Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File:                     ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier:          xk90+KfUAUnryPGOIxkAXPNbNKu5b8/5qB1T+i9WZzY=
Subject key identifier:   D3:A4:A8:80:E0:8E:7C:E1:70:3B:29:A4:36:89:D1:FE:E9:95:0D:88
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer:       /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial:       01962FAB794700ED4982CFB4587FF6689AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: 6TjLpApmmcXKmaB4sEUCqJnetXVHcrPj50V2XfJIzPw=)
                          2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:79:47:00:ed:49:82:cf:b4:58:7f:f6:68:9a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=d3a4a880e08e7ce1703b29a43689d1fee9950d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:75:c4:eb:96:53:9e:38:90:61:15:7c:36:
                    de:a1:20:68:8a:4a:f9:0e:f7:d4:79:a4:36:23:be:
                    d9:9a:89:32:05:f5:f0:4a:00:42:9c:6d:6d:59:d6:
                    cd:44:83:f4:2d:0f:c9:d1:54:53:83:5c:81:98:79:
                    af:48:ac:2b:0c:59:d9:5b:e0:ec:fd:ab:b5:a6:5e:
                    40:29:1c:b9:e8:b3:6f:59:1e:73:52:ba:d6:29:4c:
                    12:ef:7b:05:13:d5:81:35:5c:dc:90:f9:dc:68:9f:
                    51:7f:d3:26:f5:15:89:c0:c1:7b:72:3f:fe:fa:e5:
                    a4:39:74:18:ef:15:c6:5d:61:9c:15:27:43:63:8d:
                    27:ee:58:96:3e:cd:fd:e7:33:3a:0b:88:05:e8:4a:
                    ea:50:c4:0d:da:ac:1c:48:d0:2e:ab:c1:a7:88:5d:
                    9d:f6:8d:f4:e8:9f:39:5d:15:55:37:6e:79:3a:21:
                    0f:9d:17:93:0d:46:ed:d0:de:46:89:55:79:da:6c:
                    5d:fa:ae:cb:22:d6:dd:0f:de:6e:45:4d:72:ea:2e:
                    62:7f:ad:a4:dc:61:fa:d0:39:ea:97:b9:ff:b8:8f:
                    8a:d7:59:a5:3e:5f:52:43:fb:1d:b7:0e:aa:db:0f:
                    93:4f:66:9d:f5:ed:25:24:43:4f:1f:3d:92:82:fa:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A4:A8:80:E0:8E:7C:E1:70:3B:29:A4:36:89:D1:FE:E9:95:0D:88
            X509v3 Authority Key Identifier:
                keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:af:eb:9a:ce:5c:28:92:83:7a:e9:b7:37:60:fe:22:41:00:
         99:12:6d:79:3b:96:43:f1:24:01:d9:39:24:d7:01:2b:c3:22:
         1d:d6:81:21:68:21:1f:af:38:20:26:75:13:a2:01:a1:38:a8:
         55:e9:b9:79:3a:c0:ff:f5:4a:8a:91:75:cf:d6:ae:29:d2:ce:
         06:4e:67:16:96:c2:cf:c5:6e:45:c1:0f:cf:2e:03:5a:09:db:
         68:77:34:5e:22:05:27:80:50:b3:df:ce:db:10:d4:2d:8e:56:
         2d:ed:02:c5:84:5a:72:35:04:e8:51:08:11:fa:e6:c0:7c:bc:
         ae:f4:c2:2e:3e:05:0d:ad:9f:1d:e0:6f:8a:a9:4f:0c:a9:64:
         88:4b:55:f3:62:6a:e1:f5:e3:94:0e:bc:71:31:26:1d:23:18:
         40:9b:a4:f5:71:da:7a:a2:25:54:07:2f:34:81:a7:f7:41:b1:
         3d:37:fa:46:87:49:71:d6:10:20:09:55:54:21:a9:1b:0f:63:
         5f:70:b6:8c:14:7c:9a:66:96:b9:29:87:94:f0:2c:f5:d3:03:
         e6:04:d2:3b:39:0d:27:3c:eb:d4:f4:17:d5:89:80:0e:24:13:
         39:46:b9:b9:8d:fb:08:0f:39:bb:6d:f3:48:6b:b9:5b:1c:1f:
         9f:2d:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----