Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File:                     CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier:          1UdpNRVq1LokvaJDIzDxbBcrCVjg4IvGmzbN0cMMg1I=
Subject key identifier:   D0:1D:F5:D8:A6:D8:1E:07:28:0C:ED:BA:AD:3B:35:5F:B1:41:3F:82
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer:       /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial:       01962F3D2CF7EEC103B66150EBC5790DEBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number:          8A
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: mJukZSvp7C6ZrRRpTB7jJ5xP7q7GCgwlVfOBvrdpQJw=)
                          2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2c:f7:ee:c1:03:b6:61:50:eb:c5:79:0d:eb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=d01df5d8a6d81e07280cedbaad3b355fb1413f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:ba:4e:b4:2b:f1:b5:ae:8f:91:9d:bd:1c:
                    3d:16:01:b9:da:de:e4:2d:f7:8c:fd:dc:ce:11:59:
                    47:c5:34:4f:57:0d:a4:c1:2a:c6:2a:b6:86:bb:8c:
                    07:80:41:09:4f:bf:e7:91:83:2d:b9:88:6c:5b:37:
                    b7:3c:62:ea:be:0a:55:8d:21:a6:9b:8b:17:18:3c:
                    5f:6b:52:52:92:46:2d:2c:94:09:1f:c5:8a:bb:96:
                    36:5a:3e:0f:a6:b8:32:d9:38:33:43:38:ab:eb:46:
                    fe:2d:03:3b:31:74:6a:52:93:47:b5:f3:b6:38:e6:
                    f1:d6:7d:5c:4a:58:ba:07:e2:58:26:ee:86:3d:03:
                    d1:d7:b4:12:c6:78:f2:05:92:24:52:43:0f:00:4a:
                    45:15:60:ee:86:b0:9b:d8:63:23:06:34:10:cd:8b:
                    25:9c:a5:3f:aa:52:34:4a:1e:da:7f:44:73:bb:9f:
                    55:d5:18:27:45:20:47:49:48:42:ac:08:e4:e5:af:
                    b0:8c:25:fb:75:48:db:87:26:14:72:ee:e4:b1:a0:
                    eb:8d:34:ca:c5:60:e3:86:c8:31:1e:8c:6b:02:9f:
                    1e:93:e3:35:5f:56:f5:ce:f2:03:c4:71:1a:72:d0:
                    84:f9:d6:e2:2c:86:60:8e:c2:6b:63:9a:ea:57:71:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:F5:D8:A6:D8:1E:07:28:0C:ED:BA:AD:3B:35:5F:B1:41:3F:82
            X509v3 Authority Key Identifier:
                keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:a0:f7:c1:92:57:bb:57:6d:b0:d5:ca:80:aa:e1:8e:d2:
         30:6f:bd:ba:51:de:df:49:e2:ab:5a:f4:90:5b:52:e8:75:78:
         b2:a1:b8:57:ba:32:7b:84:39:9a:ee:95:27:82:ce:04:a4:15:
         35:01:81:bc:25:86:5b:e3:a3:b2:5a:99:ea:95:01:5f:7d:f8:
         f2:c0:ae:67:e4:85:dc:6b:a0:9d:2f:c4:89:e5:67:3e:5e:88:
         09:72:61:06:bb:80:19:72:fa:0b:be:63:c8:e1:a2:10:c4:c1:
         59:ba:d9:a4:be:39:ff:79:b2:45:3e:9f:c5:de:71:db:48:21:
         44:4f:0a:c1:ba:9f:9f:8a:dd:9b:9e:be:bb:29:c3:e2:18:6a:
         da:8a:2d:3a:90:04:0d:ef:27:04:fa:cc:d9:84:bb:4e:f6:38:
         17:22:ee:8b:4b:1f:6e:26:41:07:dc:69:c8:fb:cb:4f:1e:79:
         74:4a:1b:98:54:8d:f2:dc:da:8b:24:22:a3:6a:ac:66:eb:24:
         78:66:45:cb:73:e7:3c:cd:a9:55:25:a5:5d:3c:78:b3:09:eb:
         c3:52:a9:3a:1b:04:57:ab:f2:43:8a:9f:7a:67:24:a4:ab:ed:
         43:7d:55:86:b7:44:a9:e8:d6:92:cc:e2:90:a3:72:da:5e:61:
         a1:6b:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----