Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File:                     9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier:          okBq4+8xY369DUWu6/qAzeWLG1m16hzSyaCZnm3LU4w=
Subject key identifier:   28:96:8A:15:96:47:68:5B:73:D2:5F:4B:75:CA:2E:67:8E:95:FC:0C
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer:       /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial:       01962E61731AE2FF54A2D35B5488E9BB8809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number:          0C05
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: anlCBcz5JoKGtwg5y7V0sqms2ttL6//+Imw1v6z4th8=)
                          2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:73:1a:e2:ff:54:a2:d3:5b:54:88:e9:bb:88:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=28968a159647685b73d25f4b75ca2e678e95fc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:20:f3:b6:c8:f2:0e:07:3d:f6:af:2f:f3:
                    01:47:06:f6:0b:c7:2d:51:7b:06:6f:4a:44:08:9f:
                    ad:31:f9:99:62:67:7a:0c:95:9f:f7:a6:f2:05:83:
                    da:20:7e:98:8a:7e:f4:90:d0:04:5e:19:34:be:e1:
                    01:50:9d:91:e2:26:4e:ef:64:d0:e5:b2:f7:50:b7:
                    f2:b1:fc:4d:50:5c:b5:17:07:ed:e3:c8:40:b9:be:
                    cd:05:cc:10:91:aa:70:26:3e:62:fd:b4:b4:b7:4a:
                    17:44:e6:3e:fc:05:ae:89:dd:86:f3:e6:30:b2:bd:
                    9d:c8:69:2b:2a:8a:af:4b:73:37:9b:9f:68:94:60:
                    64:ea:a7:15:1e:fa:06:ff:3f:23:ec:ae:b6:19:2f:
                    d3:ff:2f:cc:58:44:d8:9d:a9:80:bb:33:aa:30:ca:
                    25:30:07:e4:67:2f:ae:87:9b:27:40:d8:84:e5:42:
                    98:d4:f2:7d:51:13:3f:d2:fb:be:61:e5:05:65:b5:
                    fd:66:7d:a1:92:c2:e5:c5:5e:82:57:a2:8e:a5:10:
                    25:2e:67:1d:ab:ee:a0:44:d2:06:9b:fe:71:33:53:
                    5b:31:d0:bd:c0:52:62:c3:42:c4:48:11:46:13:6b:
                    4a:89:fb:31:36:6e:31:29:e1:c2:b9:13:c6:1c:f3:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:96:8A:15:96:47:68:5B:73:D2:5F:4B:75:CA:2E:67:8E:95:FC:0C
            X509v3 Authority Key Identifier:
                keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:df:da:29:9f:59:e9:b0:8b:e3:07:fc:df:45:b9:df:f4:
         14:98:8a:14:99:25:68:c7:c2:ef:a0:18:ea:2e:88:ea:f6:81:
         cb:1b:d3:78:ef:4b:16:1a:f7:38:7b:61:99:25:ce:93:7e:4e:
         2c:26:2f:66:f4:61:ad:dc:1d:d6:d8:13:97:3f:58:f9:0d:ae:
         a7:85:92:fd:3a:d9:0f:b6:8c:b0:3c:eb:f1:fa:0a:73:4f:67:
         50:73:20:e8:6d:9d:ad:7e:9c:49:8f:11:66:d4:48:6b:b6:63:
         7e:a3:4c:1b:49:4e:77:dc:6a:2c:2f:25:17:9e:f9:14:d9:83:
         26:98:83:bf:fb:ab:40:01:ce:4f:22:09:8b:f9:a7:85:04:94:
         02:38:2d:7e:6c:48:d8:36:a9:6c:40:2f:f3:81:d1:c3:73:a4:
         56:1e:b4:b1:8c:84:8e:72:88:6e:d5:19:9b:e1:88:00:7c:3d:
         f4:bb:d8:fb:4b:af:c7:0e:3f:19:10:3d:f9:72:1b:9c:78:93:
         84:74:9f:24:64:c6:d6:06:e9:60:ea:31:a6:fc:ae:b9:25:ce:
         8b:d2:95:95:59:35:f3:f1:06:b5:85:39:fa:37:31:de:92:e7:
         6e:a7:35:d5:a6:25:23:89:29:64:ed:62:e9:0c:bb:c9:dc:12:
         04:2f:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----