Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File:                     rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier:          mXvhWtRu0r4H1rBKds/eXlNNn5I21QMaGzCG7AoAVBo=
Subject key identifier:   CE:EB:39:0C:FB:AA:02:27:16:43:91:7A:3C:D2:1B:7F:87:4F:F1:EE
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer:       /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial:       01962E61D99F24029D00576FF9A7AEF131ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
                          2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: I+2n9b0PeGiwkHJVyu+M70IyByfktoG3XvPrdTrwcEs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d9:9f:24:02:9d:00:57:6f:f9:a7:ae:f1:31:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=ceeb390cfbaa02271643917a3cd21b7f874ff1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:30:4c:1e:90:4f:e1:65:2a:22:aa:63:23:
                    c4:e6:f8:80:c5:e5:e8:62:1d:7d:b2:40:9e:2b:33:
                    c7:cd:80:92:04:d7:b4:44:6b:ff:15:f1:ee:06:f3:
                    00:5a:57:f7:dd:e6:ed:39:53:d9:ea:f5:a5:03:81:
                    d0:75:6e:4d:88:76:19:e2:7a:57:cb:32:82:88:41:
                    6f:71:7f:58:9c:c2:b6:95:45:f1:01:60:ce:35:a8:
                    63:a4:7b:8f:6c:80:dc:5b:5d:be:60:89:f6:ef:d9:
                    76:de:51:29:fe:e5:2e:cc:e3:cf:aa:30:1a:c6:0e:
                    aa:fd:ba:52:ac:cc:04:d4:77:6b:87:ee:d4:f7:c1:
                    af:84:d0:50:cb:4d:50:03:be:c3:50:a4:5a:be:07:
                    22:d9:a0:58:b0:05:0b:c6:f6:48:4f:c7:e2:28:3e:
                    ed:66:2c:cf:f3:0b:34:37:82:28:f6:50:32:93:02:
                    74:5c:2e:3a:32:50:ab:c1:36:f8:2d:b0:0c:3c:1b:
                    05:50:fe:90:cf:48:af:3b:a1:c4:16:fd:0a:16:5e:
                    69:8f:d8:cc:3f:85:bd:4b:af:31:0d:c0:2b:4c:56:
                    62:02:1a:5b:35:b6:bd:29:79:e1:4c:ca:ba:65:f2:
                    dc:a4:21:b8:32:55:31:4e:9c:b3:fd:94:a1:99:1c:
                    e6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:39:0C:FB:AA:02:27:16:43:91:7A:3C:D2:1B:7F:87:4F:F1:EE
            X509v3 Authority Key Identifier:
                keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:cc:2f:ff:a5:80:e3:98:36:ff:b4:c7:63:d6:58:17:44:
         5d:24:93:ed:8f:1d:e9:dc:4f:ff:9f:94:c0:31:6c:b6:98:22:
         e7:11:13:9b:8f:6f:33:f0:69:af:0e:7d:d7:40:49:42:c2:9d:
         70:13:26:d8:80:40:48:62:26:48:e2:82:01:27:c8:bd:79:15:
         72:ac:e3:b9:77:4e:b4:46:1f:73:81:9f:08:66:93:39:8b:60:
         8b:b1:62:ea:ce:64:cb:87:27:4b:42:ef:7e:97:85:5b:4d:50:
         a5:b0:f8:36:f1:4f:f4:42:6c:7a:ca:4e:75:59:88:f0:37:4a:
         c4:bd:61:1f:7f:8a:ac:43:f6:8f:52:fd:06:f8:97:41:d5:0c:
         e6:eb:d0:38:f2:03:7b:e9:a1:dd:09:f2:5f:1c:a6:31:af:5f:
         6c:09:5a:40:c5:e9:5a:2d:ac:45:11:1b:4e:c3:cf:22:95:eb:
         6e:cb:7d:b2:90:5f:81:0d:9d:23:b1:61:cf:e1:f8:96:d8:93:
         f9:50:2e:0b:25:46:da:db:1b:fb:70:da:52:30:0b:c5:b5:12:
         4b:a8:63:ee:57:ff:2b:76:7a:9b:25:f3:5f:a7:f9:d7:23:2e:
         21:26:f0:a1:29:1a:da:8e:c4:2c:ea:97:2c:38:5d:3c:63:4b:
         28:f8:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----