Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          HLRxk6U7fJKg5697a1YJ1/CYb6ZzhglaRp/0EnzQD0c=
Subject key identifier:   E9:E9:F0:20:4D:32:3C:83:82:8B:D0:78:E9:5D:A6:DE:17:5C:AA:D9
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       01962ECF7236374AB0AAE32427D05EE02E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          1100
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
                          2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
                          3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
                          4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: JCh3xq5jgXeGgkHbTGVG39Vv7WKwBAurjSB9UFXkBNg=)
                          5: qD6fI4alTG9ugXyMXRWWgJQzBs8.roa (hash: c9Mt3ffCyuUeM6KsYFDSRY2Fev1A0MkGSCIdLfu/44w=)
                          6: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
                          7: xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa (hash: ntcfKusbnH6G9LFWYHB/n9gMG8BQt0xnq4XPHB5frGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:36:37:4a:b0:aa:e3:24:27:d0:5e:e0:2e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=e9e9f0204d323c83828bd078e95da6de175caad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:89:80:93:d4:2e:de:c1:da:cf:00:fc:68:
                    e5:29:bd:97:35:ce:fc:ae:10:d9:14:56:d2:6f:01:
                    fe:d1:72:4a:f7:98:de:c5:89:d9:1f:72:f8:8b:3d:
                    75:81:d2:93:df:3d:e7:fb:ee:3d:9e:74:18:d1:49:
                    eb:f6:f1:97:30:3b:cb:00:47:1a:28:72:6c:bd:61:
                    b7:99:18:cc:b7:91:de:05:29:64:4b:2b:67:a2:54:
                    99:ad:c3:d2:63:50:aa:bb:47:de:bf:98:49:96:cd:
                    c8:8c:13:4e:15:48:54:d6:f9:e8:ac:66:66:cb:59:
                    dd:a8:ca:46:dc:d9:0d:3c:fe:cd:81:4c:05:e0:4e:
                    a2:b3:10:6b:dc:34:61:70:a4:01:8d:94:74:1a:c7:
                    fe:c5:19:48:e5:a6:d8:93:cf:2a:86:71:19:8a:82:
                    46:a7:bc:4f:96:62:0c:26:96:d4:39:e2:39:ad:2e:
                    35:56:d2:d0:af:7b:b7:aa:50:85:9a:72:90:c2:51:
                    24:35:ef:69:ca:db:1b:eb:73:38:6f:2b:0b:ec:94:
                    8b:65:37:2a:cc:d7:03:7f:48:5e:e2:06:74:d0:34:
                    43:a0:97:20:3e:53:ae:be:40:e0:ae:a7:a0:08:9d:
                    91:cb:dd:e1:9b:c8:60:7d:1b:ea:11:31:9e:f2:a4:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:F0:20:4D:32:3C:83:82:8B:D0:78:E9:5D:A6:DE:17:5C:AA:D9
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:24:03:fa:e3:be:bc:a7:21:e2:56:74:bd:46:63:94:08:
         b7:d2:68:47:54:68:aa:11:98:f0:67:a8:f9:67:1a:25:76:c1:
         a2:28:7d:c3:3e:ce:30:1e:33:52:13:33:5f:c3:c4:6f:27:86:
         37:e2:e5:d3:bf:bf:ee:cb:d2:fe:b5:0c:12:c3:36:0d:47:ec:
         81:14:ec:8f:c0:97:eb:a3:0c:f4:4b:7d:30:c0:b7:bc:84:a5:
         c9:b9:9c:bf:ff:bb:bd:8f:de:64:60:e6:84:15:3a:5e:6d:f2:
         10:a9:6e:3f:b5:63:3b:cb:0a:68:fc:fb:6c:e1:94:32:d6:ea:
         64:10:13:24:2f:aa:a5:85:99:db:f0:e0:69:32:2a:f4:83:1d:
         eb:9b:e9:19:a0:72:fe:09:b0:d6:b1:cd:e6:66:92:a5:84:8f:
         0b:82:bb:55:32:ed:cd:b7:74:b5:6d:a5:a2:01:ac:d2:57:41:
         b1:7e:87:82:79:73:1c:5d:f7:5c:da:bd:c3:58:9d:83:bf:38:
         cd:34:c6:07:4c:3e:d4:17:15:89:c3:60:5c:3e:3d:38:7c:ef:
         4b:c6:8e:df:1e:79:d9:5d:33:0c:3f:2e:9c:10:af:6c:27:62:
         2a:be:dc:a9:fb:be:53:17:10:d9:0a:b4:c6:9d:8d:57:7c:11:
         2c:71:6f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----