Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File:                     1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier:          0E4aDnLCgGZi1U8ZZA4DYhf3YCtKhhW2wf5CtqwYakU=
Subject key identifier:   CD:AD:7A:B0:8A:9E:A7:A7:D6:B7:55:24:9F:00:8E:58:75:32:DB:F8
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer:       /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial:       01962F06EC0C7881FCF51113F48FE515DFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number:          093A
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: YHIHSCokizZMJ92fzDUdqZMWr/biND2TaWYTgqCNvd0=)
                          2: axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa (hash: L++63wCXKAgo0Nta63++qRFUhLIAbDFglc5Q/4n9sQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:0c:78:81:fc:f5:11:13:f4:8f:e5:15:df:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=cdad7ab08a9ea7a7d6b755249f008e587532dbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:8b:31:74:4c:c0:14:92:1f:3c:5d:15:88:
                    d7:53:b3:35:1f:03:b6:38:57:b5:5f:da:18:c8:8b:
                    63:10:8b:24:7c:8c:4b:b2:f3:c9:3a:7a:a0:29:41:
                    f7:6a:0b:ce:a6:a3:56:bb:d1:5a:51:e7:ae:b1:bf:
                    41:c1:9c:b3:eb:b8:5b:aa:b3:56:45:59:cd:36:29:
                    7b:9c:7f:67:64:c0:8a:83:af:c5:76:d3:d6:6a:92:
                    f4:96:3d:f6:87:3a:64:ba:e4:66:7b:fa:30:1e:13:
                    21:af:cf:64:7c:a5:2e:b8:45:5c:1d:e4:87:4b:ab:
                    3f:0e:cb:de:07:a0:6f:a6:ff:4c:89:47:d1:8f:c1:
                    5e:a6:0f:ca:37:fb:ec:45:42:ae:19:8b:90:61:0c:
                    f8:74:4a:d4:5a:1c:69:fe:a9:4b:a1:c1:3e:08:f1:
                    e1:f2:a6:fd:7a:94:48:83:57:ce:8d:a8:76:ac:d2:
                    5a:d9:9a:2c:a7:46:69:c4:f5:43:61:b9:0d:e5:c0:
                    4e:1e:53:db:7b:c1:a4:18:45:70:fa:f8:61:9b:3f:
                    2e:d6:c2:b2:13:5f:df:d8:a9:6d:5e:70:39:47:a2:
                    f5:5b:d8:ff:8e:7d:34:cd:ed:00:c7:ee:a3:2c:e1:
                    cc:8e:aa:73:54:f8:be:a4:4b:86:8d:21:14:d7:7c:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AD:7A:B0:8A:9E:A7:A7:D6:B7:55:24:9F:00:8E:58:75:32:DB:F8
            X509v3 Authority Key Identifier:
                keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9c:f8:d6:7d:46:c3:45:9d:ad:ac:b1:4d:c4:b3:0a:a6:61:
         d3:f4:ac:60:1e:07:62:a0:85:a6:15:c9:04:a3:c5:c1:1e:a6:
         28:3f:3f:b0:60:70:83:2e:33:49:9e:3d:88:fe:a3:3b:23:b4:
         96:fe:69:90:f8:8a:a7:ef:ca:eb:5f:9e:5e:56:3d:12:b9:01:
         eb:7f:c2:63:ca:32:ee:85:5d:6e:92:38:c4:bc:84:7e:13:54:
         b8:cd:c8:42:f3:eb:45:5e:92:2d:25:eb:8e:39:e2:f8:78:0a:
         e0:71:fe:d4:b5:23:1b:29:eb:1d:42:ab:0f:eb:6b:23:e1:a3:
         85:86:5c:34:d4:3b:78:eb:8a:45:c4:3f:f8:26:3c:ba:9a:18:
         48:b5:2c:a8:dc:1f:7f:96:e8:e5:5e:c3:35:10:7a:27:65:8a:
         77:5f:c1:b9:43:1a:ae:81:ac:2c:52:55:52:dc:aa:f3:86:32:
         72:c6:71:48:c5:31:d2:b6:a2:f4:64:a8:c6:38:37:37:b1:f2:
         ed:76:75:52:fd:6e:c3:82:a9:b1:a1:d2:b2:26:ae:2d:97:f1:
         e1:d6:1d:51:77:65:6f:30:fc:d4:a1:8a:4f:14:0e:ff:e4:00:
         ba:0d:b4:02:bc:9c:3e:53:02:78:68:45:24:b2:40:bb:2a:eb:
         4b:f8:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----