Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File:                     96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier:          trr14LJK6G27quwj/1vC6J3wDTd08cYZ61kk6xqPTf4=
Subject key identifier:   99:F9:11:EB:10:89:63:1C:2B:39:AB:75:7B:CC:FA:4F:C5:FE:38:03
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer:       /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial:       01962FAB9C29E6D41B34FCD36C88AA48AA9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number:          024D
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: YImJUqrBtY7z9+YXZBLBhD1HV+jkZXhQ4ckbJXLx3MQ=)
                          2: DqSVFNPqA_J9o0vXdKEoqfgBQv0.roa (hash: ZwggkA5coi0s9FB05nyVzSy5fJIa0mQqtItQ7c3UO84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9c:29:e6:d4:1b:34:fc:d3:6c:88:aa:48:aa:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=99f911eb1089631c2b39ab757bccfa4fc5fe3803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:81:fa:49:17:bf:34:52:8a:60:b8:d1:e4:
                    5c:95:5c:8c:13:b3:e1:d8:93:98:c0:d9:64:ef:2a:
                    76:fb:fe:a0:fd:03:23:a7:63:8c:a4:54:82:cb:a4:
                    4f:37:01:fe:18:e4:d5:c7:9b:34:12:f7:2d:76:88:
                    8d:58:ee:60:51:87:a7:08:eb:a4:9c:65:21:03:df:
                    41:88:25:8c:e3:71:83:b8:82:48:cc:6f:7b:a8:e1:
                    6e:e0:47:3d:c2:4f:48:56:25:d1:ff:f4:dd:e8:18:
                    0c:07:38:84:f0:83:f6:5a:eb:68:66:8f:01:bd:bb:
                    97:f1:79:3e:a8:d4:62:85:8c:ed:50:8f:40:a3:a2:
                    c1:75:43:ee:88:ee:26:1c:77:f4:78:bb:eb:d4:66:
                    40:b0:2d:22:ac:dc:cd:02:eb:21:92:99:84:1e:a7:
                    ea:83:85:7d:18:8d:27:24:64:f0:bf:24:2d:24:35:
                    75:c4:b8:81:14:92:13:66:79:9b:0f:5b:ca:da:e0:
                    11:9c:eb:17:92:cb:99:e8:5d:20:a0:20:83:76:b0:
                    9c:38:03:c7:34:12:0c:e6:6d:de:a5:47:3c:45:05:
                    6f:2d:e0:8f:8c:e6:7f:c5:3f:18:37:78:34:bd:99:
                    44:f2:16:ff:35:77:d8:36:91:60:8e:5f:bd:da:b0:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:11:EB:10:89:63:1C:2B:39:AB:75:7B:CC:FA:4F:C5:FE:38:03
            X509v3 Authority Key Identifier:
                keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a1:59:78:9b:53:1d:74:ef:ee:6b:e6:ad:09:17:f5:a8:05:
         52:fc:35:6b:48:54:35:b4:7b:f7:bd:5b:91:ad:06:c4:3c:b2:
         46:47:86:d9:91:2b:3d:39:02:6f:85:e6:eb:6e:3e:39:bc:f4:
         d2:a9:dc:0f:16:92:15:9f:02:89:f1:f5:98:69:2b:78:f9:31:
         42:a5:3d:a5:6a:0c:d2:f3:08:ca:da:9f:40:0c:67:01:9d:af:
         6c:64:59:6c:f5:8c:b5:49:54:be:da:19:58:eb:ea:09:f4:8e:
         e0:0f:86:e7:88:7b:11:6a:aa:c6:5b:86:07:de:48:ae:41:21:
         0a:cc:a5:d3:2a:e9:68:82:c8:1d:5d:82:e6:8f:e1:3d:ce:13:
         49:fe:60:64:e7:c5:da:da:4a:48:79:19:c7:bc:a9:8c:f7:1d:
         5a:31:cb:4a:8d:51:bb:57:77:49:8c:85:7d:83:a0:8f:bd:62:
         53:db:d7:19:4a:7a:0d:de:75:15:5a:e7:ad:b6:aa:6b:8a:6e:
         95:69:da:4e:5c:dc:34:33:df:2a:54:4b:9f:22:2b:ea:09:53:
         8d:89:bb:3c:55:bf:12:12:c1:92:73:86:37:c8:61:f7:69:97:
         75:54:92:98:3b:91:dc:57:87:ff:0f:f8:87:1f:9a:f0:2c:4b:
         07:4a:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----