Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File:                     yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier:          0VAIGrL4x5Fe1k6oqr8oEypw+4k4FfLXNI4IF5vXXlM=
Subject key identifier:   4E:D7:83:11:0A:14:F4:3B:F8:4E:3B:32:31:D0:10:F9:F6:BC:D2:34
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer:       /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial:       01962E99717148F9FC1DDF14607E89A277F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: NjJMIEOFeldaE9e5BNx99J0K1Cv3yjF82c8XNS1degY=)
                          2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:71:71:48:f9:fc:1d:df:14:60:7e:89:a2:77:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=4ed783110a14f43bf84e3b3231d010f9f6bcd234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:4b:a3:b4:eb:4b:27:6f:dd:e1:d6:8d:40:
                    a1:9e:63:e9:0c:ef:73:b5:1c:23:20:ce:32:24:8b:
                    c8:b3:54:b9:d7:72:06:87:b8:f8:23:94:30:00:2a:
                    e3:a8:f3:fe:85:f4:a3:43:9d:58:fe:d9:43:0d:53:
                    43:6b:ba:dc:55:9c:f8:9e:f7:2a:f4:41:24:e1:f4:
                    14:ba:a9:40:78:60:c5:54:a1:1b:92:76:cd:24:1f:
                    bc:8b:c3:f2:dc:c3:a1:65:09:8e:19:a3:8f:f0:44:
                    6a:25:d0:dc:14:a1:ec:70:56:6f:c1:95:b2:60:f5:
                    da:13:00:f4:51:94:c5:25:f3:d8:83:40:fe:62:7f:
                    74:eb:e1:94:41:e3:b8:d8:56:c5:c6:64:ab:60:d3:
                    51:5d:b4:e0:ac:c6:6b:a3:5f:6e:15:e2:c7:10:6f:
                    b7:aa:b3:1f:97:31:c3:44:f1:9a:d6:16:e0:c8:48:
                    f1:d9:9b:be:e0:1e:31:5e:94:8c:94:17:ab:ca:00:
                    1e:cc:90:02:ad:2e:33:33:38:f4:cb:e3:d7:60:9a:
                    a8:66:2d:88:2a:08:04:bc:7d:a0:dd:d3:97:85:79:
                    b3:5d:4c:29:b4:45:e1:e6:c8:09:66:3e:bc:6d:c8:
                    24:ae:45:8d:94:17:21:5c:e5:d3:75:4d:35:a8:4c:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D7:83:11:0A:14:F4:3B:F8:4E:3B:32:31:D0:10:F9:F6:BC:D2:34
            X509v3 Authority Key Identifier:
                keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ce:cb:f9:12:f9:f6:65:8e:14:1a:b3:dd:4c:a1:c4:88:42:
         4d:73:bf:cb:58:2d:60:a7:87:ef:5b:87:1d:45:fc:d6:99:92:
         6f:9b:d8:95:4e:62:7e:b8:6a:54:a2:54:91:d9:1d:f2:4b:a3:
         45:b1:73:84:93:f7:00:25:6c:47:fb:68:34:9e:30:b0:20:26:
         26:33:9a:8c:20:cb:82:30:c0:3d:80:b2:a3:2a:b7:9a:f4:81:
         ba:d2:c6:91:3f:c9:44:a0:ac:4c:db:74:1e:cf:2d:68:f0:d6:
         21:40:ca:1e:ba:ef:cb:7c:b1:e5:d7:60:28:45:26:f0:18:c4:
         86:68:e4:8d:c4:42:2c:ea:fb:a1:55:32:a3:5a:94:62:7f:ed:
         fb:18:6e:c1:90:8c:4a:a4:e3:6d:e8:78:af:63:0a:2d:a9:a8:
         12:fa:0c:ee:81:53:82:4e:6f:ee:f6:3b:65:14:18:ad:6e:ce:
         55:15:fd:18:8e:af:63:43:9a:45:bb:5a:25:ef:8e:65:87:8e:
         cd:c9:6e:92:af:c4:6f:07:f0:32:1d:0b:90:26:98:9b:8b:26:
         13:0a:6a:b8:f8:49:ca:44:3e:78:15:d4:20:07:87:a2:95:9b:
         8d:41:ca:aa:f5:6f:b3:bf:06:24:ff:6e:bb:e3:aa:70:68:8d:
         80:5c:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----