Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File:                     lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier:          I8QTT9mQNzsiffl0GOGLmvMvAerkDUd5YvHszwiPYYk=
Subject key identifier:   10:46:F7:1E:DC:C8:3B:61:6D:FC:44:BE:69:8E:87:B8:D2:D7:83:DC
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer:       /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial:       01962E61EC4AEFCADC0104EC4A514E5EEC52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number:          128C
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 3rgYqGqnZPklgITV-WBujJljFBU.roa (hash: Tp2azEsxKTsu2hz5GpPNvovvsk7VOiHcGA1gooaCoRs=)
                          2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: 9THeF6jLiniYwqDQ6ieh04RUfH5wEr+y6K8r2jGhr/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:4a:ef:ca:dc:01:04:ec:4a:51:4e:5e:ec:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=1046f71edcc83b616dfc44be698e87b8d2d783dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:65:c4:83:b5:b0:d5:e7:d2:b6:6b:35:c6:
                    3a:cd:e8:b9:ea:d6:60:0d:65:1b:9f:c1:ac:67:96:
                    c9:d4:04:8c:7f:39:e3:c0:83:3d:fa:8d:2b:4f:81:
                    43:36:b3:51:79:45:34:77:8a:ed:97:84:a4:60:f1:
                    d7:fe:89:07:96:9e:d3:05:70:c9:8e:30:f5:d0:8c:
                    c1:da:9e:db:08:82:15:be:cd:8f:b9:7d:ec:31:66:
                    56:a5:60:20:77:f9:d1:47:58:67:e1:c5:42:1e:0e:
                    64:8c:f3:b1:cd:e0:23:d4:8f:86:bc:3d:ac:74:64:
                    e5:9d:a0:27:43:9c:02:0f:14:71:7d:80:4a:d4:54:
                    4a:82:4e:15:34:d3:c0:a4:d9:7d:99:5f:db:b9:12:
                    fe:6d:fc:b1:20:70:cd:5f:3c:5e:e4:3a:1b:22:f7:
                    23:ae:c0:be:db:a5:73:17:3c:f9:b1:ff:9f:5a:75:
                    7e:18:21:99:4b:55:97:fb:f0:94:e4:da:b6:b7:58:
                    e1:8a:44:b7:7d:d5:60:ea:58:f1:24:c9:65:a8:36:
                    55:a9:89:e4:32:51:e1:c2:19:55:16:1f:c2:6b:72:
                    29:b4:bb:1c:5f:ca:a6:85:96:dc:6e:dd:2b:96:9b:
                    e6:ea:ad:17:9d:1f:df:c4:c1:ea:95:97:29:c6:1d:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:46:F7:1E:DC:C8:3B:61:6D:FC:44:BE:69:8E:87:B8:D2:D7:83:DC
            X509v3 Authority Key Identifier:
                keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a9:b4:8d:5f:0d:1f:c0:b8:a5:9a:1b:f2:04:dc:8f:fa:dd:
         a2:d0:ca:61:34:3a:7a:34:50:1e:3c:7c:cd:52:17:cb:f2:db:
         33:10:54:65:b7:84:0d:d3:b9:30:e8:13:70:48:32:9c:02:e9:
         59:cc:a6:8e:34:2c:e1:19:9a:37:f2:61:54:65:db:1a:90:dd:
         92:39:51:fd:41:3c:0a:a9:fb:45:f3:88:b0:ca:39:b0:95:69:
         a6:34:6d:66:78:73:fd:72:87:ce:36:47:16:cc:51:30:25:9b:
         05:39:8a:8c:d5:df:82:48:e2:8f:88:19:f2:c2:8c:13:d5:40:
         04:65:ef:98:7c:d0:0e:c3:b7:75:eb:ca:cd:9d:d9:2c:81:fd:
         31:b3:33:ee:be:f2:83:be:3c:3b:a5:f6:84:fe:ac:f1:c8:57:
         18:8a:b6:f4:c2:53:3a:c6:7a:f3:23:e4:a9:9d:74:9e:b8:a7:
         3a:c7:4b:f3:af:ce:60:47:14:af:1c:ac:55:b2:a3:82:ca:2f:
         b6:f8:d5:2b:34:36:f9:fc:1b:e8:0b:14:f6:15:38:b5:60:29:
         2f:4e:c2:97:a8:9e:bb:de:23:9c:c0:18:ee:ea:43:73:8b:2b:
         c7:50:1c:b5:d9:d4:07:22:94:58:78:be:55:34:d6:9c:31:1a:
         3a:dc:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----