Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File:                     1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier:          NnSC9/2W4yqQFUcn5DOrWZq/q/+v85E/sgZN3zBFdQs=
Subject key identifier:   8C:F7:43:88:4B:8E:1E:AB:67:6F:AB:F3:BB:C4:E3:00:F3:A8:29:36
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer:       /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial:       01962E98B200B417D241B89D38BAF5787723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number:          0538
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: 5R8RdNp+woL2XqiZBJ8VKYPkncHqugmVSztqvDncMQU=)
                          2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:00:b4:17:d2:41:b8:9d:38:ba:f5:78:77:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=8cf743884b8e1eab676fabf3bbc4e300f3a82936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:65:0c:52:c9:21:48:77:66:c3:a4:9a:8c:
                    3e:01:97:61:6a:d8:f6:43:fc:64:72:61:45:52:7f:
                    1b:43:5d:1e:68:30:b7:68:9d:7a:98:ff:8d:ba:fa:
                    15:bf:06:7f:3c:8f:14:8c:90:af:e5:01:d0:04:e3:
                    ce:1d:40:56:38:b5:4e:0b:41:a7:51:47:f8:cf:36:
                    8c:00:c7:9c:d9:00:8f:5b:23:fd:ed:94:51:09:18:
                    b9:7a:10:54:1c:f8:57:6f:52:10:00:2d:21:49:9b:
                    2b:47:8e:9a:5f:5c:e3:59:9b:98:47:a1:c9:aa:12:
                    99:5a:3e:64:a2:27:94:4d:73:d9:ec:6f:ca:a4:2c:
                    8d:d2:4f:1b:27:ff:d4:97:f9:d4:17:62:6f:3c:60:
                    66:90:d8:b2:6f:fa:4d:1a:39:e4:3b:09:23:14:95:
                    91:d1:ea:e5:e9:84:db:82:21:21:97:b6:e5:4d:98:
                    12:fa:0d:fb:4f:15:19:fb:e3:ae:6e:3d:38:f4:8b:
                    4d:1e:09:a8:be:21:68:49:40:b9:60:be:62:08:f9:
                    d9:6f:21:0c:18:1c:d0:34:3c:d3:92:67:30:32:94:
                    8f:28:0d:eb:ab:33:2e:90:bf:4e:40:0e:f5:46:11:
                    42:63:f1:d5:63:be:6a:6b:09:89:58:f9:8e:96:c4:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:43:88:4B:8E:1E:AB:67:6F:AB:F3:BB:C4:E3:00:F3:A8:29:36
            X509v3 Authority Key Identifier:
                keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b1:bf:2f:74:40:7d:31:86:2f:74:4d:1a:5e:cc:b4:c1:e9:
         cb:d5:6f:03:74:55:20:e2:7f:6d:80:2b:8e:ef:35:7f:75:62:
         7a:6b:be:7a:00:e6:21:9d:37:63:8d:d3:c1:6f:93:1e:80:8f:
         5d:6a:2f:ff:4f:91:75:01:e9:24:f6:fa:44:03:a0:56:f7:d6:
         38:64:90:30:18:f3:bd:1d:93:ec:20:73:14:35:42:bc:96:20:
         bd:d3:71:6f:d7:6a:52:72:24:a2:b1:0e:5f:63:a1:15:44:3f:
         ba:59:e9:22:71:b9:d2:14:4d:a7:1b:f8:44:28:0c:d3:77:3c:
         37:68:75:98:ec:a5:1b:b5:8b:88:27:fa:40:f9:a8:a5:48:c7:
         85:e9:fe:af:25:0b:31:bf:9a:04:d7:46:a7:ae:ad:23:05:ca:
         70:af:4f:e1:52:24:c9:4c:8d:e3:97:f9:5f:20:43:35:81:1b:
         77:6c:11:83:8b:de:78:35:28:2f:5e:ad:30:14:a8:be:42:23:
         2f:d4:ed:91:2e:18:37:87:9a:a5:b2:92:b5:4e:84:da:5c:7b:
         37:96:7c:2f:59:65:86:10:ac:83:a6:12:7b:38:bb:ef:d6:94:
         2c:92:65:55:25:b0:66:6d:3b:fe:ed:58:99:cd:5d:cb:00:12:
         bc:2b:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----