Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File:                     E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier:          sytlJpShiOqOhKaRW3A2oxXVZlR+eCr3KCy5QHcyO50=
Subject key identifier:   09:27:2D:D6:E7:1D:E6:B4:FF:43:E8:5F:68:5A:F7:3E:99:AF:DD:2C
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer:       /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial:       01962E618B63B1E043F92CC4145D63F732E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number:          025B
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: oq7/RY3vOCpSeBCuqlANQ/jY6K7OmHBfSck8PNb7bG4=)
                          2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:63:b1:e0:43:f9:2c:c4:14:5d:63:f7:32:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=09272dd6e71de6b4ff43e85f685af73e99afdd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:e5:c7:c0:0e:e9:fd:09:0c:12:80:9a:d1:
                    e0:12:0b:e0:a9:f1:1f:5d:96:cd:42:bd:2b:f4:ce:
                    0d:36:ec:52:e6:a8:e1:8c:0d:14:6e:4b:05:8b:50:
                    cb:b1:76:79:90:f1:51:a8:4a:82:d1:0a:a1:a3:d4:
                    a8:40:e6:3a:29:a3:8b:dc:54:f7:9f:3a:6a:de:77:
                    c1:20:54:c3:d6:07:72:a5:91:49:6d:d0:ed:48:e6:
                    05:cb:69:84:7b:26:aa:cd:dc:0d:98:d8:55:20:e5:
                    7f:7f:23:5c:5e:96:34:4c:0d:d2:1e:6a:77:ed:16:
                    2b:f9:2d:39:9b:5a:10:6a:0d:17:4e:71:0a:06:46:
                    e5:08:d6:71:35:cd:f2:aa:71:f9:b6:1d:88:9b:4b:
                    ec:87:a9:8b:d2:fe:2e:28:25:bc:88:04:7e:32:f9:
                    aa:29:9a:0c:94:e3:0d:78:85:ec:43:ab:32:7e:a4:
                    1b:6c:2d:9e:0b:e7:99:a2:e2:93:1f:da:c7:a4:90:
                    c2:ee:46:2c:1b:a9:55:c9:d6:44:d5:ab:1e:db:65:
                    ce:54:0e:23:3b:4e:3f:51:dc:d8:c7:b0:64:f2:52:
                    6d:91:54:78:de:61:74:ae:44:04:b5:6e:ba:3e:5f:
                    26:53:64:b7:49:6b:43:d2:ce:f4:eb:d9:00:2e:bd:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:2D:D6:E7:1D:E6:B4:FF:43:E8:5F:68:5A:F7:3E:99:AF:DD:2C
            X509v3 Authority Key Identifier:
                keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:9a:21:9e:72:59:27:93:ca:a4:83:fe:79:e5:66:72:71:
         8a:d5:e9:63:7b:35:3e:9a:cf:0b:33:a1:f9:2c:dd:77:7c:9b:
         f6:9c:06:7f:4b:a9:c4:64:54:80:9c:1e:b5:e1:f6:81:b0:fa:
         5b:55:51:1c:36:05:9b:8c:a3:c9:4b:ef:3a:e5:b4:60:2b:93:
         ab:92:19:41:c3:ff:98:5b:3b:c5:d0:77:15:34:93:5e:7e:20:
         f1:92:f0:dc:ef:90:cc:c3:c1:8b:8e:c3:cd:bd:8c:94:8e:65:
         5d:d9:08:be:bb:46:a3:fc:2c:49:91:06:08:3b:53:fb:ca:0b:
         97:01:8d:34:37:7a:38:e4:c2:02:77:e0:a7:b1:99:29:c7:25:
         e2:68:a8:c5:64:7f:77:55:2e:0a:58:12:44:b0:8f:a1:62:7e:
         cb:d5:18:1b:3c:58:56:a6:05:e6:62:cb:f0:bd:f8:bf:63:1a:
         db:15:e9:6c:67:f4:71:34:a8:a9:37:55:83:9a:f8:4d:af:9b:
         58:2a:54:01:27:6d:75:38:a3:0d:61:e6:89:e6:1b:d9:be:2b:
         e8:ba:22:30:aa:f3:62:6e:28:5e:da:06:cd:e6:f6:bd:cc:21:
         ad:e7:c5:bc:1d:7b:04:cf:be:40:25:07:f9:55:bc:c7:d9:8f:
         6b:46:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----