Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File:                     mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier:          ojqk1KP7GQcwwnZyNl2cjvKM4kNr+zVxQ0cD2qxqnBk=
Subject key identifier:   C2:75:1F:E3:63:EA:FE:25:98:7E:B0:CD:1D:14:09:88:60:62:73:13
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer:       /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial:       01962F74E738E102AFDFB86A4F22C34E73AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
                          2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: WhwPRVLfpJbnHD6L/szmrwa8igYExBIX3obFk3edHD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e7:38:e1:02:af:df:b8:6a:4f:22:c3:4e:73:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=c2751fe363eafe25987eb0cd1d14098860627313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:ac:01:0e:07:18:ef:8e:9d:1b:b2:cb:16:
                    67:47:cb:5f:46:ac:c7:73:c7:f8:02:61:57:db:a6:
                    a8:79:e1:63:ba:bc:3a:99:26:3a:23:87:2e:9a:f4:
                    7e:ac:04:91:1d:29:5c:48:11:3d:e2:46:a9:5f:d4:
                    07:64:f8:ab:d3:9c:be:e6:ff:75:c9:f7:d8:b5:fb:
                    64:85:b9:18:a8:43:3e:55:d1:2b:e5:45:24:4d:aa:
                    57:a9:36:83:6c:d4:f8:30:b9:2b:6e:27:bd:5a:c8:
                    d6:2c:a4:19:b9:56:10:59:24:0f:b3:c5:70:d8:a6:
                    49:58:5d:e5:c7:a4:a6:d6:34:d1:5e:04:e9:1a:40:
                    25:0a:83:33:7a:3e:e3:f5:88:58:5c:ba:f4:a5:c8:
                    4c:0b:d6:51:2a:ed:82:be:99:32:dc:cc:cf:72:20:
                    83:60:71:c0:67:db:d4:31:20:5a:56:63:6f:4e:97:
                    24:10:cb:f4:e8:53:d1:e5:69:8a:a2:61:ca:bb:76:
                    b1:87:8f:ba:74:20:c2:3f:6a:b2:46:db:53:e5:41:
                    3e:c2:15:61:4b:00:01:8e:55:33:c1:e6:ee:f7:49:
                    27:7b:f0:b9:c1:7b:79:1d:d8:a4:3b:17:98:03:c2:
                    29:49:94:ed:36:53:94:b2:e6:93:4c:5e:db:da:01:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:75:1F:E3:63:EA:FE:25:98:7E:B0:CD:1D:14:09:88:60:62:73:13
            X509v3 Authority Key Identifier:
                keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:0f:30:a5:9a:20:52:3b:0b:93:a8:20:27:ab:93:e9:49:
         f5:25:20:db:56:c3:46:41:53:51:e5:e0:aa:d6:6c:9b:cf:38:
         5b:16:40:82:57:fe:8d:fa:ae:a3:b5:ba:ea:85:00:84:72:71:
         89:d0:1f:9e:76:c0:7c:a6:ea:36:04:eb:76:75:e3:41:93:48:
         94:c5:00:56:5d:75:67:94:2e:f6:de:88:ec:a3:dc:22:9a:90:
         58:46:b5:1e:94:35:6f:a5:b7:6c:ec:7b:e7:89:a9:e0:6f:c9:
         1b:6e:1f:e9:a8:36:e2:40:4a:5c:6a:7d:ab:c6:bf:78:b5:fd:
         70:e4:50:60:e5:f6:31:76:5c:5b:53:ed:7a:1f:71:d7:8d:b0:
         bd:c1:be:26:39:8b:17:ca:e9:3b:e8:22:bf:c7:b3:24:57:2d:
         6b:39:2a:bb:8d:90:0c:bc:07:46:74:61:0e:3e:17:15:05:0f:
         ff:fe:3c:77:0d:70:23:aa:3c:b4:c3:8e:6f:58:4d:d7:a1:57:
         54:60:e8:ba:7a:74:04:be:3e:0e:be:52:5c:23:71:6e:ec:d9:
         5b:ae:50:08:33:6f:be:36:44:3b:f5:94:db:86:95:ce:98:2e:
         89:4c:ad:d7:be:69:db:f0:72:a0:2b:8e:cf:a5:f7:57:be:39:
         68:be:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----