Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File:                     morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier:          I+R4SSKsO9lu18DYaeFxS1hgqUgRWXzxk5f2SwBFRrU=
Subject key identifier:   43:73:64:4F:0D:B8:7E:FF:1A:88:D3:1F:78:7B:6F:4D:B3:FB:5B:67
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer:       /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial:       01962F0736DB9DE3F3594AB35BAD11277AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number:          015D
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
                          2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: VD4R4lGVt44l5Xfaa23GmRdKRANoaEcjlQ/VUUOfBDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:db:9d:e3:f3:59:4a:b3:5b:ad:11:27:7a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=4373644f0db87eff1a88d31f787b6f4db3fb5b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:b0:3a:8b:5b:8a:56:f5:f4:c9:b5:20:6d:
                    7d:a8:21:60:1e:93:1d:40:71:2a:40:15:2b:3b:6a:
                    ad:91:d0:be:ff:70:42:6e:78:14:e0:bb:23:81:aa:
                    f7:b3:5d:29:48:7a:ce:cb:13:bc:ed:53:ae:4b:dc:
                    73:91:63:96:c0:6f:80:4d:9a:c6:8d:20:e1:d6:22:
                    73:b8:ff:de:4c:82:d1:51:d1:48:2d:d3:31:8a:68:
                    c7:88:fa:af:4d:90:1e:a2:74:a4:f9:9e:25:ac:88:
                    7f:78:7a:20:bd:ee:df:76:07:7b:72:1b:a9:a1:bd:
                    a3:dd:75:8d:d9:72:ac:dd:b8:cb:e7:e5:d9:06:6c:
                    f2:41:ed:ed:01:bd:6c:b2:40:fb:8e:43:49:ab:27:
                    93:75:2e:6d:3f:e8:a6:2b:f3:2d:d2:38:ce:5d:7b:
                    2f:ec:2d:e5:9b:5b:e8:9e:d8:bc:27:65:b0:51:55:
                    43:bf:08:c0:47:5b:fe:67:cc:03:43:9a:e2:a9:5a:
                    25:1e:7e:5b:4d:1a:5d:41:19:e5:e4:72:75:12:9b:
                    9c:cf:12:60:59:ec:eb:b3:58:5e:b0:0c:98:bd:a8:
                    f5:eb:1e:a8:54:99:5b:0c:d4:08:fd:ac:78:c9:ed:
                    47:99:1d:15:bf:7f:a2:46:54:b1:ec:2b:da:7f:12:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:64:4F:0D:B8:7E:FF:1A:88:D3:1F:78:7B:6F:4D:B3:FB:5B:67
            X509v3 Authority Key Identifier:
                keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:35:0a:27:4c:09:d3:ba:f6:3d:8c:08:c3:78:6c:4e:0d:
         8c:c4:00:a3:aa:58:46:eb:ab:20:92:0c:15:e0:18:7b:85:83:
         c9:5f:83:19:a6:f2:8e:3b:7f:c0:79:a6:17:d8:1c:e6:80:c2:
         2e:db:d1:5c:aa:3f:42:10:bf:70:ac:28:74:7b:52:94:f4:fa:
         e9:04:fb:8e:69:4b:c8:85:b9:29:e9:cb:29:c5:e1:4d:92:ad:
         d7:2c:e5:37:a0:01:d4:62:dd:a3:69:41:bc:1c:ab:3d:c6:28:
         2b:fe:23:f5:5d:04:da:7d:0a:14:77:8f:f4:e1:d4:3c:d1:a7:
         3e:51:bb:32:6d:45:20:7a:c9:d9:7c:59:77:ca:ad:c8:d4:b2:
         de:bb:5d:93:bc:32:a2:76:55:a2:9b:d3:99:89:c5:65:7a:e6:
         0e:5c:34:15:e3:30:18:0e:ce:12:a9:de:b4:63:62:b0:36:cb:
         bb:ee:72:95:03:9b:e6:38:1a:16:3c:9a:55:7a:23:e4:6d:26:
         3a:6d:bc:cd:66:a7:3b:5d:23:7f:35:a7:e9:b4:06:69:88:e1:
         29:3b:37:07:e3:6b:82:c4:05:5b:d0:70:67:34:e5:1c:ff:ab:
         44:37:b4:8a:99:6a:6b:0c:65:02:6b:ed:83:67:a0:2c:dd:31:
         56:5b:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----