Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File:                     2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier:          b1V9VnvLZ/igJbld2gVQJaYWROaw9Q5YItC3GxU36jI=
Subject key identifier:   35:EE:3F:A0:25:77:A6:0F:52:D7:00:3A:AC:95:36:61:E5:79:3B:CC
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer:       /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial:       01962FAB739C1460586EC1A725733AE16135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number:          134A
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: HXxea0mpGKIdbUlv9sjcDAVmOWvWJpGizQ6pEkqqpR8=)
                          2: MPv0ZIQf8gF63bRVzj_wdZ-dXZY.roa (hash: KkiJFkcyvUz1heqkxBgEPmTtzY4d9T2+9il0WhHIMyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:9c:14:60:58:6e:c1:a7:25:73:3a:e1:61:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=35ee3fa02577a60f52d7003aac953661e5793bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:95:20:99:31:e1:4d:99:a2:99:50:1c:b6:
                    56:77:fb:0b:06:8f:d7:a1:fe:3d:3d:c6:8c:a1:71:
                    14:a7:73:96:06:bc:f9:00:fe:5b:11:4d:cd:48:57:
                    f4:3d:2f:55:26:c7:40:ab:cd:9b:be:2d:4e:47:17:
                    08:3f:80:e7:02:20:35:4d:99:de:fa:4a:06:f8:2b:
                    57:79:0c:35:fc:a6:95:ea:c1:43:3f:fd:05:b3:fb:
                    74:89:35:38:aa:2a:cc:f1:7a:22:79:0f:42:6f:4f:
                    89:da:8a:ca:96:99:ae:35:d9:32:ee:72:72:7c:b0:
                    93:f8:b0:70:24:4e:cc:90:40:f4:fb:07:0f:c1:09:
                    e1:61:3e:fc:f6:15:68:28:73:25:48:c9:93:79:b7:
                    fa:18:00:9d:87:35:f1:41:ff:42:4f:f0:12:4a:ef:
                    61:48:c5:e8:1b:f0:79:18:08:ae:8b:60:86:07:b4:
                    0b:11:fe:6b:80:15:12:30:af:6f:a2:8f:bc:ee:76:
                    59:63:fe:32:16:8e:73:c0:e1:8d:c2:86:a3:eb:bd:
                    99:76:ae:5c:cc:c0:e4:5e:74:38:92:ae:10:c8:aa:
                    dd:ef:43:60:05:8e:e2:73:c4:39:75:40:b7:c7:46:
                    dc:d1:58:70:0c:b8:80:eb:e9:7e:48:d4:ce:88:d4:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EE:3F:A0:25:77:A6:0F:52:D7:00:3A:AC:95:36:61:E5:79:3B:CC
            X509v3 Authority Key Identifier:
                keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:f4:3a:bd:a6:bd:88:a8:8a:f0:72:b9:e9:66:56:3f:da:
         1d:d2:94:88:05:15:c5:e3:c4:b0:38:6d:a4:80:7a:02:e1:bb:
         ba:e3:d2:d5:bc:04:5f:17:5f:22:a6:b3:e5:37:4e:5a:31:f3:
         a8:1c:84:09:fd:ae:4e:3d:f5:b6:a1:76:f6:94:ef:29:11:1a:
         a4:1e:f5:41:f6:62:af:8c:f6:6d:13:3b:08:2f:57:5c:c9:61:
         57:1f:fa:04:c3:48:22:d9:ca:6b:71:da:ab:fe:ab:f3:1d:bf:
         f6:e4:65:9e:c6:90:a7:08:c0:c0:c6:ed:d6:1f:b9:78:02:a5:
         40:98:fd:df:bb:65:8f:5a:a8:d6:18:be:37:29:31:45:62:37:
         ce:2e:d9:4e:40:0d:88:ff:e0:29:88:0e:96:a6:84:f8:b7:46:
         56:9b:b0:85:33:01:3e:3f:72:6c:fd:18:7d:33:0e:d0:6e:c9:
         79:d2:b0:b5:16:45:96:c4:0e:64:f1:64:fc:92:4d:e4:a9:dd:
         a4:96:48:14:4b:bf:95:af:41:92:a9:9d:23:fa:5d:20:d9:fc:
         e5:bb:c8:71:69:e8:c7:f2:c7:23:72:57:61:58:1a:78:65:ee:
         2f:dd:52:8c:04:c7:5d:8c:04:f2:c2:7c:03:fe:14:f1:4b:97:
         e8:f4:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----