Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File:                     CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier:          WQzhao9wyyO/oTF+0suTaeR51f+DigQvR5v27OlnDaI=
Subject key identifier:   E9:BE:7C:CB:08:04:11:F1:A2:66:FC:33:37:F3:2A:9C:18:76:93:A7
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer:       /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial:       01962E988D5A763CA52242A1B66B124349D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number:          102C
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: vR9QNmAH+AZ8TZ5igFxgqRlY/reGl2egNS4KYxUf2Jc=)
                          2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8d:5a:76:3c:a5:22:42:a1:b6:6b:12:43:49:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=e9be7ccb080411f1a266fc3337f32a9c187693a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:00:fd:c6:e7:04:6c:f1:43:a1:17:0a:6d:
                    6f:e7:e6:44:2f:e5:84:12:56:29:83:cc:d9:a9:e5:
                    17:d8:0f:7c:20:03:33:07:5b:71:6e:0d:6c:bb:8d:
                    7a:d3:52:43:a5:94:cc:88:5c:60:9b:a9:81:ed:25:
                    ab:d3:55:36:4d:00:7c:f4:ca:8e:e1:35:72:a8:7d:
                    5f:37:17:13:54:0b:ff:e3:7c:39:16:0a:1b:c0:cc:
                    b6:0b:25:64:06:97:7d:d7:42:c2:15:14:d5:d9:21:
                    37:06:be:19:e7:2f:1e:d0:2e:16:de:ae:12:8c:e8:
                    cc:18:3c:0d:47:a8:24:cf:21:8e:67:ba:ae:3e:b4:
                    c1:84:29:e7:76:f1:48:1d:85:19:81:64:b7:f9:43:
                    9d:0b:88:ba:5b:f6:24:e3:a3:fe:65:c9:04:0a:cb:
                    bd:d1:a5:f3:59:d4:3b:e4:ed:77:5d:4f:01:4f:97:
                    20:cd:29:ec:d1:7f:73:01:d0:b9:c0:5d:6f:e8:a9:
                    fe:ad:dc:7e:14:7e:86:48:f1:b8:48:47:12:c5:a3:
                    66:b9:c6:53:d7:61:af:d8:83:8d:f3:87:dc:83:6d:
                    f4:54:4d:5d:09:25:8c:88:e4:db:b0:9f:6b:c2:c0:
                    7f:80:5e:59:ab:08:95:ea:0a:8d:f7:56:23:dc:a4:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:7C:CB:08:04:11:F1:A2:66:FC:33:37:F3:2A:9C:18:76:93:A7
            X509v3 Authority Key Identifier:
                keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:53:b9:01:d3:8c:61:00:44:3c:cd:13:c0:4a:00:a8:30:cb:
         34:47:7f:2c:fc:18:fe:d8:91:f8:7b:92:23:4e:da:69:19:e6:
         46:92:e8:15:11:25:28:d0:7c:4f:8b:e4:15:03:c4:0a:b2:e7:
         73:13:2a:23:ab:a8:0c:7c:e3:6c:f9:4f:2b:1b:ef:7f:80:8b:
         b9:03:37:e0:3a:47:b0:c5:31:3d:42:5c:20:62:2f:a7:bf:20:
         25:64:1c:5c:2f:93:94:db:ca:aa:49:f9:d3:b3:8b:f9:10:60:
         30:4b:12:72:14:f4:19:29:aa:e2:5b:8e:1a:57:d6:90:e9:47:
         8d:a2:67:12:92:cd:86:de:be:e5:6a:7b:20:57:ee:93:d3:3c:
         7d:1b:ec:4c:ac:58:d4:f7:53:ee:64:c7:22:9c:bf:46:74:1a:
         27:17:d0:0c:3e:29:8c:f1:c2:9e:7c:6e:29:d5:a0:21:69:84:
         69:79:45:e9:5e:30:b6:e3:36:68:90:aa:9d:13:57:d8:bf:0d:
         41:9c:80:80:2d:66:24:37:db:34:18:28:98:21:a7:fa:02:d1:
         ca:35:0b:dd:7e:c3:9e:8e:e4:c8:9b:53:26:2d:0f:c2:87:55:
         ba:56:9e:98:f2:d5:b7:63:b4:db:d0:87:19:f1:5b:a2:bb:cd:
         34:e6:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----