Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File:                     CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier:          n7Ilo9U06uRUtQFYfpLORC/sOSsqXyLsX1+e91PAfc8=
Subject key identifier:   B4:DA:64:35:6F:EE:35:59:27:DF:AE:21:36:CE:B8:52:48:36:E6:A1
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer:       /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial:       01962F072499B2F36F523FEEDA4E37A017AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number:          1185
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=)
                          2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: bQUkEKkHzKCSwzugjaajIPS8gcq9z1w02dTCCT0dkic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:24:99:b2:f3:6f:52:3f:ee:da:4e:37:a0:17:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=b4da64356fee355927dfae2136ceb8524836e6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:07:7a:3b:49:73:3c:ee:41:1b:83:4d:0f:
                    01:05:35:f9:69:c2:f3:22:0e:0d:b1:0f:1c:c9:9e:
                    98:55:1d:53:96:60:ba:1e:7b:6c:da:53:f3:a3:e4:
                    06:eb:76:14:91:1c:f9:b2:33:81:5e:56:f6:c6:e3:
                    83:10:26:9b:cb:56:f7:0e:d0:ba:3b:ea:18:5c:4c:
                    4a:13:20:b3:8b:29:65:bb:38:ca:c0:fb:7a:3e:93:
                    23:f1:00:47:1c:cf:e9:10:c2:e6:a3:e2:32:f1:ed:
                    6b:d5:76:66:e9:b6:d4:20:f7:68:c3:e8:86:09:39:
                    87:25:99:d2:ad:16:99:57:b6:d6:0d:79:72:76:be:
                    33:52:ef:a7:75:b0:ae:66:53:87:60:86:4b:d4:62:
                    6e:a4:77:c0:94:21:6a:70:30:b6:bd:e3:d8:f8:e0:
                    51:47:f5:43:3e:ca:c4:d6:00:e3:ef:55:d0:b5:b7:
                    e0:d5:96:48:ca:30:8a:62:7b:e8:35:14:9f:b9:70:
                    6b:c9:56:37:01:2b:09:c4:93:6b:9a:00:6d:b3:ba:
                    22:ac:d2:f5:9f:a1:a9:cd:6e:c9:8a:d7:02:6a:85:
                    88:3f:4b:16:ec:aa:29:b3:d3:05:3e:e2:55:99:e4:
                    a6:21:a3:57:3c:2a:68:58:87:06:2b:6c:e0:cd:d9:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:64:35:6F:EE:35:59:27:DF:AE:21:36:CE:B8:52:48:36:E6:A1
            X509v3 Authority Key Identifier:
                keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:04:09:c1:cb:ed:1f:d5:d5:c2:17:56:70:22:d7:0d:b2:f4:
         6a:f3:af:7f:60:26:6a:7f:45:dd:97:48:5b:76:d9:6b:42:47:
         96:16:b8:c1:91:81:d6:52:57:e0:c8:06:08:80:4e:da:04:ee:
         89:ee:af:31:a8:32:3d:3a:16:5d:8d:a4:c9:df:b9:54:e7:bf:
         9b:d7:a6:c9:e6:b5:dc:7b:d3:a5:58:74:cb:aa:95:aa:1c:cf:
         ef:81:45:95:10:6c:60:5b:1b:f1:7e:78:f0:43:16:2e:e2:b4:
         a5:5c:86:c9:62:db:17:d4:8f:4e:58:63:fc:66:9b:a8:91:22:
         0a:9b:ba:fc:f2:da:25:bb:d6:56:44:ba:c0:e0:c1:de:dd:80:
         3b:45:1e:ef:77:53:96:b6:4c:b9:84:5d:2b:79:d9:e0:94:e6:
         24:41:d1:b4:85:d1:a8:a0:93:fa:c0:01:37:78:b2:70:9d:6d:
         74:21:9e:86:86:49:48:ba:a6:5b:43:5a:9a:33:e8:7a:cc:10:
         53:9a:af:0c:03:57:2d:fe:35:2e:2d:7b:f8:9d:cf:3a:c9:b5:
         d6:8b:82:06:b7:b2:bc:3f:d2:1b:84:d8:66:be:b2:1f:ab:87:
         ec:53:af:1f:81:47:30:f4:69:6d:1e:8f:90:af:30:a5:8a:07:
         12:53:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----