Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File:                     S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier:          m5Lea5gle74sdzi43MGpv3fPVPvTt4qtSXT8lbNqcMM=
Subject key identifier:   9C:9D:77:C3:B0:74:9F:45:75:EE:08:55:EB:AF:15:1C:66:7D:27:E8
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer:       /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial:       01962FAB49AADC298B2DD55426DD0CDD6025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number:          0C82
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: AGFXaqT3BvJjfsfWKc-WZgyT260.roa (hash: otB7RONJ2iX79r/3n1UHcffodGPsIg2+hKNGewXNd5g=)
                          2: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: YWAi2rkaQAcWMlZ1IZN+20DtQTUor92xW7iG7Cogl2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:aa:dc:29:8b:2d:d5:54:26:dd:0c:dd:60:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=9c9d77c3b0749f4575ee0855ebaf151c667d27e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:e7:92:ad:2f:3a:a4:43:f7:96:c0:fc:32:
                    83:c6:55:87:33:e0:e3:e0:75:78:2e:54:68:3a:f7:
                    7d:7b:8a:e5:19:1b:7b:de:1b:d8:40:87:53:6f:b6:
                    0e:af:5f:34:df:90:d2:90:70:b7:00:04:97:6c:fc:
                    39:ef:b9:36:c9:08:f8:9d:42:6d:b1:26:38:27:2c:
                    03:90:05:09:28:ab:96:b9:6b:87:62:19:dd:04:96:
                    b1:43:22:24:be:4c:5b:ed:11:2b:5f:31:91:43:af:
                    52:eb:43:5f:d1:6d:e2:ee:24:b6:dc:25:4c:0c:f9:
                    5f:bc:2a:9b:9c:7c:48:e6:f6:74:3e:f1:b5:39:7c:
                    32:4b:6f:8e:3b:75:f6:ab:5c:9c:17:f0:43:ea:f6:
                    56:03:9b:be:c1:33:b6:9b:a8:63:58:9c:fd:bb:76:
                    ca:cb:e2:11:f7:2b:84:24:52:56:e7:59:f1:93:1b:
                    09:24:76:21:33:0e:8c:7f:d9:2c:d0:91:7e:8d:c1:
                    2f:fd:d3:06:60:f4:1f:af:7f:85:ed:3a:4e:2f:30:
                    a7:09:1c:a3:d8:8d:aa:6a:03:b5:55:4c:9b:7d:68:
                    d4:cc:0a:d6:c3:45:80:81:5f:c9:50:d2:9d:f0:6c:
                    06:5c:7f:48:d8:13:8e:75:1b:45:8d:a6:f0:14:d3:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9D:77:C3:B0:74:9F:45:75:EE:08:55:EB:AF:15:1C:66:7D:27:E8
            X509v3 Authority Key Identifier:
                keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:35:d9:b1:9c:b5:78:9d:77:26:f9:11:77:75:8d:53:de:
         28:3e:80:f7:2a:95:92:56:ca:7e:75:59:ad:02:46:9c:6f:7d:
         24:21:6a:5f:40:e7:db:76:f5:d0:b0:0a:6b:9e:3c:17:83:83:
         bf:be:be:3f:ed:1f:cb:c9:99:ed:8e:94:79:96:9a:03:d1:40:
         a7:7c:5f:21:3a:4f:8a:6a:89:62:12:58:ce:f5:76:17:74:78:
         9b:5a:04:2f:7a:07:ad:96:55:68:11:16:f1:0f:b5:1a:54:27:
         c1:ed:72:6e:ed:3b:ba:f9:9a:9b:d0:9f:f0:ee:03:92:56:24:
         ac:f5:7c:ed:20:04:fb:e8:ca:bb:ee:1b:27:ba:a0:62:08:57:
         68:8e:39:e4:b9:4f:1a:b7:80:43:62:4a:06:d7:89:d6:86:a1:
         a9:83:7f:8c:9c:70:37:17:ab:4e:05:fb:60:cc:03:df:d4:6c:
         19:b0:fa:e0:a9:2f:84:46:55:cc:2a:4f:66:c4:d6:13:17:3e:
         34:66:d2:11:cb:ed:c3:b9:69:d0:88:48:43:0e:3a:10:aa:07:
         d5:e5:ba:c8:fa:bc:24:af:51:a7:ec:16:c2:1e:83:e4:cc:02:
         30:f1:f4:2f:85:27:f8:c0:a9:23:5e:1d:5a:df:d7:97:62:a3:
         27:5d:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----