Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File:                     1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier:          wBgEs4/gwg9bzXg52gpsUSYePezZmiyAjKe7CFtImU4=
Subject key identifier:   13:1F:02:B8:C6:80:4F:10:0E:28:58:3F:55:C1:9A:94:47:1D:8E:6B
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer:       /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial:       01962E61BE29AE739837E97E23BCED1E6513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number:          0175
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: 9e0TtrQWf3yzNzKT+re4+BgtQBF38axfU7+/h3JIJ1M=)
                          2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:be:29:ae:73:98:37:e9:7e:23:bc:ed:1e:65:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=131f02b8c6804f100e28583f55c19a94471d8e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:da:ef:0e:9b:f4:6b:30:b3:f4:5f:fa:a6:
                    40:f6:c4:77:04:d0:f0:1a:9b:27:c6:7a:2d:91:12:
                    0a:93:4b:ed:55:73:ef:36:19:f2:38:7c:3e:27:b0:
                    61:69:34:f1:52:58:9c:9b:e7:cc:59:4b:fb:05:e9:
                    ab:3d:c9:46:74:eb:9b:59:e0:9e:62:04:aa:2b:aa:
                    63:ea:99:8c:8a:db:b1:22:93:d6:90:6d:82:a6:47:
                    53:b4:95:dc:3a:02:7e:da:90:98:de:a9:bf:d5:97:
                    f3:4a:4c:b9:d3:59:d5:95:fb:87:f3:bb:b9:1e:05:
                    b0:b0:cd:61:1f:df:b4:41:8a:5c:e8:f3:31:23:83:
                    35:d6:d6:bb:67:cf:5c:ef:ae:d0:ba:06:ae:3d:98:
                    cf:bc:42:38:21:9e:94:c3:91:73:32:c0:20:32:48:
                    b2:ea:80:b1:1d:88:58:b6:f2:ab:40:28:e5:42:3d:
                    9c:7b:f6:89:18:1b:ef:78:c6:82:9a:6c:09:5b:36:
                    39:c6:99:43:79:3f:d0:ea:0b:ff:ed:ba:60:f1:78:
                    e5:1b:3a:a5:a4:06:84:bf:96:8a:c9:42:5a:36:a0:
                    6e:11:68:0f:db:8e:54:aa:71:e3:f4:90:5b:be:03:
                    55:db:db:da:c5:f1:c6:5e:6a:4f:60:81:0f:f0:33:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1F:02:B8:C6:80:4F:10:0E:28:58:3F:55:C1:9A:94:47:1D:8E:6B
            X509v3 Authority Key Identifier:
                keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:9d:de:3e:14:40:7e:1d:07:7f:64:c4:2f:03:73:31:b6:8f:
         59:23:f3:8f:ae:84:95:4e:83:cc:cb:17:c1:1f:9a:77:dc:b0:
         85:00:23:7e:bd:d9:8a:ba:06:16:45:15:fa:10:a8:46:d8:63:
         f6:3f:4d:6f:99:7f:95:31:94:da:a3:c3:51:c8:68:8c:ad:7c:
         c7:af:04:80:3f:be:a2:26:45:e5:76:93:dc:d6:17:16:eb:34:
         6d:15:4a:2c:f2:71:03:ff:ab:f1:8b:04:6f:8f:9b:f1:1f:52:
         38:27:f5:80:8e:f4:0f:86:b0:c6:63:fb:c3:ed:f8:fd:a8:08:
         ea:dd:86:e1:30:87:52:db:4a:85:45:f2:20:2e:0b:8c:8c:de:
         09:57:92:3d:bb:06:ad:f0:45:f3:6d:da:c3:7d:79:51:3c:7d:
         fb:6e:c0:03:ae:24:37:f9:72:05:90:27:52:38:db:29:07:99:
         51:75:43:3f:8c:79:54:bd:9c:43:a3:cb:36:65:c4:86:12:0e:
         29:db:01:bb:1d:1b:46:5b:da:c8:36:61:e7:67:e0:f1:6c:51:
         51:bc:13:50:17:84:53:e1:50:b3:8e:40:fc:75:32:59:44:d8:
         14:d8:3b:c3:09:e6:c0:a0:46:62:9d:7a:a7:96:04:f9:ee:22:
         64:8c:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----