Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File:                     pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier:          2PUlPaFyEx8lyCxuLGjm6gOUZH3dpQPUKjWRC6KvmOs=
Subject key identifier:   9D:F6:20:A8:3F:17:25:C5:CF:CA:05:01:1E:71:82:77:99:7E:E6:25
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer:       /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial:       01962F0698E29583F36F94670B8E2E5ACB6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number:          096A
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
                          2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: RGhRCS8D9FGpnSQo7zmr2sUo1WeP8wnQM/qHC4hrFa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:98:e2:95:83:f3:6f:94:67:0b:8e:2e:5a:cb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=9df620a83f1725c5cfca05011e718277997ee625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:9f:d0:45:1c:a0:3b:a6:6d:28:26:8f:cd:
                    b9:c5:89:40:fa:4c:71:3a:55:e2:58:81:d7:a7:be:
                    dc:57:7b:08:08:8d:5d:d6:26:d8:50:ba:3e:dd:c0:
                    51:a3:74:11:36:b2:28:0d:26:b2:3e:81:79:87:3b:
                    60:21:85:7a:1d:7b:85:b8:20:d3:cb:00:43:8b:3e:
                    70:dd:98:e3:43:cf:19:c6:56:8e:87:b2:7e:c3:65:
                    b2:a0:fb:70:fd:35:d4:50:3d:a6:fe:fa:8d:af:1f:
                    ed:fa:0a:99:56:bb:8d:ce:b9:63:62:fa:21:84:69:
                    84:68:ae:f7:19:3b:54:13:47:87:30:fd:f6:11:85:
                    a7:40:92:3a:73:a4:bb:45:69:ac:de:68:b2:20:e8:
                    d7:54:98:f8:a8:1a:a0:92:e0:5d:9f:c8:c5:72:57:
                    ce:33:e6:2c:57:16:25:74:d5:b5:bc:ad:2e:2a:13:
                    76:42:5d:29:c6:d7:d7:3f:c1:a5:ff:49:37:7f:da:
                    7b:98:c0:77:ca:5e:71:02:44:4c:36:a9:43:43:65:
                    72:91:0e:32:04:15:31:34:9b:88:ad:03:eb:e8:a6:
                    f6:bc:00:a6:53:25:68:f6:30:09:c0:16:80:44:2c:
                    5e:87:05:73:0b:f9:3e:f4:07:9b:48:84:56:76:b0:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:20:A8:3F:17:25:C5:CF:CA:05:01:1E:71:82:77:99:7E:E6:25
            X509v3 Authority Key Identifier:
                keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:65:5d:93:3b:04:17:8b:8d:45:d9:9f:10:d5:8e:a3:4e:
         8e:71:4a:50:91:53:f9:54:59:67:69:4f:6f:5f:d1:94:a7:56:
         fe:57:84:da:c5:b4:98:f4:da:bb:27:3c:9d:ac:38:91:d4:0b:
         51:5b:3a:bb:98:a1:46:e8:ce:38:08:e7:53:0b:4a:cd:00:81:
         c8:c9:ba:46:a0:4f:b5:ec:88:39:e0:7e:03:50:cc:a5:96:24:
         2a:f6:d7:3d:9b:91:6f:db:94:ed:74:91:10:6e:de:60:06:dc:
         eb:13:55:74:03:ef:8c:54:08:49:a9:05:b4:c7:fa:a4:07:bf:
         a0:cf:59:d5:bb:b9:0b:4d:44:bf:d4:49:d6:90:3a:f3:e3:7b:
         77:27:40:17:fa:df:8d:32:da:fd:b7:10:90:f8:a7:6c:4c:e4:
         e5:fe:e9:82:56:1e:db:f4:9c:a2:54:9e:2c:a5:5c:66:f9:b7:
         54:5e:50:2d:d2:a3:66:e5:b4:c4:77:83:44:52:4b:7a:a2:34:
         90:e8:0a:d3:ff:83:9f:f2:0f:13:35:3e:bb:1f:b2:aa:b7:df:
         52:d8:53:11:dd:0a:2d:84:32:7a:96:5a:f8:b1:1b:dc:4c:7c:
         ae:45:ff:eb:29:7f:07:45:53:15:f8:5e:91:17:89:4a:2f:06:
         25:b3:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----