Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File:                     rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier:          hrMJJmjfYtLHAB4aflFYzp08UYDJDaNnw5N0/Q1N4fk=
Subject key identifier:   30:0F:A9:DF:1A:3C:D4:90:6A:B6:16:E8:F1:83:ED:B1:5B:EA:E5:20
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer:       /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial:       01962F7445B12ABE796CC1AE83E221F54933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: e7v6KfsQ42Ju_th6J-KjayhE0pc.roa (hash: 2QzdBlDL7vaApFGThIZoir4ZfxpYLQiDlB23vrYFa1A=)
                          2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: O3wqbiTcWzv3Xu/OJ05ex/WVAjJkZk8omyfCCGPVIWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:45:b1:2a:be:79:6c:c1:ae:83:e2:21:f5:49:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=300fa9df1a3cd4906ab616e8f183edb15beae520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:6a:1a:bb:4f:27:f3:7c:d2:d8:54:a6:8e:
                    3f:df:15:62:10:29:2d:f2:36:59:5b:73:92:46:c3:
                    89:31:38:13:8f:78:ca:17:0e:85:cd:d5:8a:da:a0:
                    ee:40:4b:9c:5c:13:f7:79:d2:96:2f:31:b6:32:1a:
                    dc:cc:be:46:c9:5a:3e:60:b6:da:00:62:6a:cc:39:
                    64:85:4f:58:ac:43:49:41:f3:dd:ef:f3:54:8f:e7:
                    1a:a7:3b:b6:ee:7d:59:ec:b5:16:3b:7e:6d:ff:74:
                    00:12:8f:c1:6a:68:e7:91:42:82:93:76:b9:8c:cd:
                    9c:5a:77:cd:76:9c:85:fa:bd:3f:01:d4:57:d6:31:
                    2a:9e:3d:62:2e:45:04:29:41:40:d0:02:1a:c7:dc:
                    bb:82:d9:55:85:51:ce:b6:78:7e:21:2a:c4:b2:e6:
                    3b:42:a9:44:b5:2e:69:94:94:a3:d0:f0:95:3d:2e:
                    b2:cc:85:5c:8a:ea:03:b2:31:29:d8:ff:f0:5f:9a:
                    38:48:e0:87:b2:be:45:f0:d0:7f:2b:60:49:8d:24:
                    19:28:f6:12:e9:b8:b6:34:87:8d:c2:bb:f0:0e:56:
                    d1:cb:90:9d:90:f9:75:2f:65:cc:38:2b:0f:fe:30:
                    67:a9:68:65:c8:ef:a1:36:ac:24:44:9c:c1:5f:bd:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0F:A9:DF:1A:3C:D4:90:6A:B6:16:E8:F1:83:ED:B1:5B:EA:E5:20
            X509v3 Authority Key Identifier:
                keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:a4:70:7c:1f:70:53:be:06:ee:fc:19:bc:d8:54:33:c1:
         20:50:a6:68:13:33:a9:79:3e:24:a6:02:22:e0:94:c9:a9:e9:
         c7:97:ac:f6:75:9a:da:bb:83:ec:b0:b1:9f:85:33:e6:d4:08:
         11:00:5e:19:ea:d6:44:1d:dd:b4:3f:c7:90:53:89:36:b5:c6:
         7d:9a:7d:e8:8a:a7:0d:40:c5:78:98:ba:8a:19:72:63:4d:52:
         d2:2b:86:2c:20:1c:ce:36:0e:dd:3e:8c:5b:4e:1f:b7:6d:b9:
         82:53:57:6b:80:ba:ef:62:42:c4:c9:5a:bc:ea:a9:a7:4d:9d:
         d9:c6:f8:88:fe:7b:df:82:4c:b3:e7:6e:e9:59:11:ad:81:4e:
         a2:c8:8f:69:c4:b5:95:fb:c8:97:5f:f2:20:f8:a6:9f:8b:1b:
         af:12:7e:f9:7d:7c:c1:04:45:f7:ad:78:a4:75:0e:de:26:0a:
         ae:99:b4:a2:55:ac:5c:97:0f:44:ad:e2:71:94:f6:1a:7d:44:
         bf:c2:a5:18:a7:1b:d7:1c:9c:42:2f:fb:35:db:2e:b3:fa:81:
         d8:0d:58:b8:9a:23:df:16:db:c3:40:69:87:3e:8a:8d:f1:a6:
         23:4f:61:76:f1:96:14:c2:24:2a:14:25:0b:dc:5b:12:5b:3a:
         80:72:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----