Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File:                     iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier:          j8uMupUGPXUgdCNZb0CUuLRPtnSKNQ2JZOIZRt6l2lE=
Subject key identifier:   8A:F0:21:21:91:CE:3D:FA:57:B6:17:66:31:7D:CE:AB:75:BD:90:91
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer:       /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial:       01962F0683FEA882F174834E7F0A0489E5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
                          2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: p6Bk9DP6Wmvv17xM28+4IwUNrlWB9D/PYeZ/226pgzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:83:fe:a8:82:f1:74:83:4e:7f:0a:04:89:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=8af0212191ce3dfa57b61766317dceab75bd9091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:03:e7:94:c2:8e:5d:63:86:24:31:bd:a0:
                    d0:a7:cf:0a:eb:bb:6f:0a:48:81:79:5e:0b:1b:3e:
                    fd:31:d3:32:fe:91:75:98:ba:12:7c:45:8a:82:2f:
                    1d:fe:98:c4:82:49:a1:f6:18:50:59:ec:16:62:85:
                    e5:4f:41:7c:e9:41:1c:f7:21:4a:4b:82:b6:5c:07:
                    1f:a7:15:a8:41:3a:60:f9:83:9d:de:c8:b2:66:9d:
                    2c:0e:3a:9c:e1:2c:79:23:91:a4:04:f6:da:db:05:
                    89:0e:7e:e6:77:81:e8:ea:76:64:db:1f:42:c2:c1:
                    3e:56:d4:47:ca:d7:2f:8d:5b:e1:3c:76:43:f6:65:
                    2d:69:db:05:fb:e6:1c:5f:bd:cd:a4:30:8a:9c:3e:
                    3c:d1:de:c3:f1:e7:b5:e2:17:34:80:8a:fa:a7:86:
                    7c:76:8f:bc:6c:5a:9d:ad:35:9b:68:7e:e2:e7:43:
                    01:1c:33:f7:8d:31:71:15:6a:13:f7:14:77:a4:f8:
                    97:93:56:36:e6:c5:3f:8c:e8:61:6c:bd:5b:75:11:
                    fc:f5:62:87:8c:dc:c7:07:e8:9a:cc:0c:79:09:1f:
                    2e:81:b4:6a:62:b6:86:9d:45:8d:bd:ca:53:a4:53:
                    d2:69:eb:78:27:ca:a2:47:2a:39:be:26:89:a0:64:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:21:21:91:CE:3D:FA:57:B6:17:66:31:7D:CE:AB:75:BD:90:91
            X509v3 Authority Key Identifier:
                keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:57:de:98:d3:eb:7b:25:0d:0a:31:18:d4:7a:b3:21:db:67:
         3a:fc:7c:9e:94:d6:ec:f3:59:1c:0e:07:83:cb:86:9a:a7:a5:
         a3:2d:51:b0:79:e5:e9:91:85:f7:17:73:47:64:d7:76:b0:3c:
         79:d7:48:60:bd:02:26:ba:7a:43:9e:83:ee:c8:ac:01:74:cc:
         bd:6b:12:27:e8:bf:ec:06:eb:b4:93:96:6e:e4:f8:38:4a:22:
         e3:5b:1e:66:32:73:c8:50:a9:9e:20:51:b7:3e:ec:59:f5:8c:
         fb:2c:01:2b:79:43:c5:ff:33:cd:5c:89:bd:b4:02:db:20:3e:
         8e:43:96:1a:c3:19:63:14:2f:f7:d1:4e:13:56:56:ab:a2:4a:
         7e:09:c8:07:0b:02:17:14:25:a9:9c:30:73:3e:91:9e:8f:77:
         6e:99:c3:ae:6f:f7:a8:94:c5:e4:b5:d2:bd:d2:0d:d9:f2:e4:
         38:cd:22:7d:d0:a2:84:70:86:df:85:9a:2f:2f:25:3a:f6:9c:
         03:9a:2a:2c:0a:f4:31:da:09:43:84:95:b4:87:6c:61:c0:e5:
         c7:74:66:21:d5:7b:4f:3c:52:03:70:82:bc:f5:e0:6e:88:23:
         c4:1f:02:5c:c1:28:e1:bc:fe:18:3d:61:53:10:47:7e:ec:e3:
         7c:70:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----