Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File:                     1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier:          xcYj+DB2gFVeFKp6YY03VmXI8fbaYmf7C/T4Ha9851M=
Subject key identifier:   22:04:B9:60:EB:3F:2B:12:17:6D:F6:47:A9:12:DA:B1:7F:AE:A9:8C
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer:       /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial:       01962F0677467BD481F7D698C294DA226037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: hqLcWhGDjmK0sq1rmyBwrxnN1pc7lOjOOTkaAIBDb5s=)
                          2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
                          3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:77:46:7b:d4:81:f7:d6:98:c2:94:da:22:60:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=2204b960eb3f2b12176df647a912dab17faea98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:8b:c2:a6:07:11:07:5f:d8:ff:44:fc:49:
                    33:b9:8d:ec:1e:5f:e9:be:d9:c6:ab:00:9f:58:76:
                    65:5d:2d:77:08:38:87:c3:50:a7:0f:6d:4c:03:6f:
                    bc:1e:24:3c:4f:45:82:9f:ab:99:63:77:17:98:e8:
                    f7:f6:af:65:73:3a:d8:70:20:df:ec:19:7e:be:df:
                    f8:99:3e:28:03:94:94:06:c9:88:30:c7:a9:67:52:
                    b7:36:ee:e5:fc:e5:e7:ee:6f:53:94:6f:27:04:4e:
                    ba:4f:d0:0f:62:bd:f8:06:b8:21:9a:00:95:0e:3e:
                    5a:f7:fa:e0:4d:55:7c:d1:b3:ca:1d:cd:7e:ec:e1:
                    c4:e2:00:a4:e7:56:1f:f4:6d:98:eb:54:70:9a:25:
                    60:d2:38:f0:a6:0f:f9:64:8c:8f:2a:21:ca:2f:72:
                    19:65:26:b6:f3:e8:25:d1:8d:b3:8f:ce:00:ac:f2:
                    b9:5c:39:34:96:d6:5f:06:5e:40:ab:f4:96:40:c2:
                    8e:c7:7d:3a:81:aa:80:40:51:33:d8:91:37:d2:46:
                    77:41:91:a6:09:4b:77:ff:f1:2a:15:e4:09:53:44:
                    34:0b:aa:22:b0:a6:5a:16:71:74:5f:f2:f8:cd:bd:
                    7d:fd:3a:2e:d9:66:80:0b:33:9e:51:15:ff:8a:c5:
                    4c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:B9:60:EB:3F:2B:12:17:6D:F6:47:A9:12:DA:B1:7F:AE:A9:8C
            X509v3 Authority Key Identifier:
                keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:3c:a9:5b:3c:44:94:2c:10:dc:36:a2:3b:bd:db:6c:87:
         da:70:67:7e:f5:b6:f7:5b:05:de:e2:c8:55:e2:6d:dd:e9:f8:
         26:fc:9d:17:f4:0b:4c:63:9b:e0:9b:6d:43:11:ab:13:88:64:
         23:7f:7b:74:3f:50:77:18:8f:1c:45:b1:fc:76:c9:86:90:de:
         03:09:0f:c8:3e:de:03:de:df:4a:1f:ff:a7:80:ee:ad:90:6f:
         30:18:b0:6a:94:d8:fb:b5:46:0f:a5:80:0f:99:f8:ab:3a:f8:
         10:3e:01:1f:f6:0e:a0:82:ad:ff:af:eb:83:95:69:8b:db:7b:
         f5:53:59:db:4c:1d:9e:72:3d:e6:ce:60:40:10:ff:fe:a5:5e:
         ee:ca:69:ab:9d:a0:23:89:ac:08:15:26:b5:c2:84:88:0e:a1:
         c6:14:9e:83:6e:30:1b:aa:36:48:ee:d2:e1:99:b7:e4:18:de:
         38:e6:c2:13:53:77:d9:86:ad:62:35:cc:34:b8:6b:c2:3a:60:
         23:02:61:98:cf:0b:fe:7f:7e:7c:25:29:33:e4:0b:49:f5:a4:
         f9:80:30:99:2a:40:03:8c:74:9d:a3:42:a9:b2:d8:e9:8a:5e:
         01:61:b8:e6:9f:a7:e1:87:84:e3:ac:b4:74:77:77:b6:e5:0c:
         d8:95:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----