Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File:                     31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier:          o3Gq9Zgq9v+vAz26CpT/e3HIYcAS2bh02s5YlzriwkQ=
Subject key identifier:   15:8B:7B:15:FD:73:EA:53:50:AA:B2:8E:78:F5:F6:9F:83:82:7E:BA
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer:       /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial:       01962E61CD8AA609FCC12039A38AE48FF0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: l7qSGzTVV1NOcYzirH6Kj8Vper1+RXsR1qe7wghLFuY=)
                          2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cd:8a:a6:09:fc:c1:20:39:a3:8a:e4:8f:f0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=158b7b15fd73ea5350aab28e78f5f69f83827eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:2b:fe:9e:cf:54:61:51:9d:58:2b:f8:a9:
                    d4:d7:3a:68:44:f0:1b:5f:65:db:a6:27:04:19:ab:
                    52:b6:0a:03:cf:44:f6:b5:14:2b:d5:33:31:df:45:
                    cb:0f:9d:24:b2:a3:2d:7c:03:3c:fe:cd:2e:e6:21:
                    c8:ad:e7:03:56:6f:79:b3:b4:3c:5f:17:42:8e:db:
                    41:92:41:bc:32:ba:a0:20:30:38:3d:93:8f:b3:78:
                    07:10:2f:3d:41:8a:5f:19:b0:2f:42:9c:17:02:06:
                    96:5d:8a:a3:8e:a3:e9:7a:bc:ae:68:d1:c9:c4:58:
                    55:5b:13:da:fe:79:61:d5:70:60:57:aa:90:d1:a5:
                    74:34:07:9a:14:1b:e6:79:f7:f4:24:11:4b:3e:b6:
                    53:0d:71:15:9b:01:ee:b1:37:78:4c:23:e5:cf:56:
                    5c:a1:3c:72:ad:cb:77:86:8f:1d:b1:a2:0f:d4:3b:
                    5b:1f:e4:8b:9f:11:e6:ad:13:ac:79:6c:28:8f:2a:
                    98:d2:98:01:65:48:58:f9:75:d0:59:26:33:f4:ea:
                    4f:8d:96:44:12:30:f8:63:c0:ef:87:8b:86:aa:8b:
                    03:ec:76:08:27:e5:fd:e5:13:4d:4b:2c:01:16:41:
                    46:1d:69:af:66:08:60:c9:b9:65:dc:b3:7d:12:e4:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:7B:15:FD:73:EA:53:50:AA:B2:8E:78:F5:F6:9F:83:82:7E:BA
            X509v3 Authority Key Identifier:
                keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:06:68:5b:cd:6c:1e:cf:3d:ed:58:5a:3e:d7:03:f9:3c:
         08:7c:de:3d:ce:15:ce:c7:f5:49:7b:a7:0f:90:22:47:75:17:
         04:97:8b:79:e2:ec:71:4c:68:19:27:b5:ab:99:20:54:a9:a6:
         f9:a5:1f:7d:c9:13:79:b6:09:65:98:93:01:fd:d0:85:dc:ba:
         d3:3c:4d:93:c4:10:6b:52:8b:85:dc:89:ba:a4:94:2e:69:46:
         44:38:23:8d:65:33:c4:a1:41:df:5e:bf:c0:8b:fc:b8:9a:7a:
         85:94:f6:56:a7:09:d0:51:4d:d5:8d:5b:73:ae:13:71:d9:e7:
         5a:67:6c:50:5a:b6:57:54:da:05:0c:a1:39:eb:65:ca:22:84:
         ef:55:6a:49:37:ab:d2:6b:dd:d3:e7:6c:76:39:ee:a1:f9:77:
         fc:c7:44:6a:2c:f5:c4:a1:12:2a:fe:a3:64:6a:b0:67:f6:42:
         81:6a:83:c5:98:04:eb:ff:d6:a5:a9:21:2a:e7:bf:9b:96:1a:
         d8:72:c9:81:cf:b0:d0:41:36:da:13:e3:e0:4a:cf:9e:8b:40:
         bd:39:f8:a1:bb:0d:c0:1f:23:9a:40:40:67:23:17:fb:65:a6:
         28:03:93:79:90:95:7a:be:5f:bc:9a:13:35:2d:97:96:78:b7:
         8b:23:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----