Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File:                     dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier:          thb3KTbKNCBdUQ03TU16yvNSy0cA+yKGI0j3nXbTm3Q=
Subject key identifier:   09:EA:D6:18:CC:A8:5D:09:D3:D9:98:71:CF:4D:8E:2C:F5:25:CF:01
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer:       /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial:       01962E6179AAFA7FF7A552BF3BCDEAA6E955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number:          135F
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
                          2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: l376wG2Yx/epiSJp8B2QKgv8S89Ar9r/6zi0i9VWw8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:79:aa:fa:7f:f7:a5:52:bf:3b:cd:ea:a6:e9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=09ead618cca85d09d3d99871cf4d8e2cf525cf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:f5:1d:2c:ed:45:76:d9:b1:27:1a:2e:e6:
                    cc:1e:4a:ad:8f:1a:59:1d:7a:cc:6b:7d:cc:2f:a2:
                    67:5c:8f:bb:6e:f7:ab:54:e0:68:e7:2c:c7:6b:74:
                    5a:81:57:e1:25:7c:25:f8:82:82:5d:45:02:0c:0c:
                    55:b6:84:20:8d:a2:a6:d7:4a:8e:7f:07:32:0e:4d:
                    3a:79:97:ce:7c:0b:9a:20:d5:d4:e7:1e:4e:bc:74:
                    2c:1c:69:8c:6f:73:25:0a:8e:0b:d0:c9:a0:8f:bd:
                    4d:f2:d1:09:a2:95:d3:d8:f9:8a:6a:84:6b:96:bd:
                    1b:e6:79:bf:52:3c:60:ec:76:90:eb:ed:59:cb:9b:
                    33:34:93:44:58:af:fa:27:e2:dd:29:45:3f:f1:bd:
                    1f:bd:ae:ac:10:4d:03:46:c3:ce:18:4d:9e:4c:f5:
                    62:ae:94:fa:44:25:22:de:d3:f6:7e:88:28:ee:b7:
                    30:1a:17:80:de:4f:60:c9:06:89:32:00:8a:51:56:
                    4f:86:af:28:10:81:00:e3:43:b2:09:f2:d9:0a:64:
                    1f:55:e6:26:90:c9:63:48:aa:90:7d:3a:38:98:a6:
                    a0:27:37:96:6b:23:63:b0:53:6d:75:72:0e:eb:14:
                    56:0a:f6:2a:b8:99:d4:57:c9:26:05:9b:66:56:bd:
                    10:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EA:D6:18:CC:A8:5D:09:D3:D9:98:71:CF:4D:8E:2C:F5:25:CF:01
            X509v3 Authority Key Identifier:
                keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:da:70:90:6e:48:13:4b:f6:31:f5:ce:42:b1:d4:3b:70:44:
         92:14:84:67:2a:70:29:d2:d0:7d:8e:a0:97:b7:2d:9f:4b:42:
         09:4d:2a:45:85:49:c3:36:c4:d9:67:38:b4:20:ec:3a:57:c2:
         9d:12:ed:4f:58:fa:e6:22:80:e3:37:46:07:a4:e1:d5:99:5b:
         cb:0b:aa:33:f2:ff:fa:76:95:64:de:5d:4c:38:16:b9:87:d4:
         7a:ea:65:08:42:6b:b4:dd:b2:c2:4e:05:77:5e:6d:e0:0e:5d:
         38:2b:09:db:5c:59:e2:a3:d6:35:20:46:00:dc:03:b5:5a:90:
         65:19:0b:90:82:2d:a0:00:9e:d3:4b:41:48:be:d6:2d:a2:52:
         c6:8b:4f:eb:3e:17:0c:cf:23:09:de:a8:d7:08:8e:07:8a:34:
         a9:ea:82:52:9c:da:b7:aa:82:42:73:ea:76:0d:7c:12:80:c5:
         d7:0e:49:22:57:29:6a:a7:ba:49:69:92:44:35:07:35:67:71:
         23:e5:37:0f:eb:64:21:dd:db:63:b3:1f:fc:9e:84:a1:95:de:
         fb:61:46:15:e2:d5:91:94:c5:c7:ee:e4:39:ca:35:63:f9:b8:
         41:d7:0f:e3:a4:48:5d:4c:bc:b6:02:42:c2:83:a9:e0:c5:aa:
         f8:2c:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----