Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          mgZtzDTjppu4vqK8PCbE8VRamiz398umdVmwTX+WQWY=
Subject key identifier:   E5:35:63:A2:24:70:DA:28:87:34:E2:6A:5D:02:0D:01:79:DE:47:DF
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       01962E61D52007007405BA288DF8A460BAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          092C
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
                          2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: Td0zyuxsfI+KsJLFk2mO4u8blVeMHKRno4C5cHqD/zk=)
                          3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d5:20:07:00:74:05:ba:28:8d:f8:a4:60:ba:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=e53563a22470da288734e26a5d020d0179de47df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:ff:7f:24:ce:bd:d2:1e:ee:f0:56:6d:e1:
                    dc:12:72:85:b9:5c:f7:b7:33:67:e4:11:77:ef:7a:
                    21:e2:ca:16:9a:70:18:5b:b1:1d:a8:69:0d:5f:9a:
                    6c:4f:4e:b9:ed:4e:b4:1f:9c:96:85:08:e8:bf:bc:
                    b1:6e:ee:60:b3:e1:34:34:cb:f3:56:86:4c:95:08:
                    3c:ea:80:8b:c4:d3:9b:33:59:2a:4c:cd:61:be:85:
                    2a:48:e0:e4:4b:e7:6b:4e:78:94:ba:8f:f7:2d:1b:
                    6a:b2:b9:2c:ce:71:f9:f2:af:78:2c:f4:14:6e:36:
                    74:50:9e:3f:6c:7d:76:59:54:4f:b5:33:c0:7c:45:
                    da:39:0b:49:aa:f0:54:50:4d:5f:24:9b:e3:01:e3:
                    76:ea:18:a1:3d:1d:c3:97:3c:83:d0:94:a1:57:12:
                    4b:7d:ff:9f:df:c2:b6:0e:71:b2:14:e0:a0:ee:1f:
                    7d:33:a2:c9:d9:2e:4d:38:a4:95:f5:a6:82:fd:54:
                    74:bf:8f:f8:ec:a9:70:4f:36:93:88:1a:3c:4d:40:
                    6b:c1:b7:7a:44:05:1d:88:67:59:eb:d8:d2:f7:17:
                    12:a7:9e:79:0e:d8:02:d4:8a:a7:45:55:a2:d9:9d:
                    49:d6:c7:27:df:fc:6e:26:8f:2a:95:b8:e4:ca:4f:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:35:63:A2:24:70:DA:28:87:34:E2:6A:5D:02:0D:01:79:DE:47:DF
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:40:76:de:87:42:f7:72:7a:50:b3:b2:42:89:6c:8d:60:68:
         af:54:1b:b7:17:75:7c:97:0f:5b:51:f9:fc:b0:37:ff:cc:a4:
         69:ec:9d:21:b8:2e:cc:4b:1d:39:bc:d9:d6:dc:fb:20:b5:94:
         84:1f:82:a2:4f:2f:91:c8:31:66:17:0d:8f:d8:c9:e4:91:63:
         0a:04:e2:a4:48:48:0d:93:09:23:9b:b6:32:1c:49:cd:31:a7:
         79:29:0a:74:a0:88:f4:02:2c:26:60:e1:41:af:1c:6e:d1:ff:
         24:c5:2d:42:a5:08:60:aa:78:db:a3:a7:96:d0:c2:5f:ed:5f:
         33:51:83:6a:fd:35:54:ac:19:c8:ca:55:32:39:cc:e0:2a:52:
         6c:fd:78:66:5c:63:c1:04:65:55:22:e0:4e:ab:28:46:3e:f0:
         fb:28:c5:a9:d5:7b:e3:ee:51:93:ba:52:96:6e:79:23:c7:39:
         2e:c6:55:2b:a1:31:af:2f:14:c7:c7:59:fc:67:5c:7a:a7:92:
         75:2a:68:88:aa:6f:79:28:0c:14:e2:24:c5:d9:1a:e6:84:6d:
         0d:d8:7a:97:ad:7b:be:45:8f:7e:55:79:37:01:ff:6f:cc:c2:
         6c:9c:a2:7f:d1:35:47:79:aa:dc:2a:c0:97:63:42:ae:c8:fc:
         d0:63:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----