Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File:                     AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier:          ILzhhHYGmzzUc/uoYrO12VWUXS2i4Z/ZTnaPnk04P54=
Subject key identifier:   B9:59:5D:1D:A7:9A:F0:D0:49:D1:65:1C:40:7B:AF:77:CF:3E:88:64
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer:       /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial:       01962FAB6E5412E651B25A2A2F3EAD03D183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: VrISjGGl4HDsmPB9cDI0aTPHPZVhKedy7SUoKZeOmy8=)
                          2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6e:54:12:e6:51:b2:5a:2a:2f:3e:ad:03:d1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=b9595d1da79af0d049d1651c407baf77cf3e8864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:a6:9b:53:28:b2:73:1a:0c:1f:b3:70:16:
                    25:4c:19:46:8c:51:1f:31:0a:5d:7d:59:a8:52:28:
                    6a:06:fd:55:28:6d:e2:e6:c7:7d:7c:fa:59:9b:1b:
                    95:97:26:b9:bc:9c:b1:d3:51:70:b2:7b:90:5a:b7:
                    97:5a:64:2f:67:6b:d6:56:fb:31:97:93:4a:f6:a3:
                    d2:95:3c:37:cd:30:be:d7:52:66:35:01:8e:bf:3c:
                    6e:25:45:94:44:d8:2b:82:b0:11:49:a9:55:a6:59:
                    60:12:40:69:cb:ed:58:d8:87:0c:60:95:03:35:66:
                    94:c9:9a:e5:38:62:f9:db:91:4d:1a:93:09:64:f1:
                    1a:b0:d2:d6:e8:81:8d:d3:bd:24:c2:87:3d:dc:3c:
                    a1:01:95:ab:80:fd:83:db:6b:9b:a7:0f:99:10:fb:
                    8b:22:12:bb:cc:cf:33:a4:57:35:0d:b5:c9:1a:e9:
                    de:ca:34:43:e6:2c:94:54:e3:b6:5b:2d:40:ff:25:
                    7e:38:5c:d8:eb:67:88:61:12:e4:ce:3a:b0:cf:6c:
                    a9:78:7f:26:4b:58:28:9d:cb:b9:8a:37:d3:b2:29:
                    f5:ca:9f:d5:02:7c:b1:9e:73:b9:95:34:7f:77:39:
                    95:7a:4c:a4:39:04:cc:2a:0f:57:18:aa:42:2e:77:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:5D:1D:A7:9A:F0:D0:49:D1:65:1C:40:7B:AF:77:CF:3E:88:64
            X509v3 Authority Key Identifier:
                keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:34:97:81:15:c0:77:5d:70:0a:42:7b:c8:f3:e9:f0:24:6a:
         ad:ad:0c:75:91:a4:a6:df:27:d3:23:fd:94:c8:e9:85:6d:8b:
         8b:2e:55:ff:a4:14:93:e2:5d:25:12:db:68:12:89:bc:e8:58:
         f3:24:1b:a6:82:44:cf:c1:94:3c:1e:d4:21:cc:c7:2d:9b:2f:
         6e:6d:76:74:6d:f9:a8:45:22:b0:1d:7a:8d:49:20:e4:55:b8:
         55:66:c4:76:0c:90:52:6b:99:35:63:8b:b3:0c:eb:b9:05:b3:
         13:bd:9b:13:d6:bb:50:1f:54:71:75:5c:e3:d8:0c:82:41:91:
         cc:f0:f4:70:4b:dc:a4:5f:72:14:4a:94:e8:1c:a1:93:ce:80:
         70:c6:5d:3a:92:59:12:39:d7:4b:2b:31:e1:37:d3:c4:ec:62:
         45:a9:4c:a5:14:7b:56:c2:0e:54:58:ee:5e:5e:f7:3b:98:8f:
         ed:89:30:8e:43:e3:db:ed:62:19:73:e5:d5:28:13:94:fb:f0:
         8d:ad:3f:21:80:35:0e:42:34:a3:77:b8:20:3c:5e:84:ad:7a:
         00:a2:64:20:e8:13:e1:2c:7a:a6:2a:af:16:b1:8e:96:8e:1a:
         bb:e2:8e:74:30:2d:88:c4:d8:ad:cc:bb:04:53:d2:22:7f:ff:
         a1:59:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----