Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
File:                     mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json)
Hash identifier:          gC6IFh1TdshkQ7sl9m3UNoSL1mJHnw22slKyFHpxt8g=
Subject key identifier:   3D:00:E2:50:41:3A:C7:0F:02:13:21:C3:89:71:88:9B:CE:BD:5B:39
Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
Certificate issuer:       /CN=9a9558818272b9c5400fc5da18813acce917588d
Certificate serial:       01962E986673BADAF720E04E1F4B9342263B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: 5WdRh6pVb2gS+TZjLkqzgCHqRToAwyXj0ikC3ouvZ5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:66:73:ba:da:f7:20:e0:4e:1f:4b:93:42:26:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=3d00e250413ac70f021321c38971889bcebd5b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:28:1f:a7:03:d7:3a:55:8a:4e:27:61:7c:
                    cf:5c:37:5d:40:a8:c3:45:54:86:1a:ed:49:e3:0e:
                    4f:87:d6:70:85:d3:09:2d:99:41:29:a1:64:03:a5:
                    30:63:ed:16:a4:67:4a:9f:f3:5b:30:8b:34:85:e1:
                    d5:0d:44:45:33:9e:34:ad:57:c3:f7:78:57:8a:d5:
                    f4:7b:50:ac:63:ea:37:8e:52:02:3e:f2:ab:48:eb:
                    f9:49:b2:54:2d:14:a8:76:b8:dd:57:c9:c4:33:9f:
                    06:78:44:70:4a:c4:bb:cc:67:91:1b:d8:1c:c1:81:
                    29:e2:d8:9b:a4:28:71:c3:00:ce:fb:7a:13:16:a9:
                    df:63:9a:3c:be:24:27:11:4e:57:24:3a:1d:bb:63:
                    77:aa:16:a7:45:f4:43:96:69:1a:77:3a:8d:3f:90:
                    89:95:3d:76:62:01:d2:c8:7f:67:4f:64:ac:7e:f0:
                    ce:b6:36:ed:46:90:64:16:3f:e7:ff:7f:17:3f:b9:
                    9e:7f:a8:a2:ef:97:55:83:9e:c8:7e:61:42:5e:33:
                    26:65:fb:8c:48:5c:a3:03:c2:aa:5c:2b:d3:b8:cc:
                    01:6f:b2:43:9d:6a:89:0f:a7:6b:2d:3c:45:89:78:
                    cf:23:3d:5d:26:f8:d0:c7:72:d6:9d:bd:27:3a:72:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:00:E2:50:41:3A:C7:0F:02:13:21:C3:89:71:88:9B:CE:BD:5B:39
            X509v3 Authority Key Identifier:
                keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1e:b0:56:97:e6:dd:84:54:36:68:b5:92:2b:0e:7e:14:90:
         1f:7b:82:df:f2:ea:7d:cf:50:78:35:a3:53:9a:93:85:82:26:
         96:36:85:6f:eb:ce:39:50:bb:37:03:66:a5:d2:ec:85:5d:52:
         a0:2f:0a:c3:b9:c3:fd:00:59:8d:25:b4:25:53:10:86:3b:91:
         6b:2b:8b:e6:82:8e:75:34:43:c9:7c:c3:39:a1:62:53:f3:0b:
         6b:dc:c1:34:66:2e:a7:e3:10:86:9e:2c:52:70:b2:77:4c:b8:
         35:7d:7b:a5:29:08:b4:87:ea:8b:e1:8a:15:5d:6e:1d:aa:d5:
         73:9d:b6:22:d2:ca:9d:3a:df:50:4e:2f:d5:08:6b:10:f5:6d:
         b3:a5:60:27:36:75:85:4d:b4:3e:bd:f0:c4:fe:02:49:33:a2:
         8e:13:19:c8:c2:a1:45:07:a5:fc:ac:7e:80:d1:bb:12:51:13:
         4d:d0:45:a1:be:84:d7:1e:ce:b9:08:ca:26:b2:6f:68:5a:bd:
         47:12:6e:75:55:da:69:ca:44:1c:7b:11:a3:93:5c:32:4a:f7:
         09:8f:65:46:8f:76:99:48:a0:4a:20:7f:5a:18:4b:81:b2:17:
         61:0f:81:23:db:b3:10:70:65:f4:0a:31:a0:c4:56:8a:96:00:
         55:1b:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----