Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File:                     mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier:          8K/4x3x5fx//8bc0+Qy+UQZ2ies58O2GxSdDLeTyeXM=
Subject key identifier:   A1:CB:28:6D:BF:03:64:23:11:2F:60:BF:CE:70:9E:A1:25:3D:A5:83
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer:       /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial:       01962FAB85A9C40E88CCEADE675135F56A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
                          2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
                          3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: uWU+PTTTPMvFHTbWeQmKjhIjTfq3KHDiYdaCB40n7qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:85:a9:c4:0e:88:cc:ea:de:67:51:35:f5:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=a1cb286dbf036423112f60bfce709ea1253da583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:1b:85:95:b9:eb:95:6e:6e:f3:75:4e:02:
                    26:85:75:65:68:6d:42:19:c1:90:9d:a1:b3:83:c3:
                    01:97:ff:0c:4e:c4:af:b7:8b:c5:dc:c2:42:f5:8f:
                    ec:fb:6c:4c:1f:5c:64:29:90:10:d2:cf:f1:d3:9f:
                    52:27:1c:66:1b:92:31:58:6d:8d:42:08:5e:f4:be:
                    5b:14:8a:2d:35:3b:48:54:2a:fa:6b:ed:a9:67:fd:
                    2a:47:91:ec:e4:42:a2:eb:be:82:c1:39:7e:68:e8:
                    06:fc:3e:d0:99:c3:6e:44:80:48:60:ba:bb:52:47:
                    d3:41:8c:03:80:f4:ca:0c:37:a8:27:c2:d9:ef:4d:
                    88:58:60:62:23:76:0f:bf:30:ad:c4:6f:28:7e:d0:
                    07:03:16:c4:6d:de:7d:54:4b:fa:84:91:6f:b4:13:
                    a7:e7:cb:fa:f4:1a:5f:1c:7f:8b:37:dc:9b:94:b6:
                    98:b9:a2:e1:53:26:87:f4:2a:e8:de:78:ee:5f:41:
                    a8:e2:2b:da:1e:07:1d:a6:54:f6:33:2d:ff:1e:97:
                    43:93:31:f3:36:ee:b9:75:95:75:76:3f:76:2c:d3:
                    7d:14:02:8f:de:c2:76:c2:0e:69:4a:18:b3:8b:71:
                    fe:5b:f3:e4:ba:ee:bd:2b:bf:1d:ae:dc:76:61:43:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CB:28:6D:BF:03:64:23:11:2F:60:BF:CE:70:9E:A1:25:3D:A5:83
            X509v3 Authority Key Identifier:
                keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:52:73:2e:fc:e1:b4:9f:7a:80:23:4c:95:f4:3c:f4:6a:c6:
         4d:05:0c:cb:45:90:28:25:f6:59:fd:57:d4:f1:82:1e:1a:20:
         50:f2:75:f4:f6:7f:6b:f1:a8:aa:65:a3:50:9f:1a:5f:6e:46:
         62:5e:b0:a0:8f:40:ee:69:f0:21:3b:2c:e8:a2:7f:c8:b0:09:
         15:89:f3:01:71:07:cd:ee:f9:4d:2a:55:0f:1e:83:6b:ba:40:
         3e:98:93:a7:0d:93:6a:1c:a3:cf:6c:c1:f4:a8:08:70:13:b8:
         aa:11:38:c1:a2:c7:e9:40:d8:41:f0:bf:69:b4:87:99:54:8d:
         c3:97:90:de:0e:b9:5c:d4:f1:83:0e:84:c5:74:7e:db:2e:10:
         2e:34:d1:79:7b:78:6c:93:30:e6:25:f4:65:5c:23:27:58:86:
         05:de:89:b2:d8:ec:43:9d:58:25:4f:1f:5d:ed:3b:b5:ae:93:
         fa:56:ce:8d:1a:b8:d0:ce:cb:68:ea:c3:ac:0a:e4:84:e5:0f:
         3e:d5:24:45:49:e4:20:e9:43:f7:a8:97:24:8b:82:2c:87:73:
         4e:38:3c:3e:69:62:76:2f:0a:79:5e:05:0f:fa:6d:7b:52:73:
         d0:ee:30:93:86:83:4f:df:c0:da:b2:9a:ef:0c:4c:12:d3:c2:
         99:f7:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----