Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File:                     B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier:          q1N7kJk7jdzzUEV8/kwSRx7LWzm8EYWB2awTtf/+8Lo=
Subject key identifier:   59:6C:DB:E3:DE:1A:36:38:E2:08:F3:B6:DE:A8:1F:36:AC:6F:E0:B0
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer:       /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial:       01962F0745442B4777FA5C538577503C41EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number:          0D52
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: /ao0w1NFbCbb7Ul+3DZeclfsf1SRIZyczRnq2iBAuHI=)
                          2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:45:44:2b:47:77:fa:5c:53:85:77:50:3c:41:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=596cdbe3de1a3638e208f3b6dea81f36ac6fe0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:ed:9f:18:c3:c7:60:ae:5f:32:f9:0c:05:
                    cf:8b:6e:32:5c:9a:b3:f7:8f:df:17:01:bd:29:6f:
                    33:21:21:84:7e:5e:42:aa:67:43:f9:19:76:ee:10:
                    61:b8:88:96:c8:d6:c0:cf:ee:45:69:ae:e8:93:1d:
                    25:00:27:82:c0:38:a2:cf:dd:94:ec:3b:6d:c8:50:
                    f3:aa:45:ff:f5:71:2a:66:8a:d2:a6:7f:26:cc:11:
                    e1:c3:93:4b:7b:64:f4:03:51:da:64:1a:7e:d1:88:
                    fb:f6:c9:b0:5a:a3:21:8e:a5:d8:fc:fa:69:9d:32:
                    a1:d0:08:0c:27:99:75:bf:b7:f9:f8:d7:ec:d2:e1:
                    33:f5:01:e8:37:6f:ba:9d:0b:3d:d9:02:2b:66:4d:
                    f2:ac:5c:5a:75:39:11:dc:9a:05:18:12:70:dc:70:
                    b3:56:57:03:46:6d:c7:49:21:f8:e8:4b:55:b1:4d:
                    44:e8:53:f0:04:cc:8a:e8:9c:1b:00:70:85:09:8e:
                    44:30:39:2e:ce:fa:6f:c5:d8:d3:54:53:4b:a0:05:
                    8e:73:ba:58:ce:66:3c:5b:e9:e6:e2:dc:00:0e:86:
                    02:d2:c2:10:b9:26:aa:42:09:36:9a:f5:64:65:fa:
                    a5:2a:c9:c8:3a:ce:a4:86:97:6d:b8:f2:ac:73:57:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6C:DB:E3:DE:1A:36:38:E2:08:F3:B6:DE:A8:1F:36:AC:6F:E0:B0
            X509v3 Authority Key Identifier:
                keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:3a:9e:83:f3:dd:45:68:0a:8a:93:4d:db:6f:93:78:0a:
         bc:f5:8b:1f:95:eb:33:43:7a:22:e4:67:56:c2:0a:b0:5c:f4:
         9b:2e:14:17:72:d3:1a:6c:dc:4e:f7:b8:28:60:5d:b9:99:d6:
         85:06:aa:76:02:92:97:4c:f6:49:a3:f4:57:4a:49:4f:58:3a:
         d1:09:36:e3:48:23:3d:0c:5d:ee:b2:e4:cb:e0:60:e4:da:2d:
         49:69:5b:78:ae:f5:97:60:b5:1e:ad:9b:37:ab:23:fb:0d:58:
         fa:64:0b:d4:01:7b:31:b7:10:13:4f:0e:d9:3f:22:84:43:27:
         85:2e:72:20:40:97:c5:fd:96:93:c9:9e:22:46:1e:93:7e:dc:
         30:19:c2:2a:b7:08:af:b1:3d:21:a6:31:3d:5b:6b:22:a7:2f:
         27:b7:ae:28:35:ae:83:ad:93:64:10:71:ab:9f:0a:69:34:6d:
         62:77:8d:07:d0:05:07:11:2b:b3:d5:e5:9b:7f:6f:96:12:be:
         86:38:9c:5e:87:4d:88:9a:8e:9f:81:05:3a:59:cd:ca:74:5e:
         e0:51:cb:f4:5f:ee:8d:fc:c3:4b:0f:4a:07:ab:91:fa:0f:a5:
         4c:ff:11:91:e5:3b:95:fc:1b:2a:c9:a8:5a:17:d2:f1:b7:e8:
         85:cd:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----