Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File:                     F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier:          vTdH+FyYBSw7qcAfSdNWjh33QxH4iUNLsEcDFacp5vQ=
Subject key identifier:   B0:6E:6F:2B:85:D0:71:26:15:0C:CD:87:0C:51:E4:8C:24:1C:20:54
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer:       /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial:       01962F3D63C7CEE9E5822E86466759D36B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: HxIv6Cl1HP7VvVSpLEAN9Igt7e8IX03VfbvDUNaqQX8=)
                          2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:63:c7:ce:e9:e5:82:2e:86:46:67:59:d3:6b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=b06e6f2b85d07126150ccd870c51e48c241c2054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:46:97:28:df:a3:79:82:32:d6:2d:9d:f3:
                    ca:66:15:22:10:a3:0b:92:b9:da:a5:fe:c1:42:c7:
                    b5:94:63:2a:ee:8b:6d:64:de:5f:2c:5c:6e:35:9b:
                    b3:cd:20:1b:d4:7c:b8:15:11:99:1c:29:71:0b:8a:
                    2a:80:dd:38:72:69:22:fc:36:68:9d:95:39:69:4a:
                    32:23:b6:5d:87:6e:77:74:d3:74:d6:57:d5:5e:14:
                    e4:01:93:14:68:1b:4f:76:ab:fd:6d:f4:b5:52:d8:
                    b3:ed:7a:a5:16:9d:62:3c:c8:b7:eb:93:26:e6:2d:
                    b1:11:30:3c:b0:ac:68:bb:eb:40:43:04:df:2d:4d:
                    b7:28:27:e7:ba:07:6b:a3:14:47:90:e9:5f:cb:9f:
                    25:2b:33:7f:b6:5b:c9:dc:10:04:b0:66:09:33:a5:
                    ef:d4:9e:38:75:36:d0:17:c0:4b:db:93:6f:44:89:
                    f5:c2:09:1c:71:a9:59:a3:ea:a2:15:85:f3:3f:7c:
                    59:07:e4:8f:78:be:b5:47:f0:fc:b2:0e:47:e4:a0:
                    ef:cc:5c:50:9c:fe:f4:ba:59:fc:9f:f0:fd:cf:fc:
                    f4:c7:0a:dc:67:68:43:1e:1f:59:a3:4b:00:d1:6e:
                    48:ff:df:bb:a7:1b:de:00:17:36:70:7c:d4:5d:bb:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6E:6F:2B:85:D0:71:26:15:0C:CD:87:0C:51:E4:8C:24:1C:20:54
            X509v3 Authority Key Identifier:
                keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:cc:91:1a:23:ea:a3:bb:6d:b8:c4:0e:cd:ef:16:42:3e:16:
         30:a3:7f:6a:94:c5:40:e2:8c:06:e6:90:17:98:a4:55:3d:47:
         27:d4:c6:1f:04:41:6a:48:30:a9:a6:62:40:42:05:bb:74:2c:
         3d:bd:24:d8:6e:8f:6e:b6:8a:28:19:e8:14:fe:c0:23:e7:ea:
         2e:c0:d7:32:27:cc:c8:a0:d5:d1:9f:4d:42:40:7e:f4:15:3f:
         21:4b:6e:91:86:0d:71:9e:0f:4f:7b:d9:37:0e:7d:d9:f7:ba:
         2b:f3:4b:2c:ca:b7:fb:52:c0:82:3c:b8:2f:85:0f:6d:d5:79:
         4b:37:22:96:b1:82:cc:04:db:07:3c:bc:8f:b4:6e:ae:90:bc:
         9e:9e:8d:53:29:99:2a:3a:2f:53:86:88:21:dd:fc:80:57:2a:
         24:4a:d9:84:f7:08:49:1f:0f:c4:21:c5:80:4b:49:c7:c5:f8:
         29:e1:03:b9:2c:f5:76:33:4f:f1:91:d0:e7:04:28:2f:4f:00:
         9e:b2:8b:07:f5:24:a5:99:3c:d3:08:bd:bb:f3:87:27:f9:79:
         fc:e2:9b:d9:fb:e6:c0:05:52:ab:27:cd:08:34:1a:f6:d2:cd:
         10:e1:e6:cd:7e:68:61:47:74:67:f4:91:64:21:42:22:ff:0d:
         4d:12:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----