Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
File:                     iNdZL0EZAMBnteeiGaNFq_26pA8.mft (raw, json)
Hash identifier:          vTG3dFumYDDaplKO0s24/LxMsaQ6XjttFQlMv4jTids=
Subject key identifier:   5C:06:50:C9:D8:B4:26:CB:0C:5D:90:BD:01:E2:97:8F:F8:CB:15:B6
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Certificate issuer:       /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial:       01962E2AE8439CA7A6B0D670F726FFD91A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 1-dqt2rN6d4zMTr30hL21uHD8mgs.roa (hash: 9J3OxeItEP/tcUsxKEYBHkcY9sk3+Jl9zYiOLoIv6HY=)
                          2: Rci7eL5oGCzv6_tfiW1PmTeawXg.roa (hash: 3Pq4pZ2HNSo1E8MLs1V/VYEm7An/GW4ggGPzeCvBY/A=)
                          3: iNdZL0EZAMBnteeiGaNFq_26pA8.crl (hash: H2CYzCIgzKzqsXgEVG1AJVFEQFld7BlP6CpPCi4oNqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:43:9c:a7:a6:b0:d6:70:f7:26:ff:d9:1a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=5c0650c9d8b426cb0c5d90bd01e2978ff8cb15b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:72:42:a1:78:b5:65:c8:73:04:06:b9:d7:
                    8c:d3:27:9c:15:50:c9:32:cf:8e:4c:ba:27:57:7f:
                    ca:60:83:3b:d5:66:85:ea:8d:a7:e2:45:47:db:39:
                    cb:15:27:9f:51:1a:ca:d3:80:f4:be:17:12:31:22:
                    69:d6:f2:79:b8:be:bd:6c:04:49:43:46:41:15:95:
                    07:b8:cf:7f:b8:b8:be:f8:63:5c:0f:09:65:f2:b9:
                    e0:ca:3f:09:d1:39:9a:85:79:ec:02:8a:2a:e1:a8:
                    0f:75:ce:74:c5:2c:48:d7:c7:1a:63:57:1a:81:ed:
                    86:54:05:76:5b:8e:d6:c9:ec:30:2e:cf:ae:97:0a:
                    bb:5a:3f:89:0e:86:bd:44:4e:30:ad:a4:46:f1:13:
                    cd:1b:67:02:d1:f6:26:ad:7a:04:99:e9:d8:60:76:
                    13:ee:ba:c7:b0:0a:7c:c1:ce:86:da:69:a7:24:17:
                    a1:23:a0:05:52:2d:6c:f0:76:75:32:64:2f:a9:4b:
                    ac:f2:1c:9d:b7:bc:26:af:ba:0c:7a:e0:a9:45:dd:
                    1a:41:a9:4d:b3:af:e0:de:17:22:7f:64:e7:5c:de:
                    3d:5b:55:ea:06:d2:f9:60:ff:74:26:51:2d:ac:2e:
                    2d:df:5b:5e:0d:c7:de:a3:45:3e:71:cc:0b:8b:2a:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:50:C9:D8:B4:26:CB:0C:5D:90:BD:01:E2:97:8F:F8:CB:15:B6
            X509v3 Authority Key Identifier:
                keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:d5:e3:38:ad:26:df:72:51:8b:e1:ab:7b:51:e6:98:f4:
         f6:cf:4a:e2:d8:9e:1e:3f:1c:97:50:5d:a3:b1:12:16:0f:f3:
         a7:f7:65:1a:6b:71:b5:38:75:c9:7d:c5:17:cb:73:a1:60:ad:
         ff:25:82:ce:0a:84:47:d3:d8:f0:35:69:3d:b5:b3:ac:97:7c:
         2a:b9:1b:e0:8e:dd:85:12:0a:5d:4a:df:c1:9e:46:f5:5a:d2:
         40:cd:34:62:fe:fc:2e:43:6b:be:ee:f5:31:db:c4:26:3a:80:
         4b:09:6d:d4:fc:ce:00:a2:ae:da:6c:a3:77:86:72:b1:2d:05:
         3e:e1:fd:c4:be:7b:53:41:99:74:0c:58:bf:46:47:8b:53:7b:
         ef:81:fd:4d:c9:3f:b7:72:02:4a:4b:95:b8:08:be:84:36:7d:
         f1:c4:8d:0a:00:b9:b7:15:5d:35:3c:f6:c7:86:5f:66:df:93:
         8c:36:2a:91:8f:c0:b8:f7:96:7f:5f:39:4a:96:8b:12:ed:43:
         a5:b0:d4:3c:ee:df:f2:72:63:d1:95:66:de:07:72:8e:ee:8e:
         8e:62:28:61:40:2b:46:5a:04:06:67:fd:61:4e:7c:b7:31:ec:
         a6:2a:11:81:42:bd:21:9e:c3:59:7c:bf:50:ab:3e:64:09:03:
         89:0b:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----