Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File:                     H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier:          9Kf+R1PTVveIsyXu3baQ8vFGTl1QX0RJDRlrJf4/orw=
Subject key identifier:   9D:6E:71:E6:5B:A2:80:24:25:7A:FB:36:97:CE:3E:72:6F:D4:02:CB
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer:       /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial:       01962F749CC1841D6D26555C3346D9CF1531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number:          0D1F
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: NC8jjauKW3Fh5JbjaHk3SFEdagnlAr6xopqYQ7X9xQA=)
                          2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9c:c1:84:1d:6d:26:55:5c:33:46:d9:cf:15:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=9d6e71e65ba28024257afb3697ce3e726fd402cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:32:46:13:84:1d:67:a6:48:31:65:4a:a2:
                    4d:cb:dd:22:df:56:a6:50:d6:2c:1b:6d:38:65:2c:
                    82:56:3e:c1:ba:17:0a:96:0e:ec:a9:93:05:b8:4d:
                    16:61:e0:89:d9:81:20:6a:87:f3:d2:6f:01:ee:0e:
                    f7:40:fc:77:41:2d:66:86:55:78:1b:1b:ab:88:6b:
                    7d:e7:3b:b2:43:71:55:8c:4e:7a:c5:3f:42:20:78:
                    6b:89:55:e4:50:d2:7d:e8:d8:34:95:fb:71:0e:0b:
                    ad:6d:1a:b7:4a:7c:95:f4:25:99:1a:59:ee:1a:7a:
                    a2:4b:50:0c:1b:9a:38:79:c7:ca:71:16:6e:bd:80:
                    2c:13:3c:5f:4e:b5:b0:62:f3:39:d0:11:4c:5d:c2:
                    67:52:6c:11:33:0b:6a:dc:30:c1:48:77:3d:5b:67:
                    29:42:4c:04:2c:a7:bc:ed:4f:1b:0f:aa:77:db:38:
                    12:37:8e:70:75:dc:7d:4f:f1:c4:f7:9f:54:9f:86:
                    06:e5:87:0a:d2:bd:f8:b1:46:05:09:eb:60:34:f7:
                    76:d0:07:c4:d3:32:0a:1e:f0:de:22:d1:30:c3:43:
                    53:02:8e:eb:26:a5:03:a3:46:d4:1e:08:2b:af:41:
                    5a:b5:31:63:91:c8:10:64:77:12:3d:2c:b2:5d:78:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6E:71:E6:5B:A2:80:24:25:7A:FB:36:97:CE:3E:72:6F:D4:02:CB
            X509v3 Authority Key Identifier:
                keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:d7:0d:3e:c2:d6:d6:62:a1:79:a8:1c:b0:17:08:9f:ef:
         25:61:6b:72:9b:18:20:4a:8a:c1:12:19:43:12:97:43:4c:96:
         d4:c6:33:59:ac:c9:b9:4a:3e:30:24:3d:b8:41:25:c9:f7:08:
         27:80:20:81:17:3b:40:0a:d6:24:f5:5e:d0:6e:0a:35:5b:5e:
         9c:b7:e0:6e:dd:67:35:45:d6:2c:c1:db:8a:ff:71:f4:a4:25:
         ae:ad:d2:e3:e9:70:8c:c2:e6:60:fc:09:9e:70:bc:f9:65:83:
         dd:ef:d2:23:b4:ec:7e:c0:e3:d3:ea:8f:ec:5b:c6:ab:8d:85:
         15:d8:75:ce:92:21:87:44:5b:58:bd:3e:e6:fd:da:97:06:01:
         2c:cf:49:33:07:73:1b:07:80:d9:63:24:82:be:a2:f6:e0:bf:
         5c:be:3e:94:32:26:5f:4e:3b:e9:86:27:bc:97:a9:90:ea:e3:
         63:6a:ec:7a:2d:da:68:60:c8:0f:f6:85:69:e2:74:7f:b1:00:
         e8:d1:6c:ff:99:fe:1e:f4:44:72:c3:aa:39:84:fe:08:e3:e2:
         9e:f7:f8:a9:aa:e8:f1:c2:97:16:5b:e7:7e:2e:87:23:67:d5:
         9b:6f:00:dc:47:18:da:5f:98:f6:98:58:d6:0a:4f:2c:1c:2c:
         4c:0e:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----