Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File:                     lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier:          4WgsFeHJB2+OZHZlcZ1/dKkXliE/1Zdror6kyZ2i3mI=
Subject key identifier:   C8:C8:F8:16:D7:34:13:09:1E:13:1A:D1:A2:B2:21:03:31:A7:8F:61
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer:       /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial:       01962DF434D6BD913C018FC575F159113208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number:          096B
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: Uy80E6r5ez6q5eQ763J0JgivBDuvfT+8uE+zUbzLnTk=)
                          2: r2nr9uHWjEIdTibij9wAoHFt-FM.roa (hash: 9uPtC9m4AAQGXek/5tdGjDekJKVu5XPicOZ4ymE6WZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:34:d6:bd:91:3c:01:8f:c5:75:f1:59:11:32:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=c8c8f816d73413091e131ad1a2b2210331a78f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:3c:40:91:59:41:c9:bc:7b:d2:e3:cf:c2:
                    dc:10:c6:ef:12:41:77:21:22:2d:de:37:27:34:5b:
                    2d:05:72:f1:2d:72:64:5d:c4:42:48:03:f5:a3:98:
                    a8:3f:d5:cc:9e:14:a5:13:01:de:5b:f7:03:27:4b:
                    0b:53:70:b9:f0:ce:bf:cf:84:08:d0:9a:8b:57:09:
                    7a:25:da:1f:07:44:4a:ac:39:94:bf:c7:6e:70:63:
                    41:05:71:cc:dd:82:52:ee:f5:ad:e2:e2:05:31:91:
                    17:a0:f3:77:ac:7e:04:f8:fe:39:68:10:c6:30:6b:
                    3b:56:f2:c5:77:61:f6:ec:9e:ac:a9:60:ad:5c:6e:
                    0b:f5:a1:0b:e2:15:af:78:66:3b:c8:01:e9:36:ff:
                    5d:38:d3:ef:0a:75:73:1e:f1:4a:a9:8a:48:b5:10:
                    a4:29:be:68:19:ac:93:df:17:bb:45:58:27:11:fd:
                    d6:25:fb:69:af:d2:ca:ce:13:2e:6c:c7:dd:67:7b:
                    3d:ca:df:fe:b2:25:80:bc:dc:f1:80:31:90:b3:87:
                    c6:3a:7b:55:c5:7b:e8:a1:18:85:8c:20:da:81:15:
                    84:25:1e:e4:6c:ee:86:3b:6e:46:65:41:75:c4:f6:
                    31:d9:c9:80:f5:15:1c:ba:f6:97:40:91:bd:a2:60:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:F8:16:D7:34:13:09:1E:13:1A:D1:A2:B2:21:03:31:A7:8F:61
            X509v3 Authority Key Identifier:
                keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:db:5d:31:7a:27:f8:34:2e:dc:24:ce:00:6b:ea:8d:52:c9:
         39:45:8f:f7:d5:38:59:e5:f8:3f:78:2c:93:2d:7c:ef:e0:d9:
         fa:44:a6:1c:e5:66:f8:f1:9d:1c:83:5d:13:8e:5a:e9:28:a9:
         13:10:49:25:ae:ed:62:dc:f3:74:3f:4a:6d:d2:a6:fd:04:81:
         40:8a:21:4a:a5:ff:91:6e:38:3a:17:0f:c6:02:98:09:7e:10:
         e1:5c:0e:bf:ec:11:10:ae:3a:b2:6e:b3:6e:aa:77:26:18:ca:
         01:6e:a8:5d:b4:eb:a4:0f:4c:6a:c2:fc:cc:cb:db:e0:6c:b6:
         20:1e:da:2b:c2:33:18:61:dc:b2:87:00:10:5d:ac:80:a5:6e:
         fc:4b:ad:77:fd:3b:15:11:43:9f:87:1d:d7:57:18:29:10:fa:
         0d:cd:7d:2a:ae:61:6d:66:03:f8:55:c3:64:33:58:91:ca:53:
         5d:4e:31:75:fa:08:b0:84:ec:a7:00:3c:94:f4:e9:44:b6:ea:
         19:15:61:3c:15:26:e4:30:4f:15:6a:e4:22:f3:61:4c:59:3f:
         a4:f9:53:96:ae:02:49:5d:af:ee:19:32:04:02:9b:d6:a0:27:
         25:2c:21:db:b9:a0:b5:e2:b5:38:b0:a7:b7:fe:d9:cb:8d:f1:
         d7:12:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----