Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File:                     m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier:          hFGNnejmBtJejAo4p3dxJb7VtULVw7sJiLozsjdVQ1c=
Subject key identifier:   9A:9E:40:A2:88:5A:F3:97:CA:E8:A6:5C:1C:F0:A4:86:20:49:3B:B1
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer:       /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial:       01962F749342FB24A6F2E557343B442A80EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number:          1081
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
                          2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: wwGHlT2dvXSUjnefKqf9UheCXj2SPAARgeo8p3vMThI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:93:42:fb:24:a6:f2:e5:57:34:3b:44:2a:80:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=9a9e40a2885af397cae8a65c1cf0a48620493bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:9c:d3:47:7a:16:2b:27:5f:06:d1:86:1f:
                    1a:36:90:34:6a:a5:ec:69:83:93:7f:59:2c:79:ee:
                    36:70:30:66:e7:e8:1c:01:09:68:b4:2a:f2:1a:83:
                    ca:5e:73:42:97:45:23:d3:05:71:cc:54:9f:d6:d9:
                    d1:f9:fb:e3:b6:84:2c:92:31:d8:1c:49:39:f4:c0:
                    ce:a1:43:cb:0a:f4:d7:6f:a2:ed:50:ed:f6:39:4f:
                    6a:cd:97:bd:e8:db:c3:11:3c:09:09:b9:9a:7a:a4:
                    1b:37:59:a3:51:8f:97:70:d4:6d:d1:73:e5:77:c7:
                    8f:c2:a7:03:3a:8b:68:5b:72:21:f2:8f:de:0a:90:
                    f1:00:2c:dc:9c:b1:1a:5a:43:ff:b2:f0:ba:32:ae:
                    36:3f:4e:dd:08:a6:b8:aa:83:0f:21:71:c9:88:4a:
                    d3:8c:e9:c1:5f:dd:96:e7:74:67:03:43:74:3e:bc:
                    ac:5a:5e:37:1e:69:ea:9e:28:12:7e:dc:4d:10:fa:
                    96:1d:32:b8:01:16:06:02:36:70:7f:64:84:e7:c9:
                    4d:9f:df:fa:06:bf:00:fc:76:eb:ee:ff:d0:90:33:
                    5c:ff:6c:8a:e4:b3:64:f7:fa:75:f9:87:b8:dd:55:
                    de:4d:1f:38:77:25:4a:cb:aa:58:22:28:f4:95:b9:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9E:40:A2:88:5A:F3:97:CA:E8:A6:5C:1C:F0:A4:86:20:49:3B:B1
            X509v3 Authority Key Identifier:
                keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:be:c9:54:d2:8d:71:20:36:10:27:dd:8c:35:c1:26:03:2a:
         59:5a:d6:2d:f1:4e:49:12:d2:3b:b3:bb:67:95:1d:91:41:d7:
         bf:dd:0e:74:2a:59:00:65:46:c0:aa:12:47:4a:e3:55:09:3b:
         82:79:a3:bb:ea:9a:30:83:68:37:ac:fb:07:c9:e4:a2:64:7e:
         39:15:f5:4c:39:2b:12:aa:69:f4:68:43:69:fe:a5:bd:0d:57:
         95:1a:9a:46:54:8d:e2:c5:90:ef:77:07:95:cd:b9:6c:11:41:
         24:b0:07:07:c4:02:d5:46:fb:ec:9d:13:89:f4:33:17:0c:8c:
         27:61:19:c7:88:9c:fd:d4:78:39:38:f2:10:ea:ca:de:fa:cb:
         6c:a2:8e:a4:b4:80:89:49:5b:0b:05:6e:0a:e2:54:76:a1:c5:
         70:a6:15:05:3c:d6:d9:7f:0d:ed:d0:cb:fa:7a:03:ba:8e:ff:
         bc:2b:92:66:8d:d6:96:0d:28:21:8e:f5:9d:bc:0a:af:51:4a:
         c8:0f:44:ff:73:86:4d:1e:15:e6:58:f6:eb:7a:a4:bd:a6:a5:
         36:4e:87:0d:34:c4:a6:b7:a2:1c:47:1d:4a:ed:6f:16:8f:e7:
         f9:75:cd:7c:1f:3c:61:08:cd:d4:52:45:76:44:ca:26:86:85:
         b6:f2:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----