Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File:                     lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier:          mSO4O+sdW5TzALikKz1tq92GMmKUJdOvY8enmHHf+7s=
Subject key identifier:   81:8E:94:FB:89:E7:DA:F7:F4:F9:B1:11:7C:D7:A2:49:96:2C:89:D7
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       01962FAB6F0381FD2F7975D73B21E46BC7D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number:          1333
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
                          2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: tK4HyYdSaGmxA2jVt24GAh8peNTAh+vTku5dniVwJps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:03:81:fd:2f:79:75:d7:3b:21:e4:6b:c7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=818e94fb89e7daf7f4f9b1117cd7a249962c89d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:bb:43:19:9d:ae:35:88:44:73:af:8c:6a:
                    b4:5c:a4:56:24:5c:03:98:f9:92:ea:0a:3a:92:52:
                    3a:00:e6:97:5a:37:c6:c1:2b:a7:2e:26:01:2d:bb:
                    8e:22:c6:dd:3a:e3:e1:c4:f1:3f:2d:99:83:d9:84:
                    74:42:cb:dd:1c:e4:c5:09:a3:3e:0e:b9:30:5c:9f:
                    05:bd:e7:9d:26:fd:66:d1:04:ae:05:84:bb:66:43:
                    87:ad:ad:f5:d1:8b:32:3c:ab:3a:0d:e9:c6:8b:a1:
                    6c:7f:7a:c8:66:0b:3a:17:88:9d:2c:00:1d:e6:28:
                    b3:3c:07:17:a3:71:64:f9:3b:ce:3a:5e:62:b9:05:
                    5e:9a:95:94:aa:31:1f:13:a1:e6:1d:96:be:cd:bf:
                    f7:26:44:27:c3:6f:6e:eb:e5:ae:a3:00:04:ba:7b:
                    dd:7b:2e:83:f6:86:7a:f1:f3:64:62:5c:6b:2d:14:
                    6f:12:e7:59:97:de:f6:fc:a6:b9:fd:99:f3:1d:f2:
                    99:a4:7c:d4:10:83:77:ad:29:4b:9a:32:6e:fe:7a:
                    24:dc:d8:80:41:ec:9c:7c:5c:70:39:81:88:ab:0d:
                    7d:fa:51:85:1e:5a:75:d2:65:50:01:b9:51:26:f6:
                    68:fa:4e:ec:92:60:70:ae:05:3a:e9:22:a6:7f:f6:
                    71:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:94:FB:89:E7:DA:F7:F4:F9:B1:11:7C:D7:A2:49:96:2C:89:D7
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:0e:5d:6c:37:e7:ae:49:81:77:d8:b7:74:d3:ca:ed:77:
         1c:2a:68:e1:98:49:99:97:2d:46:92:99:9c:95:e7:3f:91:6a:
         f0:38:b5:de:7b:af:c1:5d:cb:12:2e:79:0b:9f:d6:1f:2b:a5:
         96:5a:b4:9e:46:35:24:bb:45:48:fa:6b:b0:6c:64:cc:74:fa:
         d6:18:74:47:7e:e4:38:f4:31:89:3c:3c:2b:8c:e9:09:41:a2:
         24:b6:50:b9:e0:96:52:87:c0:d1:3d:f8:f6:69:f8:bf:eb:a7:
         85:3f:e1:35:2b:d4:18:6f:5d:41:07:23:59:a1:fd:35:81:46:
         1e:44:92:e9:83:b8:17:5b:7a:4c:4a:19:a5:47:3a:82:3f:83:
         a5:a1:58:88:fe:cc:3b:b9:be:76:4b:c7:2b:f9:ab:f6:51:63:
         7f:92:2f:25:e2:0d:d3:54:c6:78:cd:da:48:97:ef:9f:17:7a:
         33:cb:b0:2e:18:fe:3b:de:b5:dd:09:ef:62:aa:e0:d9:1d:bb:
         7d:94:d4:6b:db:5c:a3:bb:f9:1f:9d:5d:73:fc:e7:c1:c5:ac:
         fb:6d:5c:42:cd:7e:10:cd:70:18:82:50:5f:db:44:5e:63:b4:
         cb:f4:a0:cd:88:7f:49:ab:97:1e:e9:0b:01:0a:86:5f:fa:ca:
         d6:4a:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----