Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File:                     V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier:          n3I26iumdMNTkl5kYv0/+xPisqecQmjUwWEplFlYifs=
Subject key identifier:   5D:82:1E:2D:E4:9E:CB:F5:BA:67:3D:96:D5:CB:50:BD:58:D0:6D:DC
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer:       /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial:       01962E2B3C8848F0CC60B81454A4688E3720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number:          0EDD
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: 7+gEnx8C3xwz/WChCqFq4Gxk8t8odAhEVrCpnN2zbLc=)
                          2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3c:88:48:f0:cc:60:b8:14:54:a4:68:8e:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=5d821e2de49ecbf5ba673d96d5cb50bd58d06ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:7e:b6:d4:c0:c4:de:8a:1d:13:36:ae:3d:
                    84:c9:c1:a6:8d:50:04:3f:d9:d4:25:99:86:26:ac:
                    e2:f3:53:93:84:48:b8:18:f7:4b:92:06:6b:6d:80:
                    15:b1:d5:31:ef:75:32:bd:19:32:bd:a6:4d:21:24:
                    34:9c:e2:c0:fd:18:f2:33:b9:0c:5a:11:ca:11:87:
                    43:a3:d7:40:5e:e1:00:b4:ce:bc:c8:84:36:27:05:
                    a9:15:e0:26:44:e5:7c:3c:85:79:3e:b8:5a:54:57:
                    91:b9:ea:a6:cf:40:e1:67:cb:62:4b:74:73:b9:31:
                    ac:37:6a:6c:e4:48:9c:f6:9e:d6:60:ae:e3:ca:00:
                    ea:63:37:03:84:b0:12:39:8d:98:93:c3:09:50:79:
                    64:a1:6b:d9:1b:21:69:cf:6d:91:8f:b1:73:f1:bf:
                    07:94:31:3e:73:44:a9:ba:55:38:be:d7:e1:c4:32:
                    57:34:75:06:30:e2:5a:24:ba:4d:81:98:4d:5a:41:
                    92:bb:e8:4b:0c:b7:c5:fe:c1:e6:22:90:c1:fa:ca:
                    5d:f0:72:05:8e:7b:c7:7d:e8:f5:b5:ed:72:7c:fb:
                    99:38:46:a3:dd:07:39:10:80:cf:ae:19:e5:de:8e:
                    e0:fc:61:9f:a5:f2:69:3d:49:d7:b2:56:ca:fb:ec:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:1E:2D:E4:9E:CB:F5:BA:67:3D:96:D5:CB:50:BD:58:D0:6D:DC
            X509v3 Authority Key Identifier:
                keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:70:74:9a:0b:11:aa:1c:4f:f7:54:13:28:f8:5b:da:fb:5a:
         bc:24:4a:3a:a9:32:65:83:87:d1:a0:03:1a:44:63:ed:2f:03:
         78:9e:48:50:77:bc:e0:ef:9f:59:66:59:21:d3:90:d6:2c:e0:
         cb:31:9e:29:54:f0:7b:e8:07:ea:08:83:24:3d:9e:0b:31:4b:
         07:27:48:ae:63:7e:bb:f1:2d:7a:97:52:ad:5a:c5:6c:3c:10:
         0c:6b:eb:3f:01:bb:32:54:c3:11:0b:3a:32:45:8c:78:17:06:
         60:78:1c:c1:e1:97:79:56:07:4e:ef:ea:c5:40:86:8d:f0:65:
         f3:dc:c1:18:ed:2f:8c:75:9f:43:eb:0a:51:29:98:c5:d3:aa:
         37:af:b6:ed:cc:61:56:fa:5d:03:e1:2f:5d:09:d3:87:93:6e:
         15:04:ef:93:29:3a:50:2b:5f:9b:13:21:f0:e5:98:18:ff:01:
         dc:ed:55:62:a9:cc:57:4c:c8:68:b4:7f:70:16:d5:70:88:b9:
         b1:70:38:54:6c:93:da:a3:04:06:0e:4d:e5:31:17:12:4e:e9:
         23:b3:35:ba:82:99:2d:f7:32:07:7c:4a:1d:83:79:61:12:b8:
         92:ed:d5:a4:85:18:7d:94:b5:33:ab:5d:3c:07:82:95:71:8f:
         a4:6c:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----