Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File:                     lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier:          O9E1Hv6Oq3RqU/chByY+wehB0ZeLIdYq7zWws7axi4A=
Subject key identifier:   FA:E7:CA:D6:FD:FE:1B:74:E8:AD:CC:DE:0E:06:86:97:D9:09:8B:00
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer:       /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial:       01962E986E4E9177D503D526A28ECDFA85A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number:          0B76
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa (hash: ddm9bvtQw1cVvC7zNZuu5Y38UnapRIQ8ZhO6Ib5Ks0o=)
                          2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: oYOSTC97HNHFxIhQXVgFV3RkV04QGY/z/AcosjNn/7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6e:4e:91:77:d5:03:d5:26:a2:8e:cd:fa:85:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=fae7cad6fdfe1b74e8adccde0e068697d9098b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:08:5a:43:42:1d:25:6c:9f:0b:9e:14:f3:
                    5e:78:1c:b9:d0:3b:fc:a4:b7:a8:41:8a:40:0f:4b:
                    0f:f9:47:b6:f6:1f:ff:b3:73:e9:fe:f7:bf:74:7d:
                    21:00:8a:39:c9:83:08:81:dd:8b:2d:64:4b:0f:19:
                    49:43:18:26:26:da:17:6b:24:e0:ef:8b:95:09:5e:
                    5f:da:f4:ee:a2:0b:3e:34:66:dc:4e:d0:c9:2b:69:
                    5d:96:ae:03:a6:08:37:41:d5:bb:0d:46:9b:5d:e7:
                    66:68:6f:cf:a2:ec:09:0e:4f:ef:52:dc:93:4e:ec:
                    15:9a:11:33:19:49:31:35:aa:c5:93:ea:c7:4e:c5:
                    c5:50:73:65:fe:ac:a3:71:0e:e9:47:ed:8f:2b:8c:
                    94:c9:ed:76:2a:dc:29:8c:49:40:5b:d9:d6:54:94:
                    f6:9f:88:41:e1:17:09:96:37:77:72:ba:af:30:d7:
                    27:f8:d6:da:05:2e:97:f0:49:1d:01:96:a9:2f:a1:
                    c2:3a:7d:69:51:e7:05:c1:cc:ec:58:16:ab:98:f1:
                    90:7a:17:b7:5a:b8:71:a1:5a:38:eb:49:72:64:27:
                    de:5f:de:20:93:a2:fa:c9:76:4b:e7:09:4e:e8:1f:
                    13:57:80:cf:eb:ed:6f:2b:8a:b2:19:63:db:4a:0c:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E7:CA:D6:FD:FE:1B:74:E8:AD:CC:DE:0E:06:86:97:D9:09:8B:00
            X509v3 Authority Key Identifier:
                keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:8c:f2:a9:64:75:08:e0:52:40:48:30:91:97:6f:42:8f:
         cf:23:65:85:d7:51:93:a8:af:ae:20:58:8b:07:30:76:64:75:
         f7:42:67:fb:de:8a:30:49:63:ed:fc:4f:bb:37:df:7b:8c:e6:
         64:dd:d4:45:ad:14:74:2e:81:7a:76:9d:35:2f:90:8f:ce:6d:
         d3:44:55:03:fb:43:19:00:ce:a8:5c:ac:a6:dc:01:7c:2a:31:
         26:4c:65:e1:5e:81:0c:53:df:ed:43:98:95:c6:2c:65:cd:22:
         15:ab:98:a1:46:4c:06:ca:d1:75:ef:05:4b:65:90:89:20:3f:
         47:17:7c:98:d0:bb:67:06:16:be:2e:09:e3:4f:65:2c:5e:28:
         b0:97:60:2c:96:c0:1a:a9:87:ad:2f:da:ae:95:8c:06:4f:93:
         96:74:a7:0a:fb:5b:69:de:e0:bf:56:e4:7c:36:ce:2a:cd:ff:
         c2:a5:67:97:7d:d1:ca:0c:c4:c7:7b:00:56:48:17:ff:b3:92:
         5a:ec:cd:7e:69:41:14:37:29:c1:e0:f1:ed:90:d0:44:53:f6:
         0c:fd:61:8c:13:f9:08:3a:c7:52:22:83:0e:30:92:04:1f:4c:
         9d:a2:f0:57:9b:99:ce:eb:d9:43:a4:62:4a:2f:75:76:0d:7e:
         b4:4e:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----