Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File:                     POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier:          z2Rxi+BJRqVXtRR57NSQ5ZNHHqIHNZJJ9Ms/WSg0aM8=
Subject key identifier:   AC:C8:75:FC:E3:E5:CF:98:94:60:6B:43:76:79:7B:BC:57:5B:A5:84
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer:       /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial:       01962F063F616F5FF63A3376CE0F8804DBC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: 1CzMAWmtahe3zhXxKXVrnePv7RBf6Cmvvc/UcwsuOw0=)
                          2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:61:6f:5f:f6:3a:33:76:ce:0f:88:04:db:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=acc875fce3e5cf9894606b4376797bbc575ba584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:3c:fd:5a:fb:0a:60:18:f6:3c:ae:78:8b:
                    ea:cb:82:8f:82:98:e4:0c:04:b0:12:2d:34:61:39:
                    86:71:8f:ca:45:d1:7e:28:cd:65:4e:ef:c2:c7:98:
                    af:f6:54:49:71:87:57:23:33:97:6d:74:56:81:c4:
                    3e:ac:83:4d:0c:fa:37:9e:35:fa:ba:c1:46:36:4c:
                    74:2b:ac:46:de:03:78:6f:ca:0f:28:36:0e:75:e8:
                    1e:c4:25:a7:af:41:99:71:4a:9b:df:76:b1:07:51:
                    b8:29:a8:51:db:9b:5b:54:25:37:3b:2a:82:a5:8c:
                    c1:df:a3:cd:4c:88:62:dd:4a:81:bf:3d:2d:7a:4e:
                    b0:8c:82:67:26:3b:83:6f:e1:4a:34:46:ee:03:a5:
                    46:cc:af:55:3f:39:59:20:7d:6b:09:18:6d:1c:f1:
                    95:4e:be:f5:fe:6f:8c:ce:93:ea:18:ab:5c:1c:18:
                    72:b2:ee:5f:0f:50:f9:ea:e0:c4:23:1d:91:96:ec:
                    bd:28:80:57:eb:75:6e:58:e5:70:8d:f4:50:c1:12:
                    28:a2:2f:c1:62:73:a4:95:8f:8e:c7:df:4d:43:c1:
                    80:96:b3:7e:41:47:3f:35:47:f6:dd:9e:76:d8:69:
                    61:71:34:08:2d:77:64:97:52:ab:47:30:16:98:ad:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:75:FC:E3:E5:CF:98:94:60:6B:43:76:79:7B:BC:57:5B:A5:84
            X509v3 Authority Key Identifier:
                keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:03:52:02:f5:ef:21:ad:27:82:fd:17:7e:bd:61:af:7a:
         be:f3:d1:83:f3:09:48:54:dc:08:c5:5a:56:88:36:f5:0a:0c:
         8c:94:b7:54:66:8d:47:96:46:56:ff:1e:cc:4e:ae:0b:c7:10:
         25:49:ec:32:59:4c:d0:55:12:2b:37:82:56:15:4b:8c:e1:b8:
         01:b2:e4:c8:41:1d:0c:82:83:f1:2a:32:9f:14:73:1c:9c:3a:
         8b:6c:d8:70:b6:ab:22:ec:31:79:4c:44:64:ae:23:54:23:4d:
         3f:57:6e:73:38:d6:67:af:74:08:b7:34:33:f8:39:84:03:db:
         27:94:c5:2e:da:be:bd:06:87:7e:56:dc:cf:93:47:0e:b7:42:
         5c:da:3b:fd:9a:ed:4e:3d:0c:6c:a2:a7:9f:d8:97:d0:e5:92:
         4b:1a:00:14:27:e8:70:a4:fb:8f:ae:63:94:4f:2d:0e:e4:57:
         8b:a4:74:61:48:ce:4d:87:9e:08:b4:45:e0:0a:88:8e:ac:cf:
         a7:82:39:7e:5e:46:42:8d:53:2c:6e:93:88:41:c8:10:63:08:
         26:f1:44:10:b7:60:5a:97:53:6c:dc:0c:ff:9f:b6:b8:3a:ae:
         f1:a7:07:09:b6:d2:cf:1c:86:c3:d9:71:7b:f8:c1:f0:9d:77:
         8a:36:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----