Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File:                     hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier:          VWbtTdu2YAKaxcWNa6++L7wBf3NMLkIu3YyduXNVCRM=
Subject key identifier:   95:41:77:56:78:36:DF:05:45:7B:CA:D8:4E:95:E8:4C:DC:98:CE:9A
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer:       /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial:       01962F3DD36E3160601E67D5A8DB4625502E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: 90VjmjjVx5TKCqjWpFbnX1t/hXyg7Fvvn0GNRUHf044=)
                          2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d3:6e:31:60:60:1e:67:d5:a8:db:46:25:50:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=954177567836df05457bcad84e95e84cdc98ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:29:56:cc:e9:34:1b:f1:fe:37:89:91:69:
                    72:f1:d1:1f:7e:33:7a:2d:3d:48:89:50:87:0b:5b:
                    57:cd:4c:3a:e0:cd:f2:45:b3:56:81:34:22:10:87:
                    da:38:15:bf:3c:6b:12:3b:ed:ed:0c:bf:06:a5:d7:
                    b8:51:4a:a0:0e:fc:0f:76:36:1f:6c:f7:b4:44:48:
                    e8:36:e8:ea:4e:c0:83:61:31:d1:ed:f9:78:c9:b2:
                    90:7f:bb:91:d5:db:a7:32:ae:be:cf:46:d8:de:3e:
                    83:79:9a:94:17:10:6a:6a:24:28:b4:cb:cc:ed:af:
                    be:a4:a4:aa:5b:cc:d8:a1:0b:f0:0d:83:80:0a:e3:
                    9a:c9:3d:1b:36:93:9f:22:c4:70:07:c3:f7:ca:ce:
                    43:d9:73:88:89:92:73:a8:c0:70:2a:2c:47:40:e9:
                    3d:19:61:6c:e8:52:de:f5:ba:48:96:db:15:b6:16:
                    99:25:14:4b:c9:a0:d6:1a:a1:f7:91:f3:23:73:2e:
                    b6:c0:88:81:0f:4b:b0:df:ab:58:da:e7:73:65:80:
                    0b:ad:e2:a6:09:06:e6:74:70:ce:f1:95:a5:a9:6b:
                    a5:81:7c:74:7a:67:5e:b4:3a:36:e2:d5:30:61:e6:
                    75:32:2d:d2:68:4e:32:a6:ea:c2:54:9e:67:c2:e0:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:41:77:56:78:36:DF:05:45:7B:CA:D8:4E:95:E8:4C:DC:98:CE:9A
            X509v3 Authority Key Identifier:
                keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:23:8e:32:ef:cd:3e:2c:88:3f:6b:28:f4:df:68:bc:30:f8:
         84:05:d6:21:e4:1a:75:92:81:18:1b:26:9e:15:c2:58:97:c8:
         76:3f:59:4d:e6:bb:df:04:ea:61:b5:41:ac:f3:f6:56:54:d9:
         d7:4a:b7:6b:45:b9:56:aa:52:dc:04:61:0e:fb:39:4e:de:d8:
         55:2c:a9:08:7c:1f:ba:4d:11:42:0b:ed:0b:a7:8b:5a:fb:0c:
         f5:14:21:4b:88:66:17:a5:8e:87:bc:2a:bb:5f:df:79:cf:43:
         0f:9c:1f:a5:4b:e1:96:17:25:3f:d8:e8:a1:96:f2:dd:53:dc:
         2d:8d:05:47:f2:1b:a2:02:78:ee:13:20:07:1e:ec:db:b0:55:
         a0:09:22:98:a7:60:86:e2:ef:be:1b:70:e4:f0:e7:b7:fa:3f:
         dc:06:81:70:c9:33:e5:65:41:ac:ac:d2:fe:64:d4:37:5f:07:
         9a:56:d9:52:58:fb:81:e0:59:a3:e5:76:43:58:85:d5:8d:91:
         5d:0b:8d:ab:7f:de:a0:16:cd:38:33:2c:22:02:10:58:63:b3:
         af:fa:3e:db:cd:93:23:a0:d5:f6:0a:0e:77:a4:c9:23:59:c9:
         a7:d1:0e:0d:3f:30:2c:8d:5f:57:fe:56:3f:a2:e9:c8:df:9f:
         b4:14:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----