Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File:                     C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier:          1qvVMsVa6T9iQ3JOOfMUFXZVxKYN/+1e2rhdH5AZnc0=
Subject key identifier:   2A:CA:9C:6C:64:BE:4A:4E:BC:1E:12:BC:94:4A:21:41:CE:01:56:41
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer:       /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial:       01962E2ABA7B6FCB04F5F169AC4CB54CCC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
                          2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: c8IHP8CUtz7HBEmXRYniH6098Lh1nknnO2Qc0u9/0Mo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:7b:6f:cb:04:f5:f1:69:ac:4c:b5:4c:cc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=2aca9c6c64be4a4ebc1e12bc944a2141ce015641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:ca:45:a5:da:1c:c1:78:fb:03:fd:b7:e8:
                    31:d8:a7:7e:c8:0d:1b:44:8c:c4:43:43:6b:17:18:
                    1b:ec:ad:c8:b2:6b:6e:d8:ee:d0:79:bb:63:07:12:
                    ba:4b:37:64:12:f5:f8:42:c5:b4:de:8d:ef:2b:fa:
                    8d:4f:00:dc:07:09:62:25:ce:91:4d:e3:f4:ce:66:
                    aa:6f:ff:46:0a:98:da:96:42:ef:f9:94:15:26:a1:
                    49:3c:7a:9a:cb:dd:ca:c8:de:a6:91:c8:e2:dc:fc:
                    45:cc:90:cd:ca:dd:a3:32:ac:2b:ba:9a:60:42:ab:
                    64:14:7e:07:ab:d6:b7:a9:62:aa:5a:8c:ad:91:a6:
                    e5:8d:08:4a:da:3a:19:b6:9f:9d:7f:2d:f2:ed:58:
                    80:e4:46:7d:cd:fb:cf:59:84:2d:73:66:df:77:5b:
                    6a:46:a4:b7:98:cc:26:fd:f5:3c:27:95:88:46:f9:
                    e8:79:59:f1:05:88:fb:f5:2d:ab:95:41:2f:9e:0b:
                    2b:e0:f2:f8:c7:91:ca:64:b8:8a:fd:70:18:49:ac:
                    a6:20:21:f4:35:df:e3:fb:ad:1e:0e:1f:71:8a:69:
                    39:96:de:5a:48:95:e3:99:2c:99:95:d8:d5:39:61:
                    79:b9:d9:c0:7a:bc:c0:ce:94:86:c3:09:e4:e3:cd:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CA:9C:6C:64:BE:4A:4E:BC:1E:12:BC:94:4A:21:41:CE:01:56:41
            X509v3 Authority Key Identifier:
                keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f4:c2:f6:e3:f3:6e:0f:94:b2:c1:9e:e8:2a:2b:c5:da:5d:
         e1:b1:1e:27:f9:67:47:50:11:61:5d:99:56:56:10:90:f1:05:
         35:4e:8c:c0:ac:dd:22:c6:ca:a0:ef:be:34:0b:37:ae:d5:cf:
         9d:3c:f2:97:bb:50:f3:f3:9f:8f:93:8e:d8:b2:a2:24:6c:4f:
         aa:73:4c:38:ee:ab:1c:c5:d6:49:5f:cc:07:ea:46:a7:97:cc:
         e7:72:f0:0e:92:68:13:69:b1:58:a1:cb:7e:4e:f0:47:c7:91:
         3c:65:98:b2:df:0b:9c:ac:8d:0f:35:90:48:3f:4a:7e:07:11:
         d6:9b:c5:0f:44:5f:1c:6c:aa:b0:1f:a6:3e:f0:9a:11:a6:7e:
         8d:51:b8:8c:a3:f6:ce:9b:97:2c:18:a4:c8:41:1c:ea:5a:e2:
         2d:e4:32:98:82:f8:36:62:11:98:85:b0:11:b4:45:d7:2e:42:
         df:58:37:59:f0:2f:cd:36:e4:af:38:ba:62:bf:a8:03:2e:1d:
         1f:3f:20:69:a5:c2:d1:b5:14:be:ca:bb:6c:2f:d9:66:e6:2c:
         ae:fc:f5:83:1c:03:aa:b3:43:aa:dd:22:e2:ae:f4:81:08:a5:
         ab:0e:2c:d7:64:44:ad:da:11:e4:05:3e:2c:3e:a5:f0:d1:4a:
         7c:15:ca:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----