Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File:                     AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier:          j/J12wlexPjTTS76eGedLvIEPTU8v9cxO8/OqY/l+Ec=
Subject key identifier:   CE:B2:0C:DC:5E:41:C1:12:CF:40:8C:07:E9:3F:38:F0:6C:94:C5:60
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer:       /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial:       01962F0686A7F0B78B156A7843E1C9A1B201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number:          1388
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: LqNHzZRW59Ar2nkZXEC3k2t2mHS5vUOEJ+uUgKNr9tg=)
                          2: bOONrlZHdROoIahZ7NmIjgIdExM.roa (hash: 1aT2l6/v3aO2MOldiF+P6gsdMx47ItIcMI7fEC/C0L0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:86:a7:f0:b7:8b:15:6a:78:43:e1:c9:a1:b2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=ceb20cdc5e41c112cf408c07e93f38f06c94c560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:71:af:3a:e1:65:7f:60:a6:26:6e:9d:72:
                    32:d5:42:08:01:81:aa:83:32:0c:76:33:19:3f:f8:
                    dd:73:a8:52:b3:5d:89:1b:57:e0:f6:88:cc:ea:c2:
                    dc:11:37:25:f1:fa:bc:96:3f:3a:4b:8a:89:1f:bf:
                    6a:20:29:d7:8a:08:32:6d:33:da:71:be:71:fe:7c:
                    09:41:d5:a0:dc:0a:5a:f6:e6:2e:18:7b:24:83:df:
                    df:35:c8:d7:66:2e:28:92:e2:af:d1:2c:b7:4f:d6:
                    55:46:d1:df:93:84:66:9f:a5:65:72:d8:f9:71:e8:
                    fc:c1:69:ea:f2:cf:5e:bf:81:c2:e6:70:7e:22:71:
                    d5:f6:5c:3d:bf:b9:08:70:93:20:ed:04:32:4e:79:
                    2d:8b:29:46:88:9d:b3:10:5c:e3:64:02:51:e4:3d:
                    76:73:c6:6c:b1:30:34:88:e4:57:ba:83:1e:0a:22:
                    cd:d8:3a:bf:51:56:0c:67:db:e2:51:98:ac:d2:7f:
                    5c:1b:5a:18:08:48:3e:fd:e6:1b:21:3b:76:7b:c6:
                    68:d0:a0:a2:87:d0:53:25:a9:72:fe:af:00:e5:28:
                    63:19:e4:cc:58:1d:71:38:cf:30:27:ec:9e:50:07:
                    71:26:12:3d:0e:48:18:a4:0f:9d:a7:ec:ba:18:5f:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:0C:DC:5E:41:C1:12:CF:40:8C:07:E9:3F:38:F0:6C:94:C5:60
            X509v3 Authority Key Identifier:
                keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:bf:6b:1c:23:55:7e:fb:63:d3:5a:82:71:e2:7f:7c:b6:
         0f:20:fd:4c:62:ea:c9:c6:56:17:1e:67:17:75:0a:7b:cb:7d:
         c2:5f:9c:fd:af:dd:fc:3a:8a:de:e0:d3:3e:b1:87:67:b5:0d:
         66:b4:eb:2e:0a:bd:18:3c:60:1f:d6:5e:12:2f:f2:0f:db:93:
         ef:a8:f5:f1:72:0f:86:8d:a4:e3:ae:7a:9b:2d:c9:81:10:ed:
         0f:8d:51:3d:88:d0:3a:db:83:c9:82:ce:e5:99:7c:55:17:a6:
         05:a0:8f:f3:67:bc:f4:a8:8b:32:4c:05:18:4e:50:14:c2:39:
         eb:4a:33:09:2d:d0:ce:d2:ba:49:97:26:79:42:77:10:4e:19:
         44:66:11:73:8d:e7:31:5b:6c:9a:f0:e5:20:53:29:cc:73:3a:
         65:e7:ac:d0:2f:b2:33:ce:8c:f0:51:69:ae:f8:a9:e0:03:fa:
         32:49:a7:a4:49:98:4f:d7:60:6f:00:8e:d6:95:84:50:fc:e7:
         7f:79:6f:42:19:44:5c:f6:14:5a:ea:1c:9d:80:9d:43:03:dc:
         39:30:28:ba:0f:de:22:1a:b3:cd:94:51:79:c9:09:e2:10:3a:
         02:ab:4a:b8:0f:b4:f4:87:b6:3f:1b:6d:e0:28:f6:0a:86:6e:
         06:84:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----