Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
File:                     2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft (raw, json)
Hash identifier:          gUau3QionxvJrKtwfg8IR5Xa4JCEVgffsZl94KcrQ80=
Subject key identifier:   9B:5F:5B:64:34:6E:E8:CB:A5:F5:87:40:56:A1:0B:17:64:36:18:75
Authority key identifier: DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
Certificate issuer:       /CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Certificate serial:       01962DF3985ED00D1555BCDC8A7A690CA665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
Manifest number:          0C79
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl (hash: LgsS2Vu7oV0YRpHegBBHmVeraWUxw1FYVZhKJ9Xem7g=)
                          2: nEst59VNXuZ4VJfEimqfkDoIWMw.roa (hash: MVYyTOwc+4oCrDyXY6sI17JYzQycO6fjKklmhjG1KnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:98:5e:d0:0d:15:55:bc:dc:8a:7a:69:0c:a6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=9b5f5b64346ee8cba5f5874056a10b1764361875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:d0:17:88:f3:6e:7f:b5:8a:73:bd:a2:d3:
                    75:c0:f8:ed:db:1c:28:c7:dd:dd:20:69:52:1d:bc:
                    3f:c5:52:0b:8c:15:ee:30:28:f1:9d:68:f1:ec:c2:
                    19:95:67:a4:bc:a3:1b:a6:2c:dd:ae:cd:d6:5a:31:
                    c6:25:b2:9d:a6:94:55:3d:a0:f6:28:7f:35:e1:e2:
                    d2:6d:59:dd:fb:08:4f:c3:8b:74:3b:66:9d:c8:96:
                    0c:3f:46:88:c9:c0:0a:38:ca:7a:2f:01:db:1a:55:
                    07:02:cc:3d:60:e3:12:b7:04:9b:82:bd:42:d9:fc:
                    73:67:1f:61:c1:50:d8:e8:4d:79:16:f2:1a:72:fc:
                    ec:85:61:04:64:2b:7f:d0:e5:88:65:5d:63:ae:e1:
                    08:1f:11:1f:59:14:10:a6:44:55:11:b5:40:00:5d:
                    eb:f8:a9:7a:fc:c2:de:54:46:7d:5b:54:b7:d5:21:
                    eb:e7:00:24:fb:73:60:a7:f6:66:fb:cb:d2:38:78:
                    94:53:7f:e7:27:da:b2:36:aa:85:c9:36:59:60:7a:
                    49:d8:62:a5:3e:3e:ef:71:24:3a:db:b1:00:48:a4:
                    db:cf:43:d0:ac:c7:33:db:97:97:e3:0d:70:60:2f:
                    5f:e9:80:b1:af:8a:a3:b3:8e:4d:6d:8a:54:a4:1f:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5F:5B:64:34:6E:E8:CB:A5:F5:87:40:56:A1:0B:17:64:36:18:75
            X509v3 Authority Key Identifier:
                keyid:DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:a2:d9:f2:f0:16:0b:19:e3:da:7b:b6:76:0e:14:23:5e:
         c5:b3:67:00:c8:36:bf:86:bb:4d:9d:70:81:95:7c:26:b5:6c:
         9a:a0:a6:7c:77:68:1b:26:96:16:eb:19:8c:7b:ab:5d:2e:15:
         98:4b:79:7d:18:7b:25:3e:e4:87:fe:e6:02:eb:d3:46:90:23:
         f4:56:2a:95:eb:ca:f3:2f:f2:05:0f:1f:d7:79:5b:b3:3a:26:
         59:78:c2:47:7f:a8:ee:cd:a9:85:5c:73:0a:82:cb:21:b1:b4:
         62:75:6e:c6:4d:5d:6b:ac:b5:06:54:d1:9e:03:0c:5b:e0:6f:
         40:e5:3f:32:85:26:cf:ae:c6:b1:52:08:88:54:73:c6:7f:0f:
         01:e9:da:ed:90:ab:0d:ea:39:1a:e7:4d:cf:fe:84:40:63:f2:
         9b:88:f5:e5:7f:58:7b:8a:85:e2:89:58:f6:2e:91:f5:97:62:
         19:7a:e8:21:af:3a:58:40:e8:35:a0:76:77:ab:ea:ee:12:ba:
         7d:2f:59:8e:b6:19:92:74:51:37:fb:82:af:95:05:a3:f8:a6:
         fa:42:1d:f9:b5:dd:03:52:37:14:3b:f5:e0:3b:09:4c:29:03:
         6b:ae:93:e3:d9:11:d1:04:14:75:5b:41:86:d0:55:7c:b9:2d:
         3a:43:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----