    f1:82:e0:c2:6b:49:00:d0:63:4e:99:20:a6:58:77:
                    b6:8e:5c:3f:2a:7f:5b:01:6f:e2:59:f0:da:f3:ec:
                    b8:c9:25:0b:4d:62:d9:83:a8:29:c1:c0:25:8a:f8:
                    3e:1d:08:4c:e0:5f:9c:38:db:17:8f:63:53:b4:ff:
                    1a:07:b8:c0:7b:61:b7:73:46:36:51:ef:a4:f3:37:
                    66:0e:f3:bf:e0:77:1d:48:91:e8:36:0b:f4:f8:21:
                    27:db:11:6e:34:24:da:f4:ba:30:58:cd:cb:66:82:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1E:18:35:83:C0:69:85:0F:AC:7F:1B:74:ED:00:ED:77:05:90:CD
            X509v3 Authority Key Identifier:
                keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:22:aa:09:ad:8c:04:09:18:d9:1a:d6:35:4b:95:e7:f3:42:
         04:36:d5:0a:f5:e2:c0:cd:01:d1:53:47:3a:7c:26:1e:4e:c8:
         f4:74:f7:8a:30:52:e7:e8:db:fe:8f:3d:dd:e8:e4:4a:c0:fa:
         93:26:cf:ca:e3:f2:2e:4b:6c:90:7b:1c:1a:46:7d:34:c5:d8:
         01:c3:96:a9:e4:63:4e:23:5a:fa:92:01:35:a9:6c:ca:11:0e:
         40:92:de:58:93:4d:a9:7d:f3:cf:03:2a:e0:f9:d0:1a:61:b4:
         2b:89:2a:48:70:00:79:c4:f8:7c:24:cc:bc:40:db:81:bd:6e:
         ba:f9:f8:78:e8:b9:f0:c3:ec:bf:71:8e:2a:3a:74:96:2e:86:
         80:51:e6:89:cf:e6:17:5a:fa:d3:a6:83:de:64:a9:e9:cb:7d:
         61:cf:f4:26:5f:a5:5d:06:7e:1c:af:ed:d5:d3:62:ce:64:ed:
         b0:02:9b:cc:5b:99:a9:3d:83:58:fd:48:bf:3c:98:9a:1f:b7:
         6b:59:17:54:74:ab:34:26:15:0c:a1:23:4f:73:a1:6f:3a:fb:
         e5:a8:5d:85:95:36:ac:c4:98:fd:5a:ff:80:cd:c3:98:8b:8b:
         51:6f:cb:cb:84:d0:56:5d:91:56:5f:16:91:34:60:be:79:6a:
         ee:ab:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----