Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          /xCf5enD9M0YEOTYWZQztXS8dINebuRiWj/oY/rbfcY=
Subject key identifier:   9A:A3:7F:A6:6B:D4:A7:49:1F:5F:6A:FF:E0:69:0D:B0:E9:AE:B6:FE
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       01962E997DC859ADC27C74597B84012ADE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: cSpH2/0af83aQUr2bZBL+TY8+/Jrt2nifacBRSAM0fM=)
                          2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7d:c8:59:ad:c2:7c:74:59:7b:84:01:2a:de:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=9aa37fa66bd4a7491f5f6affe0690db0e9aeb6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:ee:4a:26:bf:8d:b5:00:67:82:ae:e0:0d:
                    b4:25:43:d5:71:7d:49:4d:d8:72:ec:bd:03:5a:05:
                    ff:c4:5a:4a:e3:35:46:45:11:e8:a7:c8:d6:86:ea:
                    ec:0a:50:b7:c5:67:cb:3e:14:24:28:e4:11:62:cb:
                    81:00:80:b9:f8:c4:91:b0:7a:9d:72:19:4a:e0:8f:
                    3d:b7:dc:75:03:f4:72:fe:78:2b:03:86:9c:df:bc:
                    71:ec:60:b4:5f:21:03:3c:d6:3a:f4:e5:af:13:8f:
                    47:b8:4a:2f:c0:67:ed:e9:f8:62:c9:b1:3a:b8:04:
                    9c:7a:8e:8c:2f:de:16:7a:92:27:5b:05:1b:2a:31:
                    d4:56:00:ae:21:78:6f:14:12:a5:a0:a4:42:b5:88:
                    d5:09:6c:aa:93:99:7e:e1:7b:89:3e:a8:60:9d:76:
                    3b:5d:62:bc:93:16:eb:61:f5:d6:8f:ed:59:68:35:
                    3c:30:95:dd:a3:06:d3:f9:30:b6:cf:26:57:ce:2b:
                    22:49:ec:22:13:b8:6d:15:3b:e0:50:c5:46:fc:26:
                    fe:55:97:b0:ef:14:d5:04:67:64:82:ce:4a:f3:16:
                    6d:87:da:b8:20:d9:0e:cf:96:3e:66:43:c1:c9:c7:
                    2e:21:c3:2c:4c:30:c4:6e:1f:87:2f:fa:7f:90:4f:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A3:7F:A6:6B:D4:A7:49:1F:5F:6A:FF:E0:69:0D:B0:E9:AE:B6:FE
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:fe:c9:97:94:65:9f:fd:cf:4e:11:5c:a9:d9:ea:74:17:
         c4:12:88:92:0e:ac:fc:2a:fe:58:32:aa:2a:30:73:70:29:ef:
         c2:cc:fd:86:46:a2:b2:2b:12:ca:e1:0c:82:80:75:e2:98:c4:
         1a:fd:5e:08:96:85:36:17:94:ec:a5:79:81:1f:d4:c7:19:ab:
         1f:1f:b4:73:9b:0b:a0:f6:db:f9:d3:55:d0:0e:be:9d:b9:77:
         3f:cd:f6:1d:68:9d:18:69:4d:0d:ce:a5:59:c3:96:1b:fe:b6:
         2b:24:7e:cc:89:d3:73:0e:e2:03:29:da:c5:4c:61:8b:e3:37:
         a0:68:3c:ef:0c:bb:58:50:49:22:57:a8:fe:59:a4:36:ed:02:
         f5:b0:be:7b:da:2f:c8:50:2d:e2:6c:ad:b1:c1:e5:9b:ab:dd:
         10:39:a6:9a:27:49:0a:5e:dc:f5:24:a8:87:34:9b:37:dd:4d:
         c0:0e:27:d5:b8:05:9c:45:88:76:d0:87:c4:9d:01:59:45:e8:
         87:4a:21:7b:99:1f:ac:78:9e:be:27:3e:d2:06:d0:fd:88:d1:
         77:f1:94:e9:23:cd:6e:ed:96:eb:e2:fd:eb:67:46:aa:cf:3d:
         1c:99:d9:49:0d:4d:73:6e:06:fc:2a:f3:b3:62:95:67:c0:ab:
         69:b4:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----