Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File:                     lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier:          A0VkNWnGTyKhoA6N46XcnnKdSqyIepjKvGJuSfbsnyk=
Subject key identifier:   B9:2C:E0:A4:60:E8:C3:0B:00:BA:D3:7F:DF:C5:AC:11:A7:39:32:1F
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer:       /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial:       01962E9882C84D89D1A45C5913EAE87C34D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number:          0619
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
                          2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: gEcdtHnhvnQiYdRmmtLZBZS+kknsLASzc4qqbqjKF74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:c8:4d:89:d1:a4:5c:59:13:ea:e8:7c:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=b92ce0a460e8c30b00bad37fdfc5ac11a739321f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:7d:d0:34:2d:f5:38:ad:d7:24:8e:03:ec:
                    98:cd:84:b4:a0:51:a3:15:63:96:56:61:df:1e:38:
                    9e:2d:54:f2:df:a1:c9:9d:66:70:3e:58:0a:b6:31:
                    73:af:93:60:f6:65:c9:40:4e:2f:d9:dd:84:58:58:
                    5b:b4:90:28:69:27:0d:e4:b9:30:a5:ff:5e:aa:3e:
                    47:55:45:65:c1:d6:3a:70:3d:d5:b9:ab:a9:a2:c0:
                    22:f4:0f:3f:ca:4e:cb:01:bf:7d:4e:2e:d5:3d:31:
                    a3:96:87:18:a2:96:7b:7a:b1:04:26:8f:db:8e:20:
                    d8:a9:75:cb:0c:34:88:65:6d:6a:4a:ca:a1:ad:e7:
                    2a:63:5f:a7:31:3f:ca:a3:6c:31:e0:26:2d:ed:42:
                    f2:02:ea:fb:1c:d4:4c:22:de:23:81:54:87:f2:24:
                    9c:af:5b:4b:c2:43:98:be:ed:a7:e1:1d:87:d0:93:
                    a2:b7:96:56:ce:57:e1:c0:82:a9:c3:b9:d6:65:ee:
                    2e:1a:8b:73:aa:25:8f:8b:f3:ca:5c:2a:d4:ad:0c:
                    e5:c7:10:52:5b:8a:d7:40:1a:6f:a2:e3:cf:15:72:
                    31:fc:fc:42:61:cc:e3:0a:c4:d0:be:49:54:d4:1c:
                    45:a0:50:11:67:1b:0e:29:04:24:8f:4b:6a:c5:88:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:E0:A4:60:E8:C3:0B:00:BA:D3:7F:DF:C5:AC:11:A7:39:32:1F
            X509v3 Authority Key Identifier:
                keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:dd:d6:38:69:75:1d:7b:73:f2:82:09:bf:54:ae:c9:e4:
         09:a3:de:eb:c5:d6:c0:e7:3f:c1:a3:85:1f:1a:1b:48:06:32:
         3c:33:e1:0b:38:a4:00:b4:fd:a6:45:88:33:24:de:57:54:33:
         32:0f:9f:f9:9f:ef:59:31:37:2b:46:c7:a2:d9:78:82:eb:5c:
         e2:18:6a:35:a4:0d:30:e2:60:b3:1e:aa:19:6f:bf:f8:fc:c5:
         b4:54:a1:74:fd:7c:be:c7:9f:82:4e:94:14:e8:20:83:be:34:
         e0:a2:e0:c9:3f:8a:cf:01:9e:ab:c3:2f:79:ab:05:47:b8:6a:
         66:75:9d:b5:ce:03:a6:2a:6a:2c:7e:68:e9:6e:11:9d:53:5f:
         53:5d:4f:28:40:13:e7:0c:b5:40:bd:06:da:7b:33:7a:d3:b3:
         4c:a6:c3:96:77:47:37:64:0c:d3:bf:15:34:b0:ef:be:06:42:
         14:a4:7f:06:d0:c2:fe:d7:0b:2c:8a:6a:6a:f1:b6:a7:c3:c3:
         b3:59:f3:a8:b2:d3:05:7a:58:f5:22:19:1c:f5:9e:5b:3c:ff:
         cd:67:b8:23:da:87:b2:aa:df:e8:8a:70:f1:2e:3f:30:7a:09:
         63:07:ec:30:52:19:6a:6d:c7:21:f7:d4:32:58:a8:b8:7c:20:
         94:1d:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----