Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File:                     2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier:          FW9OusraVYwF4X++5gtmYgh0+gChmiCDmcypuLGDpfs=
Subject key identifier:   C9:BD:00:8C:C8:85:79:C6:77:59:AB:6A:15:9E:1E:ED:7C:20:69:DF
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer:       /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial:       01962E61E41F55BD9B613ED9D337DF9AFCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number:          0941
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: BZLtMfHaOShOE9re1foQzzgFUxPv1YeF4U3vr+0alNo=)
                          2: empYwKrx4ABahFY0k2CZXZft5Pg.roa (hash: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:1f:55:bd:9b:61:3e:d9:d3:37:df:9a:fc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=c9bd008cc88579c67759ab6a159e1eed7c2069df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:e4:74:cb:62:5d:20:8c:00:e6:6f:91:da:
                    45:22:fa:5a:e6:2d:ec:8c:03:d7:57:2f:9f:ff:49:
                    8f:80:ca:79:57:1e:7b:4f:be:42:90:74:e6:9c:12:
                    a4:3e:8e:f9:ea:c2:fd:d0:4f:52:48:26:4b:f3:28:
                    42:90:69:ee:64:c1:de:de:97:87:37:10:65:5e:bf:
                    ec:65:52:75:5e:b5:98:7b:57:96:99:66:5a:39:1e:
                    ce:4b:c8:2f:2d:c0:a2:4f:f7:2a:a0:ec:d5:70:a4:
                    32:ea:67:d3:97:ca:41:bb:b6:60:b2:85:b6:c1:fd:
                    86:b0:61:19:86:6c:57:fe:b7:88:56:10:39:25:5c:
                    8f:e5:b2:1a:6c:48:2d:89:28:3e:65:29:86:19:81:
                    20:cd:95:e8:4d:5e:30:35:ee:14:a8:53:e1:e8:88:
                    08:ee:c3:62:c1:1b:04:2b:99:ec:40:2a:1a:6a:42:
                    f8:df:39:d3:57:de:cb:1b:5e:e7:4a:e0:23:b0:17:
                    17:79:39:07:37:6e:9f:86:e6:7a:bc:15:dd:8e:66:
                    d4:93:a9:43:53:ad:cb:28:a4:5a:d1:f9:92:3e:5b:
                    27:7f:3f:6e:51:64:d6:1d:78:7e:b0:fd:90:35:c1:
                    a4:d3:78:8b:42:9b:e2:0c:c1:2a:30:95:bd:0b:6c:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:00:8C:C8:85:79:C6:77:59:AB:6A:15:9E:1E:ED:7C:20:69:DF
            X509v3 Authority Key Identifier:
                keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:48:7b:79:d1:02:d1:1a:36:b6:29:f4:65:bd:6c:1c:09:1f:
         1b:f0:59:7a:4b:34:59:cc:89:ec:1f:18:1c:77:6e:5c:75:92:
         41:8b:18:24:70:e7:9e:9d:da:a6:12:3d:db:cb:27:8d:5d:76:
         31:03:8b:34:75:52:f3:9b:65:13:9c:c0:c8:a1:22:2d:b8:fd:
         bc:69:c2:31:07:85:9e:56:ae:7e:30:df:0f:f5:1d:89:8b:c2:
         b8:cd:c0:d3:62:e4:54:fe:1c:23:62:01:92:76:de:60:7b:85:
         07:e6:75:0a:1f:5b:6e:b5:51:ea:28:d5:15:d7:24:a3:76:fa:
         2f:93:db:9f:97:90:c0:7b:67:7b:0c:57:02:92:54:f8:5a:84:
         2f:aa:18:99:15:1b:bc:f4:a9:3f:7e:8a:79:b2:3d:d3:f6:1c:
         56:1f:64:07:ad:1f:fe:64:77:0c:23:d8:0b:6f:d5:dd:7a:ad:
         08:44:1a:aa:cf:35:84:27:95:4f:b4:1e:f5:ab:18:81:73:84:
         fe:6b:9b:eb:fb:e0:55:37:f0:69:c9:fb:90:df:5e:0c:5c:fb:
         b6:72:6b:1e:bf:e0:72:87:a1:13:72:68:7a:15:b8:d5:48:46:
         30:19:25:55:83:3f:f7:ca:60:9b:11:fb:4d:01:58:6d:d3:a5:
         38:fb:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----