Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
File:                     ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft (raw, json)
Hash identifier:          NZfHZCc/yMTKZKJp9GUk5UqTBSgrz1/prObGEgQSULc=
Subject key identifier:   43:7B:63:9E:B4:47:7B:C6:47:61:D7:43:3E:8B:1F:51:A3:62:39:03
Authority key identifier: 10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
Certificate issuer:       /CN=102bc98d33270952534130afb4de696d8c340215
Certificate serial:       01962F3D53331992E7035E4C10400046DDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
Manifest number:          04DC
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: 1SfNvqGgo1qML8I5aKV28i3iaWs.roa (hash: pMgk3yqfYUxUqHeyCSRb0WlafuNDjwlQN8z3HdRW4rk=)
                          2: ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl (hash: NwSPj5wCdtQs78xwkfHoTqaudj5lbvxtyDQ2dKt5LWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:53:33:19:92:e7:03:5e:4c:10:40:00:46:dd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102bc98d33270952534130afb4de696d8c340215
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=437b639eb4477bc64761d7433e8b1f51a3623903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:ad:d4:4e:a0:85:65:0a:1d:5c:e7:bd:aa:
                    99:10:71:da:a0:e4:9e:75:a0:55:58:67:d3:8d:b7:
                    92:48:ca:df:b4:08:fc:ab:e9:67:15:81:62:f0:97:
                    7e:7a:41:13:94:c2:2c:96:3b:66:90:6e:bc:1f:bb:
                    d4:0d:1c:4d:92:35:44:27:de:eb:95:0b:82:02:75:
                    16:d6:75:0f:29:fd:a8:dc:56:91:fd:71:5a:c9:f9:
                    be:3b:77:90:44:23:58:13:5c:f7:82:f5:30:81:33:
                    c2:9e:30:06:c6:0d:a1:0a:e7:59:5d:f0:c9:d9:8a:
                    44:98:e7:fa:91:22:e4:d7:a5:9c:96:29:d9:3f:8c:
                    fc:5f:c0:df:ed:e4:8a:af:c4:bb:f3:50:b3:14:82:
                    a0:5c:c5:9b:31:20:0f:3e:60:b9:3a:8f:65:54:73:
                    27:03:c5:4f:1b:fc:c5:42:8a:5e:de:a6:ef:d3:94:
                    7c:9d:03:7b:08:4f:15:dc:8d:5a:0b:df:58:a6:a8:
                    61:45:57:20:6e:4f:50:83:c9:81:65:6a:87:2c:75:
                    6b:bd:09:d9:b5:47:a3:13:6e:64:66:5e:c2:a1:1b:
                    ae:9d:5a:bc:a3:d9:1a:ba:2e:b9:58:38:4a:0a:56:
                    ff:c9:4c:cb:44:63:45:34:86:34:20:c0:b4:f6:dc:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7B:63:9E:B4:47:7B:C6:47:61:D7:43:3E:8B:1F:51:A3:62:39:03
            X509v3 Authority Key Identifier:
                keyid:10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:96:bb:f2:5c:de:b2:d0:43:06:47:67:0d:4e:67:e7:f4:
         ae:cf:41:53:76:e4:c1:3a:1c:d6:7e:4d:5f:2a:2e:a6:0e:b7:
         70:a0:ca:ed:ba:0e:81:75:7b:e3:73:34:66:c0:67:74:db:5d:
         ee:6c:2e:72:70:a9:14:36:7c:d7:10:4f:c4:18:5a:41:8a:28:
         49:0d:81:2e:af:a6:d9:0d:ae:5e:59:7d:42:94:d5:1e:11:11:
         f0:6f:12:61:67:35:1d:85:d2:02:e0:e1:8d:0e:fa:9e:17:7e:
         0a:ab:64:bd:a8:0c:48:86:98:9d:53:51:77:7b:3e:a0:88:95:
         2a:47:a5:fd:c2:b1:72:b6:d4:96:b2:fa:eb:ca:f0:34:65:27:
         0d:d5:7f:80:7b:0d:40:6b:20:98:98:bf:6d:9d:52:1d:2b:0d:
         f2:34:91:c3:72:93:d5:3b:ac:41:5b:4d:64:a3:41:db:3a:cc:
         66:9d:3b:1a:d5:5b:62:2a:a8:8f:54:db:8e:d1:43:d0:e8:ba:
         88:32:3f:7c:38:d2:7c:79:91:8a:55:fa:fa:de:6c:b7:99:cc:
         41:ab:37:b5:ee:3e:07:6b:8a:09:fb:77:16:d0:6c:4d:4b:69:
         b7:71:26:92:ed:b9:51:a6:6e:82:79:4d:d0:58:3a:1d:9d:99:
         22:1d:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----