Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File:                     mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier:          jSV1VpOy+SzSgOoe3UMlPtKXqrPbKfEcCNAMMzzJRAE=
Subject key identifier:   4C:02:0F:9A:9F:0C:34:FC:BF:52:05:88:A5:C3:EA:E2:F5:4B:95:65
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer:       /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial:       01962E99175C708173682F2E5C7E9E6C1D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
                          2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: eTzLMMKSwlnmo06KjC1DneCJ4JmZbzttgcVZ4OrvsLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:17:5c:70:81:73:68:2f:2e:5c:7e:9e:6c:1d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=4c020f9a9f0c34fcbf520588a5c3eae2f54b9565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:c7:c3:69:4a:80:82:5d:d4:d1:67:29:e3:
                    eb:cc:10:df:dc:99:6e:50:c5:52:36:6d:dd:96:b4:
                    f3:74:3d:0b:ba:16:23:3e:ab:15:9f:17:cc:99:3f:
                    51:1b:bb:83:8c:4b:56:58:95:f8:40:f9:84:fa:5e:
                    b5:a4:94:cd:0e:dd:f5:ec:fd:d5:01:a4:a3:ed:03:
                    93:87:02:85:9b:a6:85:bf:1b:13:95:57:26:16:e0:
                    c5:7e:93:9b:d2:8f:5f:5d:c2:74:f0:2d:e3:a2:f0:
                    b5:71:02:5d:92:63:af:90:39:9c:cb:56:7e:e7:7e:
                    fa:2a:4f:2a:80:d8:0a:58:65:61:c4:09:f0:5d:9e:
                    68:9f:f2:5f:ef:60:67:0e:02:e6:dc:bf:8d:6a:74:
                    bf:87:b2:19:69:07:35:56:d6:c0:c0:ba:9d:fc:90:
                    b9:60:32:bb:1f:a3:35:4c:79:d4:38:d8:a4:c5:41:
                    ed:76:c6:a0:cb:46:61:06:c8:00:8d:09:e8:77:ac:
                    19:ab:82:3f:5c:bc:c4:a5:58:21:e9:d1:3a:45:c8:
                    d2:78:ea:27:4e:41:76:d6:73:94:5b:a2:34:4f:1d:
                    d5:07:c9:40:32:b7:42:6c:10:04:6d:63:7d:80:cb:
                    3d:fd:15:ad:b4:44:03:3d:61:03:6d:9c:a0:ab:7c:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:0F:9A:9F:0C:34:FC:BF:52:05:88:A5:C3:EA:E2:F5:4B:95:65
            X509v3 Authority Key Identifier:
                keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:6f:07:77:e0:08:a7:a4:e3:fa:26:d6:ea:c1:4d:f9:86:
         8d:8d:0b:1f:99:05:41:9e:b2:0f:cf:44:a6:f8:f8:ba:8c:c3:
         c3:b5:49:68:07:63:01:1b:fd:5a:00:97:8a:41:25:c5:5a:bf:
         59:2b:fb:6d:a4:ec:b8:12:bc:3c:f1:69:91:c0:dc:28:43:9c:
         bb:e3:6c:9e:23:ef:5a:ed:42:98:e5:28:d8:3f:2f:e7:3e:ea:
         9b:50:68:5c:18:ca:39:28:97:ad:30:4b:3e:1f:cf:21:02:c6:
         42:f2:32:c7:95:57:a1:7b:c0:4e:4e:94:be:31:b6:0e:5a:ed:
         36:1a:16:e1:5c:85:8b:71:21:e6:26:d8:24:60:71:e2:63:18:
         ca:47:1e:e5:03:91:cd:43:b8:b8:e9:dd:ef:54:40:31:0e:a8:
         aa:81:6d:a0:71:48:fa:48:47:ed:78:f3:df:30:85:a1:89:8c:
         c1:86:42:a0:33:8f:b8:19:9d:3f:2d:a0:d1:09:92:34:4a:a2:
         63:f5:75:5f:4d:e5:4e:a3:5b:4a:99:02:23:24:8c:20:1c:b4:
         29:2b:7e:8c:7b:e0:3d:a3:03:b6:a6:b1:c8:2b:e5:7b:22:d5:
         50:d5:6b:85:95:fb:8d:2f:d0:15:0e:4a:0f:11:9f:01:a7:2f:
         b7:67:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----