Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File:                     MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier:          5hIxmC0B52AYLDd1n5X+f5nSxHwpsXlrZGmnUKOw1ns=
Subject key identifier:   2A:CF:60:10:C5:86:8E:16:9B:23:72:29:7D:65:EB:CA:45:8B:66:73
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer:       /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial:       01962E998D14AE8C6BB9DBC6557E8BF052D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: bG4MrbN8HmWQw/KCq1ByN2rFyMVbGJvDEgZSmAKxpQ0=)
                          2: hTnUv0N90doM0ZMOLyyFEOW9iK0.roa (hash: YJzqmH02+AW23mfkqCHZcxj82Owa829HDO8rFi0lEGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8d:14:ae:8c:6b:b9:db:c6:55:7e:8b:f0:52:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=2acf6010c5868e169b2372297d65ebca458b6673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:b5:6c:0e:90:bb:df:fa:50:6c:0c:5b:f3:
                    6b:a5:02:e1:42:1b:2a:21:03:74:25:f2:db:34:87:
                    b9:b9:7f:a9:11:0a:07:6d:70:66:94:b4:a8:5d:92:
                    1e:0f:c2:94:20:2d:fd:26:c1:32:89:44:24:fd:7d:
                    28:3a:46:a6:58:a7:57:ab:ec:ec:38:18:b5:55:e4:
                    c0:bf:1f:39:ce:b8:dd:fc:c4:22:e6:fd:75:2f:68:
                    08:fc:18:64:f2:83:13:13:54:d9:25:22:aa:33:67:
                    9a:aa:78:4b:73:31:67:c3:6a:cd:04:1d:37:6f:a8:
                    97:40:4f:65:1b:be:dd:0a:ad:09:03:4e:bd:a1:b5:
                    f0:bb:82:cd:04:23:a8:13:13:99:47:eb:3c:ba:d3:
                    3e:36:18:66:fd:a3:e8:c3:dd:30:97:79:69:e6:f3:
                    bb:77:12:bb:f9:8e:48:68:9f:7b:3b:7c:9f:27:08:
                    9e:07:a5:1b:d5:a8:d2:ff:b8:2d:6c:a3:f2:86:cb:
                    22:57:ef:59:7b:d7:57:ab:7c:71:f8:0b:69:ce:a1:
                    e6:c4:ae:48:d8:61:e0:65:ff:8d:ac:2e:9b:30:b1:
                    0a:eb:4d:4a:60:36:c2:dc:8e:6f:69:2d:72:75:04:
                    73:25:ba:bc:c7:0c:43:38:27:07:83:e7:74:40:ec:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CF:60:10:C5:86:8E:16:9B:23:72:29:7D:65:EB:CA:45:8B:66:73
            X509v3 Authority Key Identifier:
                keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:82:a9:35:d0:5f:e5:0b:60:c9:59:45:2f:50:d2:86:06:68:
         81:b8:37:52:d1:1f:ef:98:ca:fb:62:5e:18:9a:10:7a:ce:88:
         5a:15:0c:0a:2b:78:46:60:ea:53:06:48:03:96:b8:03:a9:74:
         79:0c:f4:d1:74:3c:6d:2e:f7:6f:13:5d:27:f6:4a:22:38:01:
         00:64:c9:59:c5:9a:9f:08:8d:32:05:25:21:e6:cf:b9:dc:ff:
         8c:a2:a5:66:64:d9:ce:57:5a:eb:b3:3b:60:51:3d:66:76:ce:
         94:d0:6f:d3:78:b3:06:61:30:6f:a7:c3:cc:02:fd:41:f2:fe:
         c4:eb:6e:d4:ce:6d:bb:9d:6e:19:49:69:db:79:d8:2a:a2:26:
         2c:91:ec:97:6d:3a:4c:ee:c8:64:d1:24:3b:60:a0:b5:e2:b2:
         60:a9:ed:32:c3:e8:bc:96:af:b7:e7:b9:39:64:76:d1:69:e6:
         b4:ed:ec:4b:0d:0a:53:ff:0d:58:3b:8b:48:5e:e6:7d:f3:4b:
         33:f9:84:97:a6:26:0e:21:29:08:0f:96:2b:ca:94:25:d2:97:
         13:c5:62:a3:50:fd:1f:45:71:ee:93:b2:16:af:07:14:e2:c5:
         c0:59:16:79:15:8c:9e:38:f5:3b:49:6f:a9:39:ca:f8:9d:87:
         cf:24:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----