Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File:                     0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier:          ewcyUFJ6m4y0nGOd5/jk/N6FOV17Xt6jtIxO9Dmidvk=
Subject key identifier:   89:6F:99:9C:2C:B4:1A:02:9A:EB:AF:F3:DA:64:80:FB:AE:E4:EC:05
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer:       /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial:       01962E61C603FE0B4C9A59C6C87058E34DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number:          0901
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: 7PoYRox8f/RswmSFuaHEQNnhHOF48zaGs1Q6b2EhNVQ=)
                          2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
                          3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c6:03:fe:0b:4c:9a:59:c6:c8:70:58:e3:4d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=896f999c2cb41a029aebaff3da6480fbaee4ec05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c6:70:ce:80:62:0c:0a:e2:95:ad:70:6a:52:
                    34:03:57:ec:d1:7c:5c:c7:c1:3f:23:04:dc:0c:7a:
                    7b:3e:fd:75:8d:27:7e:b8:f2:f0:ef:15:08:c3:75:
                    41:8c:44:51:d4:5d:95:98:52:61:b7:f6:02:a7:ca:
                    77:3e:d3:05:36:23:91:b4:9e:01:7c:8f:97:0d:8a:
                    01:d9:7a:4d:df:98:7f:b6:b9:04:ff:9e:76:54:f6:
                    64:f8:12:30:d9:6d:11:2e:9c:bf:aa:e1:61:50:4f:
                    14:ca:8d:e4:aa:ac:c6:b7:c2:16:aa:88:24:ed:08:
                    e5:ed:c4:28:74:19:71:23:09:ee:64:a4:73:2d:0a:
                    58:9c:f1:a5:02:9f:fa:10:df:8b:c2:8c:77:aa:ee:
                    dc:f1:0b:89:56:18:06:8b:ac:10:bb:be:61:ff:d3:
                    ce:e0:96:a3:50:34:5e:d3:55:3b:ce:4d:5a:e7:97:
                    17:43:9a:88:97:37:5d:80:7b:e3:ee:e5:22:0d:d7:
                    71:35:d1:f8:ca:6c:4b:95:f1:48:b2:5f:ff:20:b3:
                    b1:55:f2:13:2b:77:c8:11:eb:75:a0:fb:c6:3e:b0:
                    54:06:6f:c1:3a:6a:3c:b1:7b:08:95:00:b9:47:4f:
                    cb:4e:82:29:c9:69:95:2c:df:93:ab:41:a4:c0:97:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6F:99:9C:2C:B4:1A:02:9A:EB:AF:F3:DA:64:80:FB:AE:E4:EC:05
            X509v3 Authority Key Identifier:
                keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:7e:c0:b1:f9:c8:ec:ac:1c:4d:f4:c8:b6:d9:bb:b8:21:
         70:c0:a3:7d:17:e5:ec:2c:60:64:3b:78:f7:95:a5:cf:2f:2d:
         68:a3:13:71:94:06:08:98:83:a9:cc:48:f1:42:55:0e:ff:4a:
         b1:1a:e9:f3:b1:c1:de:6d:7f:51:65:33:36:0c:f7:c4:18:bb:
         26:88:58:e7:af:2c:1c:02:26:5e:2e:5d:ca:3f:47:21:90:2e:
         f6:cc:ab:e9:45:1e:3c:c4:b1:d4:36:12:17:ed:e9:f2:04:af:
         98:47:ec:cc:0e:04:f7:96:f6:23:ef:22:49:1f:8d:27:87:f3:
         d9:c5:0d:f7:2c:44:9a:ac:54:73:88:e1:bc:26:82:7f:62:48:
         97:df:98:e6:95:96:01:b3:58:a7:c4:91:e2:1f:36:4b:fc:d3:
         21:01:25:3c:6f:14:28:6d:4e:9d:6d:de:a7:46:56:b6:e9:4b:
         7a:b4:83:4e:ab:c3:a1:cf:1c:41:bd:ea:7a:55:75:25:a5:79:
         3d:83:c5:bd:1e:49:96:00:b6:39:17:0b:c1:4b:b3:54:1a:b6:
         58:3f:da:a6:c1:83:dd:6b:79:42:36:0b:a0:06:19:b7:d7:00:
         2d:82:32:91:e4:fc:2d:55:99:eb:41:e4:80:1c:89:d5:b9:23:
         9a:58:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----