Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File:                     1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier:          mUqIsF3zMLY0VpvHxJCm5IYXMH0TCQrUVMeLETdEmvU=
Subject key identifier:   51:0C:FD:22:BF:B0:C9:8F:72:2E:88:0F:C9:CA:2B:99:AC:4E:D8:86
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer:       /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial:       01962F7458D61E7B28DCD26D92E13AD62A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number:          0929
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: likeysFaiydcX/5CHWXIGwMCFRpoJwV40XfNo0pvLSk=)
                          2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:58:d6:1e:7b:28:dc:d2:6d:92:e1:3a:d6:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=510cfd22bfb0c98f722e880fc9ca2b99ac4ed886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:f1:5b:dd:c8:4f:53:63:10:d8:f9:41:69:
                    5e:de:4c:02:9c:e9:98:3b:a0:88:1f:a7:86:99:a7:
                    c5:3a:45:6b:e7:69:66:79:7d:32:5a:b5:71:ba:03:
                    47:60:9e:ea:93:02:d6:57:fe:2d:09:3e:9e:22:3d:
                    f4:11:02:df:fe:57:3c:00:32:c4:59:5f:18:a4:4a:
                    eb:70:46:fb:16:a7:f6:0f:fe:91:f3:ee:a1:56:c5:
                    38:fd:5c:fa:e5:67:8f:bb:1d:9e:d0:05:33:06:a7:
                    00:e4:61:90:1e:72:58:e7:46:f4:21:d1:e0:b3:d1:
                    25:e9:5d:7d:06:35:28:f1:9b:0b:95:21:af:2b:73:
                    77:09:46:11:4d:57:b5:0e:08:4b:df:d5:f1:2c:91:
                    c7:e3:fb:7b:8f:60:41:89:99:38:83:28:71:e9:ca:
                    23:ed:f2:6a:f4:b4:97:3a:ab:d9:67:70:db:84:ce:
                    8d:38:45:63:c7:71:aa:1a:b0:52:3c:b7:1a:e6:d2:
                    fb:70:9a:84:4b:a2:fe:0f:9b:3a:34:d1:f0:ce:58:
                    57:ea:ac:ef:d8:71:35:07:7a:79:fd:84:9d:d3:4c:
                    07:60:09:70:3b:42:fe:4d:65:d5:f9:25:44:85:12:
                    23:5d:cb:2e:0a:ec:f1:7e:9c:63:d0:3d:20:22:e3:
                    7b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0C:FD:22:BF:B0:C9:8F:72:2E:88:0F:C9:CA:2B:99:AC:4E:D8:86
            X509v3 Authority Key Identifier:
                keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e6:23:71:42:bb:b6:2c:ba:4b:e1:90:76:15:9b:f2:b7:f1:
         9f:47:f8:42:89:7f:36:26:90:ab:bf:80:ec:00:7c:6a:d0:46:
         4f:5a:e9:d9:cf:46:e0:15:74:ba:a7:ee:38:e2:ca:fa:d5:cb:
         e4:bc:ef:33:7e:2f:cf:c1:7f:eb:79:f4:3a:ad:f6:e2:a3:d2:
         40:6d:5b:fc:17:de:90:40:34:2c:98:0c:7b:c1:78:d1:c3:89:
         91:79:83:56:ce:f0:88:c6:3a:42:cc:51:c4:d3:d0:50:bc:1a:
         4c:35:83:bd:9c:c5:63:7e:f9:64:79:d4:62:39:1c:e8:38:9e:
         3b:10:92:44:ba:fa:c4:e8:a2:b0:c2:21:93:fd:11:a5:2a:5e:
         98:4d:e1:b0:83:3b:76:e3:4a:dc:dc:54:b5:91:a6:a2:7c:62:
         d9:85:3e:82:5f:b7:06:01:59:88:cc:5b:89:94:94:96:29:76:
         fb:49:c2:d6:78:d7:bc:22:2f:7b:1f:d9:27:24:93:56:5d:ca:
         79:45:d9:e8:1b:13:48:c2:1d:d4:80:05:da:aa:31:ea:90:dc:
         b6:71:a6:dc:d7:d3:02:2c:d8:4c:24:e9:ec:fe:e7:f9:77:af:
         11:c4:6d:14:bc:df:a4:f6:b2:39:fb:62:85:e6:5f:3b:03:70:
         b0:3d:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----