Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File:                     pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier:          oYTKf5p5pbTEHtJpAqJ8RkmaF5KjFgrgAQ54EzP89lo=
Subject key identifier:   27:62:F5:05:67:EC:F1:BA:F5:23:10:D9:AF:AB:50:0B:41:2A:83:02
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer:       /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial:       01962F066A70376A38EB4ECA5E1EFCD3E23B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa (hash: XbCa3j6XTEyeRnElswqHZbpKZmfxYHeYOgSyLa4zvQM=)
                          2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: q7/HqFRSadz7JrY2LPdFdyCp6PBP2Z6t0CHaWXt7ppQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6a:70:37:6a:38:eb:4e:ca:5e:1e:fc:d3:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=2762f50567ecf1baf52310d9afab500b412a8302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:1d:33:9b:51:3f:86:ce:2e:e4:97:6a:7b:
                    36:ae:23:c4:5b:6b:bf:f7:fd:39:ff:34:87:74:c0:
                    9f:32:ff:67:47:60:6a:3a:d7:bd:99:83:5b:0b:db:
                    3f:3b:2d:74:ef:1d:58:53:55:a3:f4:46:1f:d6:1c:
                    0b:03:1f:53:52:6f:72:3f:03:f3:c6:ec:a4:00:26:
                    47:6e:81:ae:0a:2b:4a:ce:ff:58:a8:ab:ef:d3:a3:
                    79:c1:0b:14:0a:28:4e:c7:cb:c7:9e:7a:6f:64:b5:
                    db:16:27:49:1d:c7:90:04:80:fc:92:a0:57:ef:22:
                    ed:ae:f9:f3:a5:fe:1d:77:ad:8b:92:45:6b:72:a2:
                    33:ee:0b:9d:71:8f:47:07:fe:12:65:fd:2b:ab:39:
                    2e:8a:25:86:c2:da:4f:7b:56:94:ec:8d:55:90:45:
                    8c:14:4a:49:3f:a8:2e:04:52:5c:f0:f5:71:da:12:
                    dc:7b:d4:4a:24:4e:33:95:cb:45:6a:3e:17:70:4b:
                    1d:ba:e6:e8:72:39:fb:71:37:0b:cb:32:e6:7e:2d:
                    1b:b3:53:7e:b1:f2:2d:f7:6f:f8:25:9f:02:63:9b:
                    5b:b1:85:34:25:ef:12:73:8a:bc:ca:3f:c5:30:5f:
                    a2:86:21:ac:f0:75:f7:bf:6c:ff:e8:7d:31:01:6a:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:62:F5:05:67:EC:F1:BA:F5:23:10:D9:AF:AB:50:0B:41:2A:83:02
            X509v3 Authority Key Identifier:
                keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:c4:1c:93:c1:31:cb:71:69:19:ec:ef:eb:04:ac:e1:d7:
         01:fb:35:56:4d:e7:87:70:f2:e5:03:01:7f:aa:09:8a:a3:fd:
         63:b8:24:2a:7d:7d:d5:4e:5b:17:71:d2:fd:33:c6:a0:d9:d6:
         97:c3:65:f2:fb:9b:d0:48:2c:41:a3:d7:bb:72:16:af:4c:98:
         55:a7:91:a3:7f:77:63:98:1d:f7:5d:37:4f:90:b0:7e:59:c0:
         de:c9:87:8d:cf:7d:82:fe:03:7b:ce:f5:8a:9f:0b:66:e8:e3:
         93:85:7e:63:f0:0c:87:9d:f8:4c:60:aa:91:5e:c8:41:0e:6a:
         a8:92:02:e3:d3:37:86:72:32:85:23:80:76:b8:d9:a8:af:25:
         89:2d:44:a3:0c:bd:5b:28:c8:2d:ce:96:5f:6f:b1:9b:51:51:
         82:96:d4:09:6a:e5:d4:bf:ae:a3:18:ac:1d:b6:22:85:cd:c2:
         05:4c:b3:e5:44:90:0d:e0:42:9f:e5:d1:9e:73:14:4a:da:ce:
         39:b2:cd:43:02:23:e2:92:23:40:e0:58:86:af:5d:bf:c7:cf:
         16:8d:24:1b:24:97:06:1d:c2:7f:07:02:e8:b6:44:d3:b0:e1:
         81:f5:4a:e8:17:a1:27:91:ba:2e:27:9b:83:74:2f:b6:ee:a5:
         ed:a7:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----