Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File:                     42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier:          QtK7XTWios6K3xkybukjfJffxCgIYzQ0TDvzWyJJ7BQ=
Subject key identifier:   CC:07:79:13:8A:DB:FC:8C:E7:D5:BA:4E:40:10:73:A5:4D:76:A4:0B
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer:       /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial:       01962E62055DEDFEFCD5B6BD26AF0E88AC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number:          093D
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: ynvWFowHl1S2QuzlDPBrerYGomeSKamnVc2/MnKg9oo=)
                          2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:05:5d:ed:fe:fc:d5:b6:bd:26:af:0e:88:ac:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=cc0779138adbfc8ce7d5ba4e401073a54d76a40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:20:55:29:3d:f0:f3:84:ba:f8:18:03:21:
                    4f:b8:c5:1d:fe:cb:ae:9c:a0:3f:8d:a6:3a:0d:34:
                    b9:ad:06:bd:08:90:30:0c:65:b6:c7:0b:fe:f6:e7:
                    13:03:29:93:b5:43:e1:61:23:5a:03:d6:29:a3:1c:
                    22:34:49:a9:25:b6:79:f6:53:81:46:b0:fd:c2:7c:
                    85:6c:7d:8c:4d:b5:c5:0e:11:79:1c:44:18:8f:df:
                    c1:48:4c:4a:22:0a:28:7e:02:60:be:66:db:f8:45:
                    88:82:87:fb:48:b8:10:e2:d7:07:d0:b1:b1:6b:9f:
                    6b:b1:06:8c:bc:15:8d:b0:88:94:67:b2:20:b5:d5:
                    79:3e:02:c2:70:29:1b:fa:5b:6a:ea:34:f4:c6:66:
                    22:d1:b8:d5:08:1d:3a:1e:ff:21:8a:85:60:33:06:
                    b0:60:b7:f4:db:74:73:35:fb:f4:f3:9e:95:0d:9e:
                    e0:9a:2f:58:61:4e:3e:3d:01:c1:0d:30:e3:c6:d2:
                    68:80:2a:3b:4f:ac:1f:ce:1f:1f:8f:b7:30:ce:4f:
                    0a:79:b5:bb:bf:e7:35:60:9d:fb:ba:bf:5d:f4:89:
                    e5:31:fa:7c:6c:88:c7:e0:a5:e7:68:e6:9c:81:94:
                    98:70:bb:b0:77:47:61:21:61:a6:3d:9c:bb:9e:38:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:79:13:8A:DB:FC:8C:E7:D5:BA:4E:40:10:73:A5:4D:76:A4:0B
            X509v3 Authority Key Identifier:
                keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:15:7f:7f:d9:72:48:3f:00:e7:63:2f:35:45:b2:e9:bb:8e:
         5e:2a:ff:c9:56:a9:e0:3c:38:57:2d:a3:a6:67:d2:32:f1:b6:
         7d:2c:2a:95:6f:bc:b2:ab:00:f9:bf:38:e0:6f:7a:c9:79:31:
         d4:0a:37:e9:e3:58:79:3a:c1:60:a4:bd:17:55:4d:a5:e8:83:
         7b:cd:89:94:93:20:61:08:5b:f2:5e:65:e7:17:d7:c7:da:88:
         6c:70:a7:8c:c3:da:01:42:9d:c4:16:22:05:ae:7d:55:3d:5d:
         1b:95:4b:d7:1b:c5:06:54:7d:6d:b1:2a:ca:f0:89:18:3c:5d:
         a1:f0:54:f3:b4:cd:9a:02:72:d7:cc:5c:36:6c:2b:a1:6a:2c:
         ad:f6:72:cf:13:06:7b:01:ea:b0:17:55:5d:83:f9:86:fb:57:
         cf:00:63:ca:c9:79:60:ca:58:c5:3a:d8:27:d7:5f:2c:ab:f8:
         5a:40:58:f9:c0:55:cd:b3:3a:7f:50:77:6d:49:4f:93:99:75:
         64:f6:5c:98:d4:b4:4d:b9:94:5b:76:2b:55:e3:c1:db:e2:d0:
         33:b2:72:6b:d5:7f:83:36:9a:4b:9a:46:d1:61:ca:40:bc:aa:
         5d:5e:9a:24:96:74:4d:77:62:29:d4:0c:1c:a3:b1:19:5e:11:
         27:ed:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----