Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File:                     lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier:          +KMCdTysIWp/8HEUi1TWsRCMNcuMGswaJZKxBa7wn7w=
Subject key identifier:   73:B9:CB:98:55:1D:5E:51:18:11:BF:9E:6F:5E:8F:A0:F8:44:65:2C
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer:       /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial:       01962E2B44D76178C3770E8082B2393E1D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number:          018A
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
                          2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
                          3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: I2yGU61XUhHM3EeN37rAS6hNCZ9+6GTw4xauSRobITQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:44:d7:61:78:c3:77:0e:80:82:b2:39:3e:1d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=73b9cb98551d5e511811bf9e6f5e8fa0f844652c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:fc:5c:bd:ea:20:4b:27:51:53:c8:59:0c:
                    16:a6:9f:a5:da:6a:df:63:70:71:00:a2:6e:d5:ca:
                    52:ec:25:20:92:8c:4d:ea:c7:5d:39:51:75:af:45:
                    5c:08:d1:90:14:67:c1:41:1e:0c:31:54:11:bc:ff:
                    8e:68:c3:09:9c:50:83:cb:54:f9:ca:6c:8b:da:20:
                    41:1e:72:87:7e:19:84:52:48:57:9c:5d:c4:73:1f:
                    d4:d2:b3:8a:c0:23:27:3f:e0:b5:ad:59:f2:b5:55:
                    a8:4e:45:c2:33:36:12:e3:9b:64:c5:76:da:05:27:
                    cd:5a:f0:60:5a:1c:46:ea:3d:5c:af:50:1b:c8:c9:
                    0e:bf:1a:00:84:4d:06:33:0a:82:d6:3d:11:68:88:
                    da:1a:b6:97:34:9e:36:87:11:db:48:da:96:eb:06:
                    aa:ce:58:5e:40:46:89:0f:d0:a4:5c:48:db:5d:27:
                    15:62:c1:4c:17:e2:5c:38:ef:ce:53:e8:c2:ef:c4:
                    7a:b0:9e:12:44:0b:9b:27:98:12:e6:76:d0:76:a6:
                    24:4b:64:93:7b:d4:80:69:2a:1a:2f:fc:90:dd:2c:
                    86:fc:b2:83:fe:14:40:b8:95:72:1c:7a:46:1e:68:
                    c4:6f:d2:e8:72:80:4b:c9:cd:c0:ed:2f:d6:3d:dd:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B9:CB:98:55:1D:5E:51:18:11:BF:9E:6F:5E:8F:A0:F8:44:65:2C
            X509v3 Authority Key Identifier:
                keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:18:3c:18:9d:18:9c:be:08:3c:d3:45:67:87:10:7c:dd:
         0f:ea:73:f3:c5:8a:5e:7c:d6:b9:e4:14:a4:1e:aa:47:9c:64:
         6d:30:b2:99:9b:d7:03:4e:fb:31:79:43:20:47:97:b8:2a:23:
         ed:4b:22:9e:dd:32:a1:55:a1:8c:46:c0:c2:90:b0:42:ff:4f:
         60:8e:50:92:23:38:71:3f:ef:47:c0:28:83:cf:ac:05:28:b2:
         8c:e8:ed:51:de:e1:35:3e:53:c4:ca:3c:89:b1:f5:a8:32:09:
         98:f8:89:74:f2:4c:80:ad:f4:17:7a:a5:e9:5e:37:16:4c:f4:
         bc:7d:11:4c:7b:00:4e:af:5c:a8:52:00:73:c1:d6:2e:15:23:
         a8:ef:1b:03:18:78:4a:62:2f:ba:ce:a0:54:cc:ca:89:53:52:
         dc:89:ff:15:cd:c8:20:b0:86:e2:4b:73:9f:bf:28:b9:9a:5f:
         32:ba:74:ce:30:ec:32:b8:54:31:67:0c:52:b7:39:6b:a2:f6:
         6c:38:8d:d5:8e:1b:52:69:42:4d:71:ad:70:fd:2d:cd:f2:1e:
         e0:f2:5f:a1:6a:ab:bd:e8:11:14:91:a0:b7:c7:08:f2:a1:ce:
         35:3b:37:77:ae:f9:e0:f1:05:59:6d:9e:5a:b5:39:be:a3:b0:
         30:99:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----