Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File:                     mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier:          TPVWXHzKSZC4h1xD5+DNVfcvgzpxXFSdntSjur2fouI=
Subject key identifier:   99:FB:1D:3A:18:5C:AC:B5:D9:F7:1A:43:5F:36:53:0F:10:74:A9:A7
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer:       /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial:       01962F070563E154812C1A247671B86EDF93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=)
                          2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: zP823kXXGT1eOYjrYirPcTGcJ8q8Zb7Thlle/MZjdKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:63:e1:54:81:2c:1a:24:76:71:b8:6e:df:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=99fb1d3a185cacb5d9f71a435f36530f1074a9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:0b:cd:26:41:38:ab:b9:0e:7e:d1:73:db:
                    aa:8e:c7:59:9f:50:4b:b2:d1:5e:8d:93:4a:df:b1:
                    a5:33:4d:d4:fd:e8:4a:29:59:d9:3e:cd:e7:64:a3:
                    0e:93:e9:da:95:98:81:ba:af:5f:ce:f5:5f:51:6d:
                    18:b2:99:fe:08:f0:c2:eb:bf:82:50:cc:a5:e9:fe:
                    b6:48:2b:77:48:83:48:05:5c:50:35:3c:7e:88:bf:
                    49:ea:07:5a:c2:6d:c7:2a:88:2c:90:9c:e2:64:82:
                    a2:47:ad:e6:42:6b:db:43:00:ce:bf:23:5a:76:58:
                    16:cd:40:7b:91:4d:58:9d:65:b3:c2:86:7a:2b:a2:
                    15:71:ab:ba:66:b8:8b:3f:f7:a7:e4:88:99:b6:0b:
                    e4:bc:f9:44:d5:0b:f0:44:7e:3e:e8:75:2a:d2:38:
                    ad:6f:b0:ba:1d:a4:18:a6:9f:a9:7d:60:f7:db:85:
                    66:d7:04:48:f2:e6:93:c9:c3:12:05:53:76:91:8f:
                    8b:cd:29:c2:93:08:59:90:61:a8:42:06:80:74:c4:
                    0b:ae:72:3b:f2:b9:9e:a1:61:5b:44:cf:28:1c:35:
                    fd:b1:b7:22:d8:62:bf:88:63:db:e1:9f:f2:04:15:
                    01:43:da:d9:ae:49:cc:80:ae:b7:31:f4:cd:28:94:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:1D:3A:18:5C:AC:B5:D9:F7:1A:43:5F:36:53:0F:10:74:A9:A7
            X509v3 Authority Key Identifier:
                keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:df:6b:84:62:2c:2e:17:fe:22:99:2f:11:2d:66:11:d3:
         c9:de:46:81:cb:9f:c3:16:f4:7d:b4:3b:a7:e0:29:92:89:c2:
         76:b1:b8:29:ef:78:b6:0a:8b:a8:30:10:f3:c1:6c:e3:58:4c:
         c5:29:25:fb:ff:6a:f9:58:64:a8:5e:fb:23:fb:05:7d:d5:00:
         27:17:52:be:34:aa:c5:bd:cc:ab:6f:6f:52:57:d9:8b:70:ed:
         77:c2:ec:7f:b9:4b:1a:cf:3c:81:92:71:d0:63:dc:aa:06:a3:
         bb:6b:1e:58:74:dc:38:8a:dd:86:da:68:0a:b6:27:95:36:cd:
         fc:9a:28:28:31:8a:20:f3:d4:d7:cf:1c:78:20:a3:75:0b:a2:
         df:a3:ff:01:17:b0:b6:aa:eb:c2:7b:02:c2:8d:6b:d3:73:fa:
         fc:4c:a3:b7:0a:e8:7d:e6:c3:b6:71:ce:0d:6c:a5:d5:fd:5d:
         80:b7:12:aa:0f:55:e3:74:2d:d3:91:66:e4:32:e3:ec:14:df:
         74:3e:63:db:17:b3:29:42:dc:88:65:34:a3:67:b5:80:75:d8:
         ad:16:b5:a3:5a:51:64:48:40:6a:7f:03:7b:98:00:cf:c8:12:
         6b:3e:3f:42:35:8e:7e:08:2f:d7:e9:31:70:32:6e:3a:21:60:
         f9:44:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----