Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File:                     ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier:          BpDl2Dl5jWdaFJFsVXoLuYZNEy/u/TZjwLgZGelYeDU=
Subject key identifier:   E6:59:03:42:35:67:5F:C6:83:60:CE:EB:56:A2:C8:23:B3:16:CD:1F
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer:       /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial:       01962DF39CD97397263D06A2D33BABFA314D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
                          2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: vO/Ag4UnH0d4l4iSjdI+forlcfqqiZvSBPKFR9ZKXWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:d9:73:97:26:3d:06:a2:d3:3b:ab:fa:31:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=e659034235675fc68360ceeb56a2c823b316cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:ae:55:1f:5e:b9:ed:c4:ea:e9:55:db:10:
                    34:4a:4a:7a:81:7d:03:a9:74:f8:d9:7d:5d:dd:4f:
                    1d:ac:70:0e:9d:d9:94:c3:db:4f:4f:64:75:55:ea:
                    71:b4:23:c1:30:0a:d6:c6:a7:5f:ed:48:8b:ac:64:
                    8b:a6:bf:4c:15:5c:85:dd:71:89:28:73:c2:92:53:
                    c3:07:aa:e5:7d:0b:3b:33:94:a6:20:aa:0c:92:b6:
                    9a:70:d6:b5:60:60:cb:7d:fc:16:fc:0a:c5:60:4f:
                    14:38:50:35:10:da:6e:99:13:d6:e1:a9:51:00:cc:
                    04:08:0d:5d:44:f7:f8:77:86:6f:1e:8b:f3:7d:19:
                    3b:a0:b3:56:d1:26:da:99:d7:f4:f2:5b:fd:0d:64:
                    37:a1:6c:20:58:bd:03:a1:92:8b:97:f9:f8:d3:e7:
                    98:b7:3e:0e:33:26:a9:a8:f2:0b:3e:d6:2a:ef:84:
                    5d:e6:17:df:25:d4:80:78:f6:df:61:d7:d0:12:d1:
                    89:db:ba:ab:92:06:8f:c7:e8:32:4b:21:50:94:3e:
                    aa:3d:38:03:75:ca:6b:4a:f3:70:11:d3:82:7a:3a:
                    1f:ee:af:0a:12:10:a9:79:0f:5e:1d:86:98:ad:12:
                    be:13:9a:44:11:29:3a:1f:50:7c:7d:12:08:3a:68:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:03:42:35:67:5F:C6:83:60:CE:EB:56:A2:C8:23:B3:16:CD:1F
            X509v3 Authority Key Identifier:
                keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:26:a2:b0:45:aa:23:cf:d2:87:f5:7a:e0:9b:fc:c0:8e:
         71:4e:f6:7b:cc:00:d3:97:3b:23:95:f9:a9:d7:88:40:a4:17:
         f1:92:d3:76:c7:94:95:71:f7:a9:27:57:59:04:00:38:17:9a:
         e6:68:41:c6:a2:a5:dc:73:96:50:5d:3c:4f:0b:04:cd:35:13:
         18:c2:0e:35:3c:2b:cf:90:4e:9e:6c:a6:d0:56:1e:57:d8:55:
         52:21:b6:e6:88:5e:f8:92:db:32:d6:99:82:04:a0:93:6a:4e:
         e3:c9:3a:20:24:ff:78:42:97:c7:03:d8:a5:f4:e8:36:d0:17:
         08:f6:53:f8:9d:51:a9:75:ef:48:8d:94:f4:83:ab:3b:9f:bd:
         8d:54:43:d8:cb:56:8b:0e:d5:da:63:3c:4d:cf:87:28:4e:2c:
         2c:27:8c:f1:80:04:dc:5d:58:40:f0:94:e6:f7:33:bd:c6:ed:
         fe:66:c0:ab:ee:bf:6d:df:ae:4c:84:f4:52:02:4d:60:95:02:
         f7:04:17:9f:24:f3:6f:53:2b:98:7c:04:f8:39:eb:5c:21:c7:
         19:12:16:d9:07:5d:63:6e:b0:b6:86:f7:b6:04:a7:56:41:ba:
         e9:1c:3d:16:49:74:53:6f:17:94:3b:04:81:71:9f:36:47:ef:
         e3:19:77:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----