Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File:                     1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier:          ou7WUEG3/Eu6IpYrFBXxgdLd5SUA/ge9rQRNODAw0M0=
Subject key identifier:   2C:56:03:82:7F:B6:F1:C9:D0:D0:11:CF:26:01:AA:36:46:E0:9C:15
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer:       /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial:       01962F06898B76C4D59F565309DB2B24FA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: Lvp9YjaIIA/lsbIviF6rglpO2BuIF0Ai9CGQbisvcoI=)
                          2: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (hash: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=)
                          3: Ow9-1popY8awsgXf2GNA95SUDT0.roa (hash: VV75kE6L9UJcAH7/vX99k0BbRR6uwoTqG3wp/AEMXlA=)
                          4: qFWMItDWl1Jum13M8uyWAtZgPxI.roa (hash: ulclJf7s+eMnTN7KGqSCmRwy1emYo05IB8k/ir7oKts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:89:8b:76:c4:d5:9f:56:53:09:db:2b:24:fa:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=2c5603827fb6f1c9d0d011cf2601aa3646e09c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:b5:61:c8:20:84:25:0b:ac:80:2f:3f:64:
                    a4:cb:11:60:fc:1f:34:9e:57:de:84:60:75:93:8f:
                    e2:cd:6e:5a:75:09:f4:61:d7:14:4e:af:3a:fb:4c:
                    cf:97:3b:ac:07:8e:09:0a:3c:0d:54:cc:f4:26:33:
                    77:28:57:d8:23:7f:c6:9e:87:37:80:80:f3:b7:2c:
                    f6:0c:3b:2a:7a:0c:ad:ce:50:df:0b:e7:b3:23:36:
                    14:6b:81:29:ab:86:bc:17:57:26:a0:3e:cb:a5:de:
                    8c:c1:6a:ff:fe:59:db:e0:bc:e9:7c:97:80:ab:b1:
                    a1:5e:52:87:1a:29:fc:b1:6f:47:25:80:0a:64:17:
                    15:77:d3:46:46:a1:f8:e2:6a:99:40:b7:22:1e:fb:
                    14:7a:60:13:38:08:35:7e:21:80:92:a5:5a:90:9d:
                    34:93:6e:d0:de:0d:80:78:fa:7c:43:03:36:d0:fe:
                    d7:b6:98:ce:c3:0c:7a:8a:26:16:7a:7a:0f:5c:42:
                    fe:2e:54:e0:a2:76:6e:22:65:2c:8a:37:01:98:ed:
                    75:2b:47:83:a3:10:f0:92:bb:13:77:61:ed:85:b0:
                    d8:7d:f3:cd:f6:8f:7d:20:cd:17:73:67:c0:1b:42:
                    ff:03:92:85:ee:08:28:ec:2f:09:6f:ee:1d:c3:7b:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:56:03:82:7F:B6:F1:C9:D0:D0:11:CF:26:01:AA:36:46:E0:9C:15
            X509v3 Authority Key Identifier:
                keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:64:25:cf:f9:de:44:25:72:2c:86:0f:43:7a:b7:e9:c5:65:
         56:10:2c:05:04:25:68:07:14:b9:70:bf:1f:6b:16:50:12:b3:
         b1:99:00:5e:09:15:c6:09:1a:50:39:6f:d1:b8:45:8d:64:a2:
         1e:85:8c:ba:c3:03:9f:31:a8:63:08:b6:70:4b:22:1f:7d:38:
         fa:00:bd:78:6e:05:28:65:b5:9e:e4:7e:8f:7f:df:d2:2d:71:
         e8:3a:21:72:e1:b5:1e:d5:35:bb:0f:fc:eb:3b:97:bd:c2:c1:
         7d:ce:a6:24:29:1d:58:ea:ee:6e:fc:c3:63:22:ec:2e:8b:be:
         e1:47:d7:f1:81:b8:94:b9:0f:10:65:9e:af:b5:ef:48:88:ff:
         19:18:4a:62:1f:d9:17:c1:73:13:15:d2:81:92:73:92:90:a0:
         53:dd:7f:a2:ca:3c:f3:25:3b:26:d6:71:86:17:23:56:a2:a7:
         c6:57:82:18:07:bd:9e:8e:26:dc:21:ce:07:78:e7:c1:b7:72:
         9e:2b:c1:33:39:1a:32:71:40:9f:6f:e1:7d:51:e8:c1:19:01:
         f6:8d:fe:e3:53:60:96:fc:97:54:a7:d3:11:82:ff:91:37:ae:
         af:12:7d:c5:99:b2:1e:1e:57:fc:6b:50:e5:87:b6:95:70:74:
         dc:4a:a4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----