Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File:                     lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier:          r9tYEGt7SK7Zez6vKuHefcIQYDvSohc3wRcD+nb8Rkc=
Subject key identifier:   4F:94:5B:BB:0C:60:36:72:CB:0A:0D:3F:CD:F9:EA:04:36:7B:C3:5F
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer:       /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial:       01962F74D29A8AB975B55492A87C6C69846B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number:          0E
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: ANb8R9j2-02RgxidkX6we3ysGQE.roa (hash: PtyNaJPud8TrVLKjYWqb06NjCoREWDEBCKKVezOGEGI=)
                          2: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: zZbHTy1s2OiKxPAnsy2yodAhHIYs7J0bg4az5fUrK04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d2:9a:8a:b9:75:b5:54:92:a8:7c:6c:69:84:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=4f945bbb0c603672cb0a0d3fcdf9ea04367bc35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:47:b2:61:8e:80:49:b8:9e:c6:19:a4:cd:
                    64:65:31:f0:01:3f:98:a2:42:a9:df:8f:46:90:74:
                    28:c3:05:86:11:ba:d5:27:12:7c:39:ae:76:77:e3:
                    60:1f:0f:5b:9e:c9:94:22:b7:f0:fb:c3:a6:77:17:
                    17:12:3a:d8:39:44:56:9d:f4:e5:d7:69:bf:e2:4c:
                    e8:a9:49:71:ef:59:ae:c2:29:26:90:ef:00:50:f9:
                    de:4c:5f:c1:31:09:e0:81:71:7a:30:67:0c:27:5c:
                    79:2a:d6:a5:9a:de:f9:55:a2:b8:46:b7:2f:77:9f:
                    d9:d4:21:e0:b3:5c:97:71:2f:64:27:91:c9:8e:04:
                    f7:bf:e7:fa:19:e7:62:49:3a:4b:32:06:1a:47:98:
                    0d:e6:e0:fb:20:2c:c7:65:ac:ab:b7:9c:04:ed:22:
                    23:01:c4:4a:e3:f5:1e:4b:4d:5d:72:cc:66:22:6d:
                    07:f8:fa:06:a9:92:0d:75:4d:ce:fc:f4:cc:49:27:
                    03:42:a8:6f:ab:f6:b6:8b:f1:e6:c2:35:a1:01:6d:
                    e2:16:5d:e4:bd:cd:47:bc:ec:78:47:ff:cb:55:ad:
                    48:f4:21:3c:a9:13:a3:be:43:b7:f9:45:ee:c9:d1:
                    4e:45:4b:16:9f:56:40:38:c9:32:b5:f8:bc:04:2d:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:94:5B:BB:0C:60:36:72:CB:0A:0D:3F:CD:F9:EA:04:36:7B:C3:5F
            X509v3 Authority Key Identifier:
                keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:82:9b:ac:08:f4:90:b8:f3:eb:5a:ea:6d:82:6c:e7:18:fd:
         e0:81:25:ee:c2:e8:e4:42:5e:29:33:11:00:ae:58:10:b9:1f:
         dc:e4:39:66:b1:a8:93:3c:04:ed:6c:48:c6:23:74:a7:b2:c5:
         6a:70:60:9b:52:f2:9c:38:65:93:e0:af:d3:e7:a1:95:2d:bb:
         07:b2:15:8e:b6:c6:b5:13:24:ea:30:ae:44:d2:eb:c3:0c:dc:
         5e:44:a8:96:a7:4d:b5:2e:c8:ad:c7:fc:78:f7:28:23:46:92:
         25:a6:95:ad:60:3d:07:79:1a:b5:ea:7c:fa:89:dd:a6:74:0e:
         dd:2a:76:9a:4e:35:08:c1:9c:93:41:0e:2b:23:be:e6:7e:32:
         2c:ee:ab:b9:3a:f5:e9:42:ed:ca:22:51:57:61:61:70:44:0e:
         3a:61:72:e4:57:de:53:72:9c:db:09:8d:8f:c5:6a:71:86:66:
         3e:1d:78:a4:40:e5:97:64:37:e9:34:c0:f7:23:7a:a7:08:79:
         26:e2:01:ea:6a:68:25:0a:f0:c6:c2:82:ae:ad:83:63:5e:71:
         31:2c:06:ec:0c:7b:f2:71:87:2a:42:3d:27:28:cc:81:f4:a7:
         5c:21:2c:db:91:56:22:56:b7:27:5c:65:d7:70:d2:83:e7:7c:
         3f:1f:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----