Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
File:                     27m8LeNs8jtonzxy6Aq8_kggJsE.mft (raw, json)
Hash identifier:          1G+ryIvGjfdLiPYHxI9WYJy7iICGp/NkVZBUIEg+uPQ=
Subject key identifier:   94:9D:1A:8C:03:51:8A:E8:43:A4:74:8C:60:A9:3F:B6:77:A7:D8:B3
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Certificate issuer:       /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial:       01962F7442C159D903089BF8EEA48797F750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
Manifest number:          1096
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 27m8LeNs8jtonzxy6Aq8_kggJsE.crl (hash: NM+azTKGc7JINXiILZLw6rf+tMPbM1frO1638X71qKY=)
                          2: ClhEwRnDYw2TQH3RNosMAuvSTaM.roa (hash: zVMUBbJ0ZW19QPyVy2U8+UbE5LuoimUH2oM9U+S3avI=)
                          3: EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa (hash: rlcHKNxqzbJZK9gtci2o/2aqsd2FZRiITmisyzoxH20=)
                          4: Tcdkc_pLid4bj31FVcmiyvaPqWk.roa (hash: GaSdD3u1V54qfiVL17STtf24nCmyDEzVmYt0IeL8i0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:42:c1:59:d9:03:08:9b:f8:ee:a4:87:97:f7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=949d1a8c03518ae843a4748c60a93fb677a7d8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:40:53:46:a5:53:e0:b0:2d:ed:2f:74:ff:
                    e0:fa:f7:21:10:84:03:68:d2:14:0c:5c:a2:63:83:
                    88:3a:d9:f8:bc:0e:35:0c:3e:bf:e2:c8:f3:8a:89:
                    de:f0:5e:7e:fc:78:b3:02:cd:87:19:25:9c:0a:5a:
                    a0:31:e7:a5:5e:8c:c5:c8:21:0d:6e:45:26:29:52:
                    67:7e:18:30:6e:0f:34:5e:8f:e6:ad:f4:13:3c:c8:
                    00:e6:a2:55:92:2f:89:d1:a8:6e:76:12:7b:0a:8c:
                    d9:99:a6:d3:58:d6:f4:c3:10:2e:0b:3f:9d:c9:79:
                    41:66:f0:78:70:ec:7a:89:a4:aa:57:e1:3f:7a:59:
                    7c:81:dd:dd:9a:bd:72:08:7e:d5:87:b0:d6:54:d3:
                    a3:dc:2f:53:52:6f:cb:81:93:0c:3d:71:f7:df:b1:
                    a5:86:bc:17:81:28:23:2d:bf:2c:f1:aa:df:00:93:
                    fa:5f:30:73:05:17:fb:6b:cb:23:50:0b:53:8e:76:
                    5a:de:0f:e6:82:66:bb:fc:2d:31:ad:c7:cd:9e:fd:
                    b0:e1:52:ff:f2:88:40:bf:9e:7e:b5:9b:dc:b9:f3:
                    3c:6e:83:07:a0:14:14:4d:83:ea:88:bc:42:19:63:
                    e8:a9:de:da:ff:9f:c6:ec:68:d4:c5:fb:85:6b:0e:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9D:1A:8C:03:51:8A:E8:43:A4:74:8C:60:A9:3F:B6:77:A7:D8:B3
            X509v3 Authority Key Identifier:
                keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:45:04:9c:a1:b7:1f:9f:1b:4d:cb:85:59:65:fb:f8:37:44:
         92:c8:ca:17:3c:7f:00:12:88:dd:9a:a5:32:ca:df:4d:06:bc:
         12:33:9e:96:f7:7c:75:7c:87:ad:92:54:86:4a:4f:01:49:37:
         0a:8c:9d:71:aa:e3:15:4c:a5:3c:3c:fd:06:fa:7b:1e:a8:0d:
         b0:b6:ce:4a:17:2c:b6:cc:f4:ab:aa:62:99:be:d2:4f:82:30:
         57:9e:65:f9:8a:fc:74:54:72:cc:7b:03:b0:8c:6d:7d:8c:7d:
         2e:b2:f1:2f:bd:17:32:f2:ac:6a:2b:bd:aa:f1:e0:63:31:31:
         fc:9a:f0:15:a4:6b:c0:a0:b1:03:05:da:8a:3d:fe:33:96:05:
         58:e9:10:4b:0a:53:36:93:3c:84:01:a2:69:f1:11:43:1b:8d:
         d3:9c:1f:0b:ee:7a:4a:d8:44:0d:34:f3:05:e1:41:39:3a:90:
         00:ab:d6:16:9c:ae:79:2b:d3:77:90:29:e4:e8:af:9d:9e:94:
         25:42:f0:51:3d:21:7b:d1:b8:99:65:4e:e5:48:7b:76:40:d1:
         30:c6:cb:1f:f3:1f:a3:fb:f0:bf:7e:4e:e1:2b:77:95:1e:ba:
         a4:60:d3:37:d8:5f:b3:c8:3b:ec:15:59:dc:aa:99:c1:ca:23:
         44:b3:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----