Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File:                     diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier:          e6Zd0X3fstBESCebJfTCXh02AKmT9R1qe0FYswOx58k=
Subject key identifier:   20:6F:37:72:0F:BE:92:93:23:93:0F:03:CA:9E:3C:D7:00:F6:CF:F4
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer:       /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial:       01962F745663F3585ABA5ADB2309E088325D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: Nvfl4E033Piil6hNIvEbcPLZix9351UK8bUjBKRRn1E=)
                          2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:63:f3:58:5a:ba:5a:db:23:09:e0:88:32:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=206f37720fbe929323930f03ca9e3cd700f6cff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:d2:bf:84:dd:63:43:ad:07:28:ac:1a:31:
                    c2:31:10:6b:ad:f5:78:1a:00:5f:17:2c:a3:14:2e:
                    a8:62:22:5e:b5:f1:c3:4a:c0:e2:a1:6f:fe:4a:b0:
                    63:48:44:3b:f7:e0:46:a4:b6:02:d8:4d:cc:16:7e:
                    ee:ec:d2:4c:7e:3c:44:0f:f0:df:a9:0a:1e:f6:b9:
                    72:b1:17:d8:8c:df:27:81:5e:fb:91:05:7a:cc:d8:
                    45:77:eb:21:e3:9f:75:01:00:d2:33:70:3e:19:61:
                    a6:f5:86:22:db:27:ed:55:71:f7:fa:c7:51:e4:af:
                    37:e6:03:f2:37:3c:ab:8c:4a:40:98:43:c0:be:84:
                    f1:07:e0:41:c4:1d:22:3f:d0:cf:db:12:f2:7d:e9:
                    8d:b7:6e:a1:e8:b9:35:b5:16:59:35:8e:aa:68:87:
                    6d:b5:90:83:4e:25:f9:5b:a4:f9:fd:f5:29:95:d3:
                    9f:17:0b:bc:48:66:73:32:57:5e:dd:a1:b6:34:f5:
                    05:77:03:ae:db:50:d8:73:4d:17:55:5c:92:8c:65:
                    15:d0:46:10:67:2c:d1:a1:84:1b:24:99:25:46:1f:
                    bf:2e:af:a3:c5:25:e5:4b:73:8e:f6:4a:b8:13:12:
                    86:88:66:b2:da:bb:95:62:79:f8:e5:6e:d7:f7:ee:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:37:72:0F:BE:92:93:23:93:0F:03:CA:9E:3C:D7:00:F6:CF:F4
            X509v3 Authority Key Identifier:
                keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:de:99:27:df:01:3d:d2:03:8b:22:b1:94:48:cf:f6:a5:06:
         fe:97:71:bf:0d:bb:86:4e:22:11:f8:b6:5c:7c:41:e6:21:a1:
         ae:c9:bd:3c:88:8f:89:e3:75:7d:5a:6c:ee:45:77:33:82:4d:
         84:84:39:49:e2:91:65:16:4f:b7:64:a8:f2:2f:8c:c0:53:68:
         7c:37:8b:85:b4:53:55:a3:b7:74:6b:e2:9e:aa:80:70:35:ab:
         69:d8:7f:4f:d8:22:ba:2c:ca:64:7f:bc:5c:42:47:2e:91:31:
         8b:d8:ca:70:ea:17:2f:d3:dc:d4:e6:f5:27:01:10:11:40:f1:
         fe:fe:21:d5:65:d2:da:50:64:5d:e0:58:4f:ea:9f:c0:a9:21:
         e2:5f:e5:ee:c1:3a:78:4f:dd:e4:b0:dc:56:45:87:d7:c7:41:
         b5:10:da:37:ce:ea:2d:b8:8c:90:c2:b6:b4:95:d9:54:9c:27:
         63:95:ac:d5:91:b5:98:91:7d:b4:67:53:1f:f1:b9:7b:6f:e6:
         4f:e2:d2:48:ef:23:11:96:02:7f:b3:ff:80:a5:cd:ab:67:c4:
         37:93:4e:ad:56:55:88:31:e5:31:d5:9e:92:7f:6f:50:29:50:
         da:d1:6f:3e:ac:6b:d1:02:ab:e1:9f:4b:9c:36:6d:e3:d5:1d:
         0f:ac:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----