Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File:                     rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier:          6WBZGkMG9nZ8sbS69+KNBMeMuyB1QZiB1MJ0TubZzEE=
Subject key identifier:   14:90:D3:20:14:B5:2E:D7:F8:D5:A9:01:49:C8:F2:84:5A:0F:E8:30
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer:       /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial:       01962E98AE5C1445AD945AF0103575FA5F08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 4Z6xjw98hxZ8bvYUhmvQisZFvOM.roa (hash: j5d+sT1h6lzMh+Fw7CHOI9NqQUP8la0OU484/Ch6a44=)
                          2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: H+Ey19IoZ7M7jKTetikZmZoElTGCjgs+H9o0A6EJC+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ae:5c:14:45:ad:94:5a:f0:10:35:75:fa:5f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=1490d32014b52ed7f8d5a90149c8f2845a0fe830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:82:fe:68:20:94:05:78:5e:cf:8b:a6:c4:
                    dd:a1:55:5b:09:7f:66:ab:54:e5:51:6d:de:86:27:
                    b6:ba:3c:1c:ee:c4:d9:35:3d:e9:0b:64:8f:5a:18:
                    ec:cf:86:50:b0:a0:0e:cf:24:f3:87:8a:82:fb:38:
                    c3:fc:7a:87:37:ee:79:8c:f6:4c:5f:dd:ff:4b:c9:
                    d8:b0:4a:5a:91:b8:52:7a:70:5e:d0:d0:54:73:14:
                    31:2a:76:0d:c3:f8:45:08:27:a2:cb:fe:03:62:d3:
                    4b:19:34:dd:a6:de:24:d3:d4:35:51:b7:67:fb:82:
                    81:6b:a3:cf:f7:39:0e:1b:30:f9:a8:5d:4a:4c:a4:
                    21:08:d6:1e:eb:ec:58:df:a2:fe:68:da:8f:d0:7c:
                    db:a8:69:c1:eb:1e:96:d0:91:31:93:7a:d2:e1:cf:
                    90:11:a1:da:8e:2d:da:7e:21:d8:49:73:0a:3b:8c:
                    6e:7b:b8:af:11:a8:02:92:cb:b4:48:9a:44:02:48:
                    60:73:07:71:7b:65:f0:76:0f:aa:91:93:bf:48:b8:
                    0c:22:4e:d9:2f:a2:7e:76:d9:91:f6:cc:b8:e1:3c:
                    26:38:65:eb:31:2a:0f:e9:b5:ef:49:0c:7c:84:30:
                    ac:f6:e8:e6:ac:8d:2a:b0:f0:5a:2d:d9:74:0b:3d:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:D3:20:14:B5:2E:D7:F8:D5:A9:01:49:C8:F2:84:5A:0F:E8:30
            X509v3 Authority Key Identifier:
                keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8a:25:62:d3:81:e5:49:e0:c0:ec:58:6b:92:ff:fb:22:8e:
         fd:ac:38:fd:bf:2f:4f:33:22:d5:57:f6:b8:f8:9e:04:14:ff:
         29:97:d2:e7:e7:a3:fa:5d:15:24:0f:c8:ce:eb:df:ee:1d:ec:
         4d:bf:69:b4:c3:60:9e:62:90:03:2c:ce:ae:33:73:06:3e:54:
         2d:cb:1b:65:6f:54:d2:49:60:22:99:40:da:4d:9b:e5:53:0d:
         9d:f0:ef:67:73:f3:80:8b:94:dd:b8:92:3c:89:28:07:78:7e:
         a0:38:c8:e7:6a:a0:6b:b2:2b:23:7d:8c:e3:f0:76:1e:c4:9a:
         05:42:6b:39:78:c4:5d:33:69:50:4a:14:62:03:7b:fc:ae:4b:
         d7:9c:16:27:e3:90:99:b5:5e:9d:fd:08:62:36:ac:76:1a:af:
         ee:f4:07:0d:27:8c:29:3b:ec:8d:27:67:31:54:46:65:f0:60:
         cb:0a:3a:d3:cc:42:3e:aa:00:35:33:ce:93:4c:57:6d:8f:4c:
         66:af:b0:47:42:99:d4:94:5f:00:ea:ce:48:78:30:16:2d:16:
         bd:34:43:aa:64:ae:b0:69:2b:91:db:fc:f1:1a:02:10:ae:89:
         e5:af:0c:36:35:08:ab:35:63:46:c5:7a:6f:44:1f:f1:27:c1:
         75:7e:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----