Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File:                     1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier:          bURtfrUAaMt16IPGdTPEzc+GcaZ4ZvKNUHuIDwyH/rg=
Subject key identifier:   24:9E:6C:9F:EF:27:87:B8:92:74:6C:46:33:4F:29:9D:EA:4F:27:D1
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer:       /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial:       01962F3D92E44CBF8E013A1B0133F1B2D7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number:          0E3A
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: 5aYMtViSZOwmaXmsY78iidmq7OPm7OCkIfbQjj5R/pQ=)
                          2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
                          3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:e4:4c:bf:8e:01:3a:1b:01:33:f1:b2:d7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=249e6c9fef2787b892746c46334f299dea4f27d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:de:38:28:fe:b8:fe:ab:60:cc:49:63:cf:
                    d1:5d:ba:16:20:62:4a:40:8a:5b:02:0c:92:0f:9c:
                    66:4b:f6:fc:c0:53:c3:d3:f0:8b:e5:51:4a:1c:9f:
                    59:73:4e:0e:22:56:07:74:8a:5b:75:36:68:d7:e4:
                    de:c9:e8:d4:74:ff:64:42:f4:4b:e2:69:0e:f5:ed:
                    95:77:45:1d:4a:9a:2a:04:ce:43:1e:51:4a:74:56:
                    ae:9a:5c:86:2e:ff:c6:ba:08:97:ad:07:0d:ac:20:
                    4d:51:58:1a:bb:8f:70:3a:61:5f:84:86:0c:de:e0:
                    9f:74:99:ad:dd:00:f0:a6:be:9e:e7:15:4d:36:b7:
                    37:9d:53:17:7a:60:c4:ad:ca:99:9e:91:05:cd:f3:
                    ad:8f:7c:8a:f9:b5:26:f6:34:66:4e:00:d7:2a:8c:
                    27:fc:31:49:7e:ae:2d:c4:81:ab:87:f2:f3:54:5c:
                    5a:bb:1f:03:7f:86:97:46:07:c0:cd:f9:89:d4:27:
                    55:22:a3:d6:31:eb:03:19:a6:94:40:e0:e9:14:66:
                    bf:bb:2a:2b:ca:d3:4f:34:d8:ae:bb:80:7b:0c:84:
                    76:90:7c:eb:42:43:c6:fc:88:90:f8:15:ce:8a:d4:
                    ec:1f:4d:5b:22:14:80:af:c7:0c:b3:4e:05:14:9c:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9E:6C:9F:EF:27:87:B8:92:74:6C:46:33:4F:29:9D:EA:4F:27:D1
            X509v3 Authority Key Identifier:
                keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:a7:fc:4d:a0:66:70:1d:b8:0d:17:86:8a:8a:fc:37:48:
         17:67:b1:fe:53:ab:4f:30:2e:08:8b:eb:c7:14:93:78:16:b0:
         f6:0d:e2:34:d9:ac:d0:4a:db:6d:0a:04:10:14:20:a6:65:65:
         78:bc:df:6e:4b:70:62:62:16:4c:a9:23:2f:10:8e:b0:27:21:
         27:86:7d:ba:21:28:76:55:a8:de:40:8b:76:4e:c7:15:2e:88:
         71:dd:93:26:16:67:b1:50:a4:ff:34:2e:1c:c9:8d:84:d9:88:
         dd:e3:6a:74:34:a8:d4:54:1c:c2:d9:05:36:ce:cb:6a:f9:6b:
         2f:e7:6b:36:2b:ee:10:e3:89:5a:35:cb:c6:70:f9:5b:b1:e4:
         4f:4a:a0:1c:b0:47:23:fa:e4:b0:9b:13:bc:b8:34:18:c6:b7:
         06:7d:28:1e:ea:be:46:cf:82:f3:f9:0d:3f:04:fd:2f:29:08:
         ec:6e:c0:9c:c9:ad:ea:41:8f:c9:8e:5c:b5:84:71:b5:89:de:
         8a:33:bf:a0:a2:0e:ab:47:1e:38:67:66:79:d7:ee:01:c7:dc:
         a8:50:b8:a1:88:02:bf:4d:e8:be:7a:6d:db:b9:f6:9f:6a:25:
         53:24:d3:b5:6b:e4:34:ed:6f:c0:61:63:3a:ea:c0:14:10:ca:
         61:72:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----