Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File:                     rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier:          BfbUO/M/wfh8kAKy27ZKiFZYKB0etXd/syGi4R41Efw=
Subject key identifier:   5A:21:EE:1B:AE:0A:78:35:1F:8F:37:CD:5E:2F:A1:84:E2:C8:4B:18
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer:       /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial:       01962F74731EB339CA95D917EB2276F88566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=)
                          2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: 8xkGm+1hwhCNzVRwL+RmTcD69A8HhAbF45Xv5KYb8+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:73:1e:b3:39:ca:95:d9:17:eb:22:76:f8:85:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=5a21ee1bae0a78351f8f37cd5e2fa184e2c84b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:43:e9:a3:f9:d2:be:1f:fd:b7:5f:ea:ea:
                    c0:f3:8b:51:3c:c7:b6:e2:30:cc:81:e3:45:77:12:
                    5a:8b:7f:37:9d:f9:1a:c3:3d:34:95:2e:16:06:64:
                    d2:95:fb:5b:de:6a:6b:70:81:8b:c3:9e:8b:ac:58:
                    54:37:ff:01:d9:c8:bc:a0:1c:78:68:bd:bb:ed:43:
                    61:c0:4a:b9:fc:20:b1:95:84:13:ba:f6:19:74:e9:
                    a3:58:69:e9:e8:f2:0d:3a:2d:60:c1:7b:a7:91:b0:
                    0a:07:50:0a:aa:c9:a6:78:c1:b9:9e:2e:a5:66:c1:
                    ed:51:02:39:dd:15:dc:68:73:92:d5:78:8e:23:be:
                    a6:b9:ca:fe:76:5d:68:8a:80:c6:50:a4:42:b1:98:
                    8e:bf:ae:b5:39:ed:74:3a:da:c6:bd:5e:3f:f7:a9:
                    4c:bd:cf:33:42:bc:71:b3:ab:d7:5b:f4:30:96:ab:
                    46:f6:01:1b:b6:b0:cf:4f:10:8c:67:47:cf:55:05:
                    a6:36:1b:03:7f:50:90:c1:f7:b5:9c:d6:b2:4d:9c:
                    7a:03:90:78:4e:80:a2:3e:ac:30:53:71:4b:39:aa:
                    03:dd:6a:a9:25:58:26:88:32:ed:e3:ef:64:f7:67:
                    a9:8a:bc:e4:d7:d3:73:5d:d6:ea:b9:b0:5d:8b:54:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:21:EE:1B:AE:0A:78:35:1F:8F:37:CD:5E:2F:A1:84:E2:C8:4B:18
            X509v3 Authority Key Identifier:
                keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:11:d0:79:f6:0f:59:be:57:5d:ee:13:2e:e9:07:16:06:
         bb:8b:22:23:d1:14:13:8a:07:c0:ef:9a:e8:7d:4f:6a:a7:c7:
         79:1e:80:44:22:1d:2e:38:97:ac:b9:8e:97:3a:ea:7c:c7:81:
         a2:c0:50:8c:64:65:5f:7d:bf:d4:5a:f2:3d:10:5f:22:3d:83:
         d0:08:72:4e:f1:08:b1:1e:65:c0:53:13:04:c8:6d:87:73:ee:
         88:a9:12:71:fa:2c:57:78:51:82:9d:fa:67:97:dd:3f:12:cf:
         f1:58:eb:5b:9f:6e:a2:a3:be:44:bf:54:40:ca:4f:ae:62:94:
         18:e0:34:dc:f2:44:ae:62:2d:42:17:fb:a7:11:00:fc:07:a1:
         c8:1d:97:21:bb:b8:74:30:d2:4e:8e:a5:bf:9b:2f:51:13:dc:
         d1:dd:13:be:c9:b9:85:4d:74:51:31:5d:fa:0d:da:24:26:14:
         2a:06:11:98:20:2b:76:60:54:ae:55:c4:f3:38:06:a9:02:db:
         ed:bd:2d:9f:c6:e3:72:67:9a:04:0e:4e:b1:20:c1:46:a5:5c:
         c1:b7:d0:af:17:0c:2a:a8:09:12:32:e5:84:ff:4c:3b:cc:7f:
         c3:26:65:e6:46:60:1a:d1:f7:cd:66:33:d4:5a:20:dd:f2:bb:
         b8:b5:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----