Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File:                     86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier:          O2KdIC+9I/PgM1u7xAT4YmIJqciFAGva1H0gI1s2IhE=
Subject key identifier:   2D:44:B6:92:5B:6C:2D:2B:04:03:1C:D7:20:7D:5C:79:93:EF:49:C9
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer:       /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial:       01962E9876DCA8FA0044A798629624E1E32E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: k0qnZVGmMRKMtggsNWM2eIYEl5iuTJ40ZKLb2l0rtN8=)
                          2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:76:dc:a8:fa:00:44:a7:98:62:96:24:e1:e3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=2d44b6925b6c2d2b04031cd7207d5c7993ef49c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:ba:d9:a0:f5:44:38:37:4b:2e:e8:c9:e2:
                    f8:85:e4:64:30:5a:7c:8a:6a:da:66:d8:df:38:ab:
                    c9:db:31:52:42:92:37:2d:fd:59:3f:8a:d2:69:05:
                    23:56:cd:a7:f2:ed:50:da:84:7d:7e:a5:01:06:e5:
                    95:f5:49:da:1b:dc:71:57:0e:44:50:35:bf:4f:55:
                    d9:96:dc:eb:4e:bf:cd:c5:c9:8a:ee:19:c1:bd:52:
                    24:3d:f6:09:66:f5:ae:30:7a:31:e8:ba:3a:1f:c3:
                    eb:d7:cb:11:d4:51:a8:4e:15:eb:de:32:fe:72:a9:
                    51:62:9d:66:84:b7:8f:82:8d:f9:fa:5e:c8:b3:a0:
                    44:16:81:4d:ea:6f:a5:f0:c8:c8:cf:21:b7:53:3b:
                    fa:d8:65:da:22:e9:29:a2:08:b9:28:43:ee:c1:43:
                    da:2e:82:a6:b6:e7:94:af:cf:49:ff:81:7f:18:c2:
                    a9:ad:1b:f0:a9:76:5e:a8:c3:35:b9:dc:46:33:0b:
                    e6:22:7f:25:98:d8:a8:ab:31:f0:1a:8b:e7:25:e8:
                    d0:fd:2d:df:12:4d:53:1d:c9:95:bd:e0:4c:b0:80:
                    7d:29:91:6a:da:8a:55:d3:05:c1:ab:75:9a:11:ac:
                    81:52:9b:f5:1f:c1:a1:02:7d:0b:2c:d8:88:26:5d:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:44:B6:92:5B:6C:2D:2B:04:03:1C:D7:20:7D:5C:79:93:EF:49:C9
            X509v3 Authority Key Identifier:
                keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:36:78:d0:13:71:f2:ae:12:06:35:97:3a:47:bc:c7:db:b8:
         45:da:a6:db:42:ce:d7:40:13:06:76:c2:f1:d8:60:47:d2:30:
         87:14:d0:64:86:41:61:4b:3e:82:05:a0:42:46:b1:0f:6b:06:
         f2:3f:96:d8:04:a5:00:eb:e8:99:5d:56:e1:58:ca:9e:ab:e1:
         8d:83:5e:47:74:56:b3:7b:14:6f:0e:96:38:7c:a5:03:e7:ad:
         1a:65:84:c1:b8:d3:6e:27:44:8f:f8:28:3b:84:14:0f:91:4e:
         81:11:54:7b:73:10:74:0d:0c:74:81:35:18:af:c2:76:a3:ca:
         fc:13:93:5c:e9:5d:26:70:dd:a1:2a:15:95:bc:56:4a:ab:c7:
         f1:35:c3:6f:2c:b7:86:8c:ec:8d:af:2b:53:9f:78:9d:6b:a7:
         18:fa:a5:3c:e8:ca:83:89:b4:e9:34:93:ca:1d:ef:4b:73:f5:
         5d:62:7b:0f:b7:40:49:f2:47:1a:c5:b8:9a:e1:0d:0e:c1:0e:
         65:09:07:2c:1d:68:73:1b:fd:c2:95:16:eb:a9:ef:39:e1:53:
         39:7d:62:a8:0e:28:df:ff:10:6c:b5:26:99:85:1f:a1:0e:42:
         36:22:98:c7:f1:a4:7e:e6:12:2f:9e:39:d1:87:06:e8:4a:9b:
         4b:24:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----