Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File:                     r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier:          SZKTJ4ql05VIthRvSlPfoVMuxP7aoNufQVu2+wJ320U=
Subject key identifier:   91:2C:09:23:87:1B:4D:45:36:B0:9D:84:2B:35:CE:E0:87:CB:B6:92
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer:       /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial:       01962E61D36717E74269A7A9C8D4E07CD050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number:          076B
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
                          2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: PPOaV1shZhDDhZQ/H/+sUkPwGcKddGs6xTBth+5yf5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d3:67:17:e7:42:69:a7:a9:c8:d4:e0:7c:d0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=912c0923871b4d4536b09d842b35cee087cbb692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:42:0f:10:ff:26:66:e7:0e:87:6b:8f:aa:
                    f5:1a:1e:a1:ce:39:e8:eb:ce:5c:47:28:95:09:68:
                    57:48:f6:bd:67:f8:d7:52:fb:63:34:83:13:3a:a8:
                    b4:58:86:a8:b6:66:ec:96:4d:cb:d2:24:ef:9a:6a:
                    f3:c6:c6:9c:87:dc:df:d1:db:57:41:36:dc:c6:d2:
                    64:61:a4:ef:cd:5e:9e:2e:a7:05:40:33:eb:fe:35:
                    bb:00:50:97:b7:f6:8f:c4:c9:25:60:d9:f2:c9:ea:
                    d0:68:02:a7:4e:37:54:86:fc:9e:6c:52:23:08:09:
                    6d:3c:49:d9:4c:3e:78:8d:ba:44:e1:f9:98:36:aa:
                    81:1d:38:8b:e4:25:43:d6:31:08:dc:24:d8:f1:f2:
                    dc:c3:fe:ba:c0:31:7c:35:a3:09:e8:cf:36:00:f0:
                    95:16:24:a5:4a:2d:af:b7:08:70:fc:a4:10:f7:c8:
                    12:9d:a5:53:9d:96:e3:43:41:ad:bc:d0:5c:7b:0f:
                    eb:0c:22:6c:45:46:eb:77:5d:2b:e1:76:74:1a:72:
                    99:2e:ae:76:2e:61:91:9e:3d:15:25:dd:68:d1:de:
                    f4:29:6e:85:03:cd:e5:26:14:21:72:e8:9c:86:d5:
                    51:07:e7:a5:d1:6f:cf:7f:07:0f:69:d4:85:fc:29:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:09:23:87:1B:4D:45:36:B0:9D:84:2B:35:CE:E0:87:CB:B6:92
            X509v3 Authority Key Identifier:
                keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:dd:ac:46:2b:1e:e8:d9:b4:65:e4:36:eb:09:9c:0a:ce:
         ff:0c:5a:c6:f8:21:2f:4e:35:7a:cf:88:38:dd:db:79:6d:79:
         5e:0f:f2:8c:4f:64:ae:12:f4:73:11:26:e6:9d:20:46:ad:1d:
         66:89:ee:49:0c:3f:c5:e4:cb:20:6e:50:d7:43:85:10:2d:49:
         be:ae:d3:65:08:17:63:f4:ca:fe:d7:94:d5:e4:48:c1:bf:7d:
         1b:3c:a8:5c:97:b3:31:59:52:12:5f:3e:b8:09:2e:38:8c:b6:
         cb:b3:ab:00:ed:a9:a5:08:65:27:1d:e8:cd:d0:6a:87:be:9d:
         5e:17:bb:51:be:c1:60:e8:e6:44:6f:db:8a:32:b7:a0:ae:ca:
         5a:80:d9:86:ef:f8:7a:f9:1d:20:1f:72:91:9a:00:25:08:19:
         9b:11:c5:84:0a:d6:45:d8:55:d6:23:b5:a7:b1:af:af:7b:47:
         cf:5d:7b:1c:e4:28:d5:15:3f:44:6d:ae:dc:50:25:48:98:cf:
         12:9a:7e:5e:f7:a9:d3:14:f0:b5:91:79:59:e1:cd:12:c2:ec:
         79:f4:fd:93:b0:f3:42:71:ed:d3:e4:23:0e:b3:d9:78:06:ef:
         86:64:bc:a2:e5:7a:56:91:fd:41:35:fc:9d:19:c3:69:05:b8:
         24:f2:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----