Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File:                     2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier:          wtxYQ9/u+FNjglYqdiwpcPg1Kyxgz+QNxHA/8uatanI=
Subject key identifier:   7D:18:C6:AE:C2:3A:32:DF:59:FD:E6:AF:DA:FB:A5:91:97:FB:48:79
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer:       /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial:       01962E98A33D8526C24628A072E4215027AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number:          04AA
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: BEDH8YBmPHERcOxQnCq3kXX7Sqq1KU1iD5igw7iB7xo=)
                          2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:3d:85:26:c2:46:28:a0:72:e4:21:50:27:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=7d18c6aec23a32df59fde6afdafba59197fb4879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:50:0a:4c:18:dd:d8:80:31:de:41:bd:66:
                    0e:17:07:80:e8:7a:20:63:cd:ac:32:3d:62:d5:04:
                    75:7a:de:d0:3c:3b:40:fe:47:e7:65:7f:8e:20:29:
                    96:3c:98:da:36:f2:45:37:56:55:3f:87:44:0c:1e:
                    93:43:0d:bf:92:c2:88:44:cc:c4:f7:6e:0f:8f:64:
                    70:ce:13:20:30:46:d0:69:aa:d5:44:f1:86:76:a4:
                    6b:b4:a1:18:a7:96:4d:95:bf:3b:52:83:2a:66:ac:
                    50:72:19:6e:40:9e:86:3a:dc:5f:ea:f7:38:d2:a2:
                    97:c5:bc:29:86:df:e2:06:34:c3:26:87:76:b2:9f:
                    3e:a9:3c:ca:26:ef:99:46:3e:9b:3a:19:46:1e:76:
                    4e:b2:07:a3:c3:d0:eb:fc:40:1d:3a:59:3e:99:70:
                    cd:19:ac:59:5b:97:f7:e9:90:d6:47:99:ce:78:4b:
                    e5:6a:6d:42:66:9e:3d:8d:ff:7b:d3:c6:9a:d9:4f:
                    49:5b:b4:0a:be:16:d0:f7:bd:53:92:90:28:1a:54:
                    a1:b8:57:2b:82:2e:cf:59:b5:35:c9:84:d2:cc:14:
                    11:fe:9a:fa:74:2b:52:52:fb:8b:09:d6:b8:ea:88:
                    28:39:1b:f1:ef:34:cb:9b:45:2d:92:08:60:6d:5c:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:18:C6:AE:C2:3A:32:DF:59:FD:E6:AF:DA:FB:A5:91:97:FB:48:79
            X509v3 Authority Key Identifier:
                keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:28:ea:79:50:5c:62:dc:02:3a:42:f7:e1:7d:bc:b4:d0:
         99:63:8a:d2:dc:5f:10:0d:ee:8a:34:ea:a5:cd:0a:af:b6:d8:
         41:1d:36:98:d2:cb:85:ca:11:56:6d:3b:6e:b5:c1:9d:0e:4e:
         29:49:98:85:d2:f3:58:0d:02:99:6f:9d:d6:a1:4d:82:fa:ce:
         79:85:48:9f:97:da:88:b3:bf:cb:9c:68:fe:ab:fc:8e:96:c7:
         61:b8:52:75:53:dc:16:7c:a3:ef:29:9a:e7:75:34:ee:3e:52:
         f4:98:3d:be:42:61:7d:b3:25:46:73:50:7f:7a:14:43:75:08:
         3f:14:d4:6d:38:a2:51:59:13:4a:3f:25:9e:e0:29:f2:9d:22:
         ed:22:c8:88:26:3c:f4:e3:02:94:fd:40:0b:70:ae:4f:2f:e1:
         75:84:e3:37:24:3f:e4:24:7a:a1:85:c3:c6:3c:d8:ea:a0:55:
         e0:2a:5c:ea:15:ea:f1:e7:82:6a:a7:4e:ad:9e:f3:b9:bb:08:
         b3:31:03:34:dd:7a:29:ca:a1:7b:4e:72:a8:6b:fa:2d:d7:91:
         97:4d:7b:c4:e2:6b:d3:19:3d:fb:03:44:25:43:8d:bd:f4:8d:
         b3:93:25:04:e5:14:bc:b7:bd:65:db:c3:57:6e:4e:a6:46:53:
         53:fe:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----