Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File:                     iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier:          fZ5ymE6WJfm4jZC/RtBjgHNHtUnT0RqhESaBiCxDYH8=
Subject key identifier:   74:A5:BC:69:FA:D9:08:74:DA:00:02:6E:80:93:3B:78:3F:24:89:15
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer:       /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial:       01962FAB84D854BC3BBD14097BC87F19A2C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=)
                          2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: qms/OsKhJcQRtHYVfc6wkcjYamsiJBjXIkvm5a7ogG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:84:d8:54:bc:3b:bd:14:09:7b:c8:7f:19:a2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=74a5bc69fad90874da00026e80933b783f248915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:60:ab:36:fd:37:6d:77:89:4e:41:32:8f:
                    d5:cf:82:df:b7:47:91:bb:93:65:ed:b3:9f:da:9e:
                    36:a6:4b:b6:d4:11:5f:ee:68:dd:c4:e0:df:77:bb:
                    3f:1e:f6:69:10:e7:50:e8:da:9d:bd:d4:5d:6c:dd:
                    47:6c:0e:58:3f:57:91:1f:4d:7d:c7:4a:86:6f:32:
                    47:bb:cc:ca:bd:35:1f:08:40:7e:80:99:7f:c2:75:
                    f1:71:cb:69:29:12:95:e3:7c:4d:72:15:14:90:2f:
                    ca:e4:be:48:eb:87:51:b3:a3:b0:17:ee:ab:3b:38:
                    5a:c6:b1:7d:88:77:a6:74:32:e4:49:d1:2f:aa:87:
                    84:2c:be:ea:10:4d:d6:23:a8:86:8f:ac:e9:7c:7f:
                    2f:af:98:a1:eb:82:0c:7e:1a:19:34:99:c1:76:2c:
                    44:c4:d5:bd:fa:7d:8c:9f:63:1a:51:35:6e:5c:0e:
                    51:1d:16:bb:ae:38:c8:8f:e1:0c:64:d5:62:43:43:
                    8b:b5:b7:62:dc:08:14:fc:93:ce:38:95:bb:dc:9b:
                    28:3a:4c:c8:0d:4b:f2:bc:b5:32:e4:37:14:36:91:
                    73:45:34:df:aa:16:22:1a:ff:ff:17:7a:c6:38:32:
                    9f:c4:34:13:f8:47:05:cf:15:fc:c6:ac:91:ad:7e:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A5:BC:69:FA:D9:08:74:DA:00:02:6E:80:93:3B:78:3F:24:89:15
            X509v3 Authority Key Identifier:
                keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:92:f5:5d:8a:b6:15:22:ed:80:65:95:39:f5:76:41:7b:fe:
         19:be:13:5d:a9:49:03:b4:76:2f:0a:b1:54:31:f4:f3:ed:f6:
         08:06:63:f3:a8:d3:6c:dd:de:90:b7:70:8b:84:a1:13:89:6f:
         9a:cf:8e:c4:ff:a3:a7:09:f2:53:de:8e:3e:03:7c:f1:6b:34:
         2a:fb:b6:16:c1:c4:b5:19:69:56:3a:e1:5d:78:5b:bf:05:08:
         a0:f3:4d:90:4e:31:86:98:35:66:15:7e:61:33:55:3f:53:8a:
         99:78:14:b6:22:51:ef:a8:22:1e:c2:44:a2:38:93:78:5e:14:
         2d:9a:7c:87:a3:66:2d:0a:47:79:63:15:28:60:f0:e9:b8:f6:
         26:78:e1:00:5f:f7:3f:2b:96:59:c5:ad:c3:0f:dd:50:b9:17:
         d0:a6:56:94:72:c0:64:79:37:fa:c3:b4:9d:46:46:9f:1a:bd:
         9c:de:53:59:cb:89:ca:23:85:57:57:d2:bb:fe:ab:6c:69:a5:
         74:10:a8:5d:6c:cd:d1:7a:0f:23:cc:d0:56:95:65:8c:18:d5:
         25:fe:6e:3e:46:7e:1d:6e:4c:7d:1e:14:f7:a1:59:f3:aa:5c:
         17:13:16:af:de:16:db:19:07:69:ac:ae:2b:29:2a:6e:51:1e:
         9a:81:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----