Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File:                     cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier:          pOSzrpLL0i7ZIx0uiV9NkL4uhD/OnsbmjLTUtQaAdcc=
Subject key identifier:   CA:DA:25:02:D3:3A:F7:EC:32:5F:5E:5B:5B:20:E2:5F:8E:3F:6A:94
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer:       /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial:       01962F3D58A902B68E1B133CAF6FF6569947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number:          0260
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa (hash: zgbevUmIAJrzV5Ei+G6fiiOaUat2c7OgWp0BEvn+Gtk=)
                          2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: 5c1MWhiGrw0J3jcvUMHHOXP42eLF1JHr9584f9MqxTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:58:a9:02:b6:8e:1b:13:3c:af:6f:f6:56:99:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=cada2502d33af7ec325f5e5b5b20e25f8e3f6a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:f5:49:cb:4c:a8:10:82:dd:d9:24:d2:a8:
                    0c:c9:3c:17:26:94:21:f7:4c:30:36:39:4c:77:12:
                    a6:23:01:32:ec:27:83:30:13:66:ef:2f:6b:03:ea:
                    4e:78:bc:bb:ca:c4:74:8d:e4:e9:7c:15:b3:8b:45:
                    b3:b0:f9:f6:0d:eb:0f:76:b4:a9:39:30:6d:a9:41:
                    5c:47:96:5f:41:0e:83:29:73:58:b1:55:08:25:b8:
                    95:e2:ca:6c:8b:33:ca:a7:15:0c:51:86:03:ab:25:
                    fc:6d:95:ba:e1:64:dd:2c:5e:e9:33:af:44:74:bf:
                    78:76:0a:a8:5c:6c:d1:4e:7e:81:81:5b:3b:ea:22:
                    f8:a7:d7:49:1e:51:d8:04:5e:1c:34:6e:2b:59:ac:
                    c7:0d:2a:22:2f:5a:56:d3:46:af:bd:8b:a9:a4:53:
                    5b:4d:4c:04:f8:32:e0:85:2a:66:a4:6a:d8:48:dd:
                    3d:ee:1d:df:90:5c:21:7e:12:d0:b3:81:cd:4d:56:
                    6e:8d:28:56:a0:9d:42:7e:6b:0e:78:d6:2a:64:49:
                    36:43:1e:73:e9:b2:54:3b:14:bf:0f:ec:0e:ca:99:
                    7f:69:9e:5b:34:ed:d1:79:b8:bb:12:a9:8c:28:ac:
                    4d:04:6f:32:04:df:5a:b5:ec:00:c0:b1:ae:da:df:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DA:25:02:D3:3A:F7:EC:32:5F:5E:5B:5B:20:E2:5F:8E:3F:6A:94
            X509v3 Authority Key Identifier:
                keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:e3:80:39:5f:b3:ca:f6:81:ec:cf:20:ee:00:07:04:9e:
         f4:48:ec:55:79:3b:57:80:cd:79:70:0e:c4:e2:48:91:98:02:
         ee:c8:39:da:d9:48:94:a8:6f:fa:9f:01:2d:d0:49:62:92:2e:
         0e:1c:c3:b0:e6:60:89:43:8c:6e:00:15:1a:5d:96:0f:e2:89:
         53:ce:96:83:04:3d:4a:00:eb:a7:e4:1b:c4:69:7b:c6:c0:be:
         7c:ba:3d:b5:36:ce:88:9d:3e:04:79:c3:72:82:cd:3e:7b:a7:
         38:ab:1d:b2:c4:7c:37:ab:f4:33:34:be:be:b9:37:31:7d:73:
         0f:ca:db:0f:4f:82:e3:29:f5:1f:df:a5:de:b6:1d:3f:7d:c0:
         eb:19:94:99:c6:53:58:cc:7e:a4:d2:24:60:08:0b:dd:fc:90:
         be:ee:f2:30:c9:fc:89:ac:82:ec:37:51:6c:93:26:ad:88:73:
         d6:cd:a6:7b:6a:98:85:09:19:f4:12:2e:67:8e:6a:f7:c6:19:
         f3:4d:7a:b3:68:e0:cf:ad:1e:95:bf:cf:b8:5c:22:e9:98:b6:
         ce:a9:29:9c:e4:a9:82:92:93:38:8a:f1:da:56:32:69:e2:15:
         cf:c8:29:6e:69:3d:3d:67:38:11:c9:a6:f9:d2:26:41:4e:7d:
         0f:3e:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----