Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File:                     9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier:          XYND+2s8P5Q1IKMQyWcQ6BbqNe47uS6q6aY8zUk/rcc=
Subject key identifier:   52:D4:74:D0:CB:56:07:94:8D:01:59:73:F7:A9:EF:F3:E7:AA:94:B7
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       01962F745CB977538EE1C44A6BB3BC18FD7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number:          1360
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: qOLPty/3+OyC8IPCW+m5Fnn7oghRwWDhVtdfE27grJM=)
                          2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5c:b9:77:53:8e:e1:c4:4a:6b:b3:bc:18:fd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=52d474d0cb5607948d015973f7a9eff3e7aa94b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:d9:69:82:f9:5f:4d:2c:eb:99:ef:b3:6c:
                    90:14:61:65:04:a4:10:18:83:7b:c1:60:db:27:00:
                    5c:7d:3a:ae:c4:0c:7c:ea:d2:3d:84:6a:37:d1:00:
                    b1:79:49:c9:21:59:57:22:45:da:cf:a2:ee:49:ff:
                    b0:35:68:e0:c8:b3:4f:81:db:04:3a:82:b6:d6:4c:
                    64:0d:78:35:4c:36:3f:75:75:6e:74:20:98:4d:16:
                    28:e5:84:60:04:e1:1b:70:a9:0c:d8:11:42:a2:bb:
                    d9:b0:1a:11:1e:68:7a:70:38:9b:74:2f:4f:b0:d4:
                    71:0a:76:22:61:6f:57:26:f4:c0:5f:0e:39:1a:ca:
                    9e:c2:f1:66:c4:c5:03:f8:9e:86:d8:f7:c4:48:61:
                    e9:eb:d1:11:12:b4:76:c0:36:d0:0e:6f:0d:f3:84:
                    34:36:e9:ca:2a:12:72:64:41:2d:07:ed:d0:c5:d1:
                    44:42:c3:8a:25:8c:85:de:64:ec:39:7e:20:ec:4c:
                    a0:6b:55:23:eb:de:6c:43:20:a7:d0:22:de:4b:3c:
                    12:9e:60:ae:50:27:b0:d3:4d:0e:2d:24:80:91:48:
                    e4:68:eb:a0:10:f2:f7:40:5c:00:65:17:34:55:ac:
                    5c:4a:ed:66:5a:b8:74:04:3d:68:c5:dc:6b:d7:d3:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:74:D0:CB:56:07:94:8D:01:59:73:F7:A9:EF:F3:E7:AA:94:B7
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:31:0a:f8:54:47:d9:5a:c2:1d:f8:e2:38:72:a1:7d:fd:42:
         f6:1e:79:e1:c6:47:3d:7c:17:ef:2f:17:cb:1d:cf:03:e9:70:
         d0:7e:54:02:3e:5d:b0:08:cf:24:82:f3:d8:08:66:1d:7c:40:
         d8:8e:77:76:46:ce:0b:5d:1d:3c:54:c0:55:dc:0a:fe:97:7b:
         69:62:f4:b9:a2:ff:97:a7:87:9d:06:54:5b:aa:2b:4f:25:9a:
         af:f9:11:8d:0e:22:70:eb:b1:e1:8d:fb:be:92:a9:ef:a7:f5:
         bc:17:64:5e:8b:b2:c8:b4:4a:70:69:24:f8:1e:86:b1:1e:fc:
         40:11:d8:59:43:4e:74:29:ab:c7:dd:5a:d8:90:2b:ff:3a:83:
         e7:7f:62:c0:5f:82:ef:37:7f:24:21:ff:c5:e3:a1:c8:41:92:
         da:3c:ac:b9:eb:e6:38:42:29:fe:b3:f0:86:37:53:ad:82:47:
         c5:33:61:23:27:1e:9a:30:85:a1:6d:d4:94:b3:9d:99:cb:0c:
         64:ed:5f:d3:af:01:40:7d:3c:5a:69:f3:af:60:cd:55:58:09:
         5e:38:5d:fe:56:87:e6:76:f8:a3:ff:f3:50:d1:a4:cc:c0:a2:
         ca:ad:66:92:07:84:69:52:1a:5c:c1:35:9c:fa:bc:da:1f:b3:
         22:14:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----