Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          iDYNz6C05jJmpEMQ248bvaE4gW/gRYSkovvtS8xTIWE=
Subject key identifier:   EB:70:C0:28:71:CD:13:83:0E:22:EB:3B:58:D5:E5:18:8A:47:14:24
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       01962FAB9D18D690C73BF17EF2F75F92E2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=)
                          2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=)
                          3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: jebZxZUBefuBfl6SyUBeT3JyTtA34bvRvcq/LjGKU84=)
                          5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:18:d6:90:c7:3b:f1:7e:f2:f7:5f:92:e2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=eb70c02871cd13830e22eb3b58d5e5188a471424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:57:29:f0:1c:30:60:9f:f8:e4:2c:c2:fc:
                    14:f5:82:d2:6e:47:65:26:65:17:9d:68:00:c4:22:
                    6c:5c:80:35:23:01:0e:c5:71:79:87:ef:0e:f8:2b:
                    1d:11:68:1a:50:67:82:e4:41:09:66:80:91:12:ab:
                    09:07:e6:dc:dc:11:cf:f0:27:b0:f8:3d:87:fd:17:
                    29:51:51:81:3c:8e:32:b2:b4:30:2a:32:5e:cb:48:
                    ec:21:f3:ce:a1:cd:89:7a:71:b6:59:04:7f:81:b7:
                    7a:6d:37:f8:5f:a3:c2:92:60:0b:6d:e0:1d:0b:84:
                    1a:75:da:e7:d2:7f:63:09:14:e3:12:0c:5c:03:0d:
                    39:9f:1e:82:ba:b3:9f:0f:27:fc:95:6e:24:f0:4a:
                    d1:1d:56:16:27:97:cc:17:80:e5:77:58:43:4d:fb:
                    db:ef:7f:1b:e7:02:a8:6f:1f:bf:c2:e5:8e:32:28:
                    dd:69:e2:ae:09:1f:6d:78:79:ac:a8:2b:d8:5a:1a:
                    32:ab:b3:14:33:dc:78:14:fe:c1:cf:eb:2f:e0:3c:
                    64:30:e7:f5:fc:28:65:b4:8d:e3:7e:c9:b7:61:86:
                    8d:f1:98:91:91:bb:c3:9b:dc:63:4f:63:84:23:9e:
                    99:1c:c9:a1:7d:9e:c7:9d:bf:45:69:6a:4c:bf:f7:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:70:C0:28:71:CD:13:83:0E:22:EB:3B:58:D5:E5:18:8A:47:14:24
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c1:2a:11:29:3e:40:44:ff:ed:a3:8f:38:cf:b0:4b:9a:f1:
         7f:97:71:2a:4d:5d:20:c7:f5:67:cd:26:20:a3:ab:66:b4:30:
         fa:8a:ff:fe:aa:43:51:9b:c6:a4:96:0c:97:1e:06:7b:d7:6b:
         d9:79:02:48:79:96:b2:e2:42:c3:80:07:5b:c7:a6:f6:85:56:
         d5:f4:e1:03:03:91:72:88:dc:1b:8e:1c:16:0e:e6:c3:ea:f2:
         36:36:29:59:8e:34:9d:8a:b6:37:cb:d1:2e:77:47:be:26:a6:
         9e:cb:d1:8d:0b:a4:18:56:5b:dd:b7:a2:4a:cf:dc:f5:24:05:
         ec:0d:99:71:af:62:d0:ec:99:2e:34:56:0b:3d:fd:0c:06:90:
         fe:54:15:48:eb:b2:33:aa:6e:e4:a6:ee:bc:11:39:93:58:da:
         37:8f:a6:18:7c:72:c6:0a:85:7e:33:a9:f3:2e:f2:0d:9d:49:
         2d:5b:e7:77:0e:07:19:7a:2b:83:9c:2c:18:c8:2a:2a:76:84:
         8c:68:bf:5e:9a:5f:65:0f:51:1b:4a:2c:01:d4:ad:4e:80:df:
         80:c5:b2:b3:6a:2c:54:5a:70:dc:e0:ed:10:0a:bc:b0:37:1f:
         83:28:68:63:04:bc:fa:6c:30:2d:27:bc:ca:e3:3d:be:ed:ae:
         7a:0d:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----