Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File:                     pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier:          VW3to4HtKFp7S5lHn2jBqkD+H0KNNMkVjpVdoVf6LKM=
Subject key identifier:   8A:12:71:1A:3E:BF:38:D6:38:5C:60:70:F9:8C:51:12:40:33:3A:E0
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer:       /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial:       01962E99044445381AE26790ACCB6422E5B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: BfRloUJHji-lEUaufwMc19LxiqE.roa (hash: 94Vq30eYX4ShhMgHZx9s+4a5DKBY3zN9CTPT6BVaH44=)
                          2: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: 4gT745jxBiZYOKWtbO0Z3WhlEaYVGIoHAAOe7lNU8oI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:04:44:45:38:1a:e2:67:90:ac:cb:64:22:e5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=8a12711a3ebf38d6385c6070f98c511240333ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:ce:75:90:0c:74:37:8a:2a:95:26:bd:aa:
                    89:3b:35:2d:a0:3f:f4:f6:50:37:2e:5d:2f:d0:61:
                    be:a3:22:c0:00:93:c7:b3:72:2c:20:74:d8:13:de:
                    e4:94:68:1d:52:dc:d0:ad:5d:95:43:aa:4f:50:be:
                    d6:26:63:35:7e:10:15:8e:0a:6c:8a:a0:e3:1b:c8:
                    3b:21:b6:a4:2a:19:4b:96:db:8a:70:06:fa:24:ee:
                    4b:28:cd:dd:db:e9:2c:1e:fd:87:71:14:4f:f6:66:
                    e9:8e:28:6d:03:1e:83:a5:8f:35:cd:91:e8:f6:0d:
                    93:bd:d7:2f:06:14:16:d6:51:44:d5:6a:dc:96:d0:
                    c9:db:db:c4:c9:b8:92:49:ab:6e:6f:af:17:11:9a:
                    44:81:bd:83:cb:1a:89:6b:9c:58:26:36:1c:10:9d:
                    08:32:a6:81:b6:c5:bb:86:ce:c5:30:43:a6:1f:b7:
                    93:91:34:a7:c4:99:e3:80:70:cc:92:d3:88:27:4b:
                    1d:28:2f:5f:90:df:b7:0b:f4:1a:13:78:5c:03:19:
                    bc:57:25:4e:ee:8d:ce:1c:6f:55:96:40:b6:27:a9:
                    76:3c:07:ab:bc:96:07:aa:94:5c:8c:fe:08:2c:59:
                    81:53:c0:c2:f2:e3:ce:95:da:70:05:38:a0:1c:57:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:12:71:1A:3E:BF:38:D6:38:5C:60:70:F9:8C:51:12:40:33:3A:E0
            X509v3 Authority Key Identifier:
                keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:b7:e5:98:8e:bd:1e:4f:f5:a3:b2:1a:d2:fe:18:87:b3:
         a7:76:96:4e:7f:82:df:91:97:cc:24:2c:5e:48:95:2d:3d:0e:
         44:48:12:90:c1:49:cc:b1:fe:a3:d7:95:20:11:55:2c:72:42:
         76:f2:65:91:1b:56:cb:8d:9b:16:29:bd:94:2f:4f:c6:fc:e8:
         7d:bf:e6:36:de:b6:67:d5:65:ab:5b:a7:52:6e:19:ee:07:5d:
         a3:19:fb:f6:f4:50:42:35:8c:e3:91:01:cd:0f:cc:21:2c:30:
         d6:b3:be:c0:e6:ea:3e:b5:89:72:a8:9a:9d:62:87:ed:99:8f:
         38:74:a8:78:68:e6:2e:99:3f:bc:b2:ad:77:52:91:e4:2f:85:
         f1:a8:aa:73:f3:47:d2:db:05:a7:b9:70:7d:f9:2d:ac:ef:b2:
         42:08:ed:51:bb:33:b5:b8:25:56:31:a3:04:42:7d:0b:78:e0:
         b5:4b:2a:64:70:81:4b:27:db:1a:c7:0a:b0:3e:a0:4f:fd:44:
         d3:d6:bd:93:a1:ad:78:aa:01:2a:f5:5d:b1:b3:0d:4f:86:4f:
         6a:bd:20:17:49:fb:3d:8f:bf:22:de:0c:56:71:01:6b:7b:f1:
         f3:3d:2e:bd:43:0e:e2:01:5d:bb:3c:6c:71:5b:a0:88:5b:67:
         99:0b:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----