Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File:                     hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier:          GKY/lPc+Zgg3KudA7rYyzyW2jCdOLQyd+8zD1AuAsZU=
Subject key identifier:   2A:7E:14:C8:A9:7B:C7:6D:F7:E8:23:7B:D0:1F:15:35:FB:93:60:1A
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer:       /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial:       01962E99A8BE4B8D70BEA6277D498DC0DBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number:          092C
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
                          2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: xnXSJugflVpwGGnn4/HmSJLBo3VdvyRdfTHAEmELCDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:be:4b:8d:70:be:a6:27:7d:49:8d:c0:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84827de36da383801ec42a8043c787253776037e
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=2a7e14c8a97bc76df7e8237bd01f1535fb93601a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:aa:15:39:b9:53:5f:eb:72:e8:62:16:06:
                    79:70:f9:54:dd:33:aa:a8:76:ac:78:8f:8b:18:7c:
                    7f:86:ea:27:7d:3c:34:35:d0:7c:4c:5f:16:e8:2b:
                    00:44:ed:90:1a:3c:dd:d3:40:c5:96:a1:99:29:48:
                    ba:29:9d:21:72:d6:df:b8:8c:71:cd:59:68:4f:52:
                    28:8f:0e:c5:3f:3c:16:6a:c8:b3:97:87:1b:19:81:
                    83:5c:3a:75:81:40:fc:dc:9d:de:98:6d:a1:ce:62:
                    98:a9:77:72:02:b2:7e:81:e6:e6:8a:6e:6c:d7:f0:
                    10:5c:a7:d2:70:ff:3c:67:3c:db:9a:73:ab:ec:49:
                    e8:34:d9:d2:67:6f:47:be:28:02:97:e5:3c:83:ef:
                    64:82:05:02:bc:a5:ae:61:31:97:61:df:82:08:33:
                    c0:d0:67:53:3f:6e:be:46:b6:67:0c:e7:0b:e4:6b:
                    34:b6:2c:b5:2e:a9:2c:70:51:af:97:c0:f7:c0:46:
                    72:75:ad:6e:48:1c:bc:0d:fa:56:34:8f:0e:d4:a0:
                    3b:bb:d0:c1:e9:ba:a0:c0:1b:19:87:ae:ea:5d:b7:
                    34:97:84:79:c7:7d:8f:44:63:66:99:ef:16:b9:6f:
                    40:77:a0:4b:e8:75:a2:f4:78:ba:fd:6e:0e:b9:77:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:14:C8:A9:7B:C7:6D:F7:E8:23:7B:D0:1F:15:35:FB:93:60:1A
            X509v3 Authority Key Identifier:
                keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d7:20:39:28:a8:ca:5a:2d:2b:5f:74:f6:17:83:1f:62:3c:
         f8:65:fc:21:82:2e:1a:dd:6c:03:81:93:e3:37:53:41:10:ae:
         ec:a2:75:f6:0f:6c:4a:6a:55:32:2e:e5:15:21:1a:92:24:f2:
         c1:02:e0:af:75:4d:a6:bc:a1:e6:5f:05:77:c2:b5:22:39:5d:
         df:f2:ba:92:b8:31:28:84:7d:b4:54:53:ab:60:03:a6:45:40:
         35:9f:43:87:7b:d8:58:43:3a:39:0a:1c:5e:5d:59:60:10:be:
         aa:41:4c:e3:8f:d1:b4:ca:ed:c9:3f:1c:81:94:75:df:fd:1d:
         98:3e:83:c1:ec:79:60:26:ad:57:da:17:17:0f:35:a0:08:b9:
         5c:28:98:57:15:98:cb:f4:43:b6:03:03:1a:ca:f8:75:ef:42:
         bb:0d:b6:7a:37:37:84:e0:60:61:84:f6:4c:b3:6e:c6:b0:d5:
         a7:aa:a3:65:9e:a7:4a:27:82:5e:73:ed:16:fd:af:10:79:4b:
         63:c5:5b:56:1c:1f:87:de:e0:c0:19:d9:ad:49:73:4d:96:a1:
         0b:a4:32:57:b2:9b:eb:c1:8a:02:d0:b8:58:2f:28:dc:4b:9e:
         ed:7d:2d:85:b7:02:90:c9:3d:98:15:25:86:c0:d0:60:ec:7d:
         83:b7:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----