Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File:                     itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier:          r1X9Ytxt0Nm6/9rRKz/NREN6qpehNRDVbfH2sg3X7b4=
Subject key identifier:   C4:BF:8E:30:C0:01:A2:DE:DD:A8:7D:A8:07:B4:53:CE:8D:83:0A:07
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer:       /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial:       01962ECF7F29BB7B4C8D75D887D361BEB27C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number:          0A81
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 5iBJUq8VAL04KnbBhQrQd7qQTS0.roa (hash: kbpdNID67b9fdj5cjTLYSKL590X3o44jLTH12Cud5xM=)
                          2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: ajCxYWlexDUyhzaZeTe0ud9PWZSKzvOA5/QoKUIbZg8=)
                          3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:29:bb:7b:4c:8d:75:d8:87:d3:61:be:b2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=c4bf8e30c001a2dedda87da807b453ce8d830a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:19:ab:a4:36:82:88:21:26:50:d4:e6:3f:
                    05:fd:e8:49:8d:40:ca:ce:21:ed:7a:69:78:4e:a1:
                    7c:3f:38:3a:7f:82:ed:cb:51:9a:37:ef:5e:0c:c7:
                    a8:75:49:5d:72:67:04:0f:2e:77:f8:70:60:3f:1c:
                    5a:a0:8a:3f:0a:3d:dc:4d:42:2a:72:01:c4:2d:1c:
                    a0:fb:f3:1e:d6:f6:f7:aa:21:3f:3d:51:57:0c:a7:
                    d6:97:a7:49:10:61:75:b8:36:75:bb:e8:ca:99:ee:
                    d7:d4:ac:de:40:e7:6b:73:16:32:3a:ae:33:bd:21:
                    ea:df:7b:dd:14:6d:57:14:58:a5:4e:34:bc:4d:51:
                    77:8e:7c:07:e0:d4:ee:0a:59:bb:9c:6d:c3:9a:f1:
                    46:10:ad:45:40:95:68:a8:bb:22:cb:66:fd:cf:19:
                    b1:ea:ab:88:53:ec:b2:59:27:e7:90:56:1c:01:48:
                    eb:4b:4b:6d:1b:6b:e6:f1:34:c7:80:35:36:f7:5f:
                    5b:80:88:44:60:0b:3b:57:bb:f5:49:b0:49:0c:88:
                    16:74:2c:6e:6d:0c:a3:09:75:63:78:25:e9:9a:db:
                    e7:65:98:16:9c:94:c2:f0:93:21:83:be:ae:bd:e5:
                    11:ed:86:b9:e1:84:e4:e0:d5:0f:85:14:1b:f1:8d:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:8E:30:C0:01:A2:DE:DD:A8:7D:A8:07:B4:53:CE:8D:83:0A:07
            X509v3 Authority Key Identifier:
                keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:36:d8:72:78:92:95:b8:a4:47:d1:27:d7:0e:d3:15:24:e1:
         b4:9b:05:9f:6e:60:44:81:97:cd:1c:70:bc:21:57:66:d9:ed:
         ad:18:bd:53:b0:5b:02:bc:65:8f:d2:0b:2f:64:d3:f8:02:72:
         24:48:e9:3c:c0:a7:21:c2:42:d5:d2:92:f0:7f:9e:0f:65:3e:
         b0:0b:bf:4e:55:b7:ce:bb:bb:82:51:44:d2:14:3f:5c:0e:d2:
         33:ef:c0:a6:58:cd:07:79:7e:78:e6:7d:f9:2d:05:c9:ea:e2:
         0d:95:5a:e0:25:8c:53:db:cf:bf:39:f0:8d:2c:4a:36:74:8b:
         e5:d6:eb:82:41:6f:5d:93:f7:fa:3e:bf:73:72:d2:1b:8e:c1:
         2d:0e:63:31:68:1e:0c:dd:20:c2:14:a5:06:7b:f8:00:34:9b:
         a4:92:ab:c1:51:e4:6b:41:4f:20:28:73:72:66:26:7f:0d:a7:
         8c:4e:57:36:fd:4e:52:b1:67:3c:11:12:e4:f7:82:c4:45:13:
         53:17:45:9c:c0:64:24:fd:87:f2:02:0a:c4:ea:3b:4c:33:65:
         5f:79:00:7d:36:68:8e:21:0c:5b:59:d7:c6:28:ea:d3:30:9f:
         ed:2a:fc:ec:51:86:2f:c8:33:4c:f9:96:a3:d0:38:a2:2f:23:
         38:4d:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----