Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File:                     lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier:          Rn31DAHnzv3NSFzRaOwWPknRF9rlLX5k10lyZf5itJI=
Subject key identifier:   35:3B:4C:14:94:72:27:4B:02:1F:3D:50:3A:BF:1D:32:90:BC:B5:71
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer:       /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial:       01962E993EF409301D1DFCC3C309D94B940B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number:          0AC5
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: 8eAv8sSKqCobRHi1pPcWZI3QV5o.roa (hash: me5Ypddt6zuTrOyc9m6TejNlArKlNxDqSv65dSh/DKk=)
                          2: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
                          3: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
                          4: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: UfnYScsCPGxdexlNTYh0lkMYcqqrAY9e8MDmWUAqnak=)
                          5: n2_eVP33y04IubuQqwNJXDAbIlk.roa (hash: HFY2y68gkBIKxp7LauCrgUgasru4O6u6ooJHkj70swU=)
                          6: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3e:f4:09:30:1d:1d:fc:c3:c3:09:d9:4b:94:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=353b4c149472274b021f3d503abf1d3290bcb571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:30:8e:5b:70:da:71:e3:aa:ab:e3:3c:01:
                    79:f9:a8:e1:15:6a:9d:0c:c8:58:76:90:5e:f9:54:
                    3c:e2:4b:ab:be:ba:85:38:39:55:31:63:b6:47:d2:
                    4d:30:15:05:ab:f5:e1:50:15:0f:42:ca:df:64:71:
                    1a:31:2a:cf:a2:54:be:03:09:6d:cd:db:be:2c:66:
                    04:cd:eb:79:67:ad:b3:40:58:bb:0b:aa:4c:35:ea:
                    53:0b:a2:f4:d0:b9:05:0d:1d:b3:0f:aa:f2:a4:bc:
                    16:0a:df:37:5e:b9:e6:44:10:b0:15:0b:03:76:01:
                    d8:db:d3:81:08:e4:d2:be:f9:bd:08:e2:cc:80:f8:
                    2f:27:58:21:b1:12:00:8b:a2:2c:cf:fc:15:16:80:
                    7d:da:83:a1:8a:dd:40:b5:8f:d3:80:88:26:74:30:
                    9e:dc:e9:8b:08:4e:49:05:38:cc:a6:f8:fa:67:97:
                    f9:e0:00:18:33:c6:21:80:c7:b8:fc:51:16:1d:e5:
                    76:9a:ba:48:b5:07:b3:01:69:ba:e2:a6:78:88:f3:
                    ba:1a:89:c5:34:5d:15:f8:26:a4:4e:3a:88:01:d8:
                    51:5c:31:d0:79:ac:c8:3e:3d:c9:0f:c2:72:02:e3:
                    15:61:15:48:ef:ab:8f:1e:c1:68:73:bf:fa:fe:c2:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:4C:14:94:72:27:4B:02:1F:3D:50:3A:BF:1D:32:90:BC:B5:71
            X509v3 Authority Key Identifier:
                keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ac:c6:64:07:42:73:45:3a:e5:23:96:19:1c:2a:b1:2f:64:
         9a:91:72:7c:55:58:c2:80:9e:2c:7d:a2:08:91:ab:f6:45:ba:
         fe:28:35:13:ef:bd:9a:dd:ed:ff:1c:e8:44:a4:0b:d6:c2:c3:
         8a:91:fa:b8:ba:93:e9:88:08:fd:6c:1b:43:6a:88:41:f4:70:
         cf:7a:16:39:91:da:2d:81:75:ec:52:45:25:b5:d8:ea:54:1e:
         ff:22:26:55:25:29:23:15:2e:ac:03:fd:bb:29:24:46:47:5d:
         b7:4e:2b:b5:cb:ed:60:62:e5:6c:ac:f1:97:d0:8e:82:ee:58:
         fc:14:7d:ad:f5:22:9a:6f:1e:5d:9e:4c:c6:95:03:46:fc:46:
         53:e6:47:2d:59:2e:91:fd:e7:f8:39:70:29:36:e9:67:6a:6e:
         66:4f:5f:7a:24:1e:02:55:dd:e9:6e:af:83:4d:51:e3:ab:69:
         eb:c2:52:6c:9c:45:a7:4f:1c:e5:3c:80:47:04:d2:c9:5a:88:
         0b:1e:08:b7:01:d7:2c:e2:b2:ee:5f:96:44:e5:3a:71:e9:34:
         4e:a0:40:d3:7e:bd:35:11:d7:c0:f8:3c:da:79:1a:79:67:4b:
         30:e6:5b:d8:6e:56:d1:39:35:3f:b8:ea:45:fa:a0:bb:93:ee:
         02:72:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----