Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File:                     h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier:          zIQlsJiUeqdMv9U0Jgt1lvEvF64H5NI8hgbjiVMnzBc=
Subject key identifier:   E2:E5:B0:0B:3C:8B:09:3F:6B:7A:CE:2F:04:30:71:C0:B3:73:4F:81
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer:       /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial:       01962F068054C846AD2B036E52FFFA2FCF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: SBZRWI50mb0cChUsV6SOMHtV2JKtx938b76a5gIFt9I=)
                          2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:80:54:c8:46:ad:2b:03:6e:52:ff:fa:2f:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=e2e5b00b3c8b093f6b7ace2f043071c0b3734f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:94:5b:78:42:df:0d:36:dc:76:b0:e2:79:
                    cb:58:9a:65:d3:7f:1e:d6:7a:39:fd:8b:26:ba:4b:
                    f4:98:fb:bc:ae:82:a6:7b:65:a9:22:81:10:c9:13:
                    ae:02:8f:fb:e6:6c:56:6b:2e:e5:d9:68:65:8e:a6:
                    7b:20:90:2f:f5:e6:b2:3e:be:f6:db:57:1b:03:f3:
                    4d:74:57:90:a9:db:d4:c5:a4:79:db:c3:18:15:eb:
                    04:3d:b6:ca:eb:c6:e6:a4:8a:e0:88:6a:96:97:14:
                    e0:6c:9d:d7:5e:d7:2b:7c:d4:6c:80:46:d9:56:3a:
                    28:3e:d0:d4:0b:88:56:f6:04:0c:27:7a:b1:e2:19:
                    70:4f:92:87:28:9a:bc:2d:97:2a:b5:02:08:55:88:
                    12:de:5d:7e:2f:dd:03:7a:77:2f:10:99:84:45:77:
                    9c:d6:8e:e2:15:fb:00:a3:23:20:e0:75:8b:14:91:
                    22:3a:92:67:75:82:e8:61:ba:28:60:3e:c5:3f:69:
                    6f:17:b5:70:38:fe:4b:0c:4f:91:f2:a7:ba:fc:03:
                    45:08:e8:f9:27:41:d4:1a:af:52:69:f4:bc:0c:a2:
                    4f:28:9a:7c:1a:3a:d5:4d:c9:08:0e:58:f2:77:a8:
                    49:22:18:a3:e7:21:8f:1e:19:13:b8:cc:e6:e0:51:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E5:B0:0B:3C:8B:09:3F:6B:7A:CE:2F:04:30:71:C0:B3:73:4F:81
            X509v3 Authority Key Identifier:
                keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:15:9c:4a:b4:ed:48:fb:dd:0f:4c:a3:68:27:4b:85:b7:38:
         58:94:31:95:90:c8:f1:9d:26:44:69:cc:8f:71:2a:50:40:84:
         31:ef:c7:29:0d:d1:87:45:dc:17:d3:d7:10:a7:e1:9c:b9:1a:
         60:9e:90:4d:57:24:e2:69:89:47:54:b2:90:53:84:7e:4f:d3:
         1f:c8:b5:01:22:1b:e0:b1:8f:43:d1:3b:46:e1:31:e7:84:59:
         15:1e:a7:3c:27:39:ae:77:19:79:e1:ab:f5:2e:51:8e:b9:aa:
         52:b1:b1:da:7d:e2:59:39:07:4c:08:e3:aa:3a:14:11:75:bb:
         80:02:92:4a:fd:a1:ab:4a:e7:b6:61:37:e4:09:eb:cd:07:ad:
         3a:9f:66:b6:5d:1c:98:44:ff:b5:19:cc:06:a2:61:86:d1:8b:
         e3:ce:c4:9f:a4:97:ee:e2:23:2e:db:61:09:b5:ca:e4:dd:22:
         ee:c5:ae:e7:44:5b:e4:69:77:ec:5b:f4:36:a4:c2:ea:c2:c4:
         81:c9:93:32:67:79:f9:9d:0d:30:69:88:d5:6f:8c:9c:33:4e:
         24:5b:81:d8:01:46:45:87:8e:cd:e9:40:6a:19:9d:e1:d7:d6:
         d7:51:cb:4c:0c:52:80:27:30:78:42:b0:8a:4d:e9:9a:9c:e0:
         9e:3f:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----