Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File:                     2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier:          GuO+UAa+X5JNkg0Yl3sbYEVVgpZbtzHiY1xfZW/XonE=
Subject key identifier:   CD:4A:3C:08:76:F1:4E:BF:31:7D:08:27:CA:B0:8E:78:57:18:8B:43
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer:       /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial:       01962E987DB67A80814A5889AFE19B973806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number:          0B95
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: cnMKFsvDaqDes2/jZSeH8oXi2zNPMm4MYNO7rftm0/Y=)
                          2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7d:b6:7a:80:81:4a:58:89:af:e1:9b:97:38:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=cd4a3c0876f14ebf317d0827cab08e7857188b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:12:6b:f0:00:36:76:9d:bb:c3:b8:7f:7f:
                    5f:f5:2c:fb:12:4e:66:88:26:90:e0:a7:63:3b:47:
                    87:6e:13:89:fd:6d:2b:44:dd:92:ae:f4:f4:1f:7e:
                    01:64:6e:d0:20:eb:09:01:46:2b:60:05:56:4b:20:
                    99:6a:c4:e3:eb:5b:7d:9a:34:cc:36:2b:50:7c:08:
                    93:d3:bb:45:6e:7f:39:7a:1d:95:40:e3:9a:5c:8e:
                    04:98:b1:22:63:6a:43:b7:b9:eb:a4:b4:8a:fa:47:
                    26:ff:50:eb:9d:b4:c7:36:29:5a:3f:d2:33:de:7b:
                    ea:76:ab:19:ba:31:2c:06:8f:1d:a1:35:be:92:83:
                    ab:c2:91:d5:39:47:b5:8f:b5:e4:d8:76:ce:57:a6:
                    e1:7d:b4:b2:16:be:ec:35:c2:f0:d3:74:81:fd:79:
                    33:82:8f:4f:1b:69:5b:ba:3d:bd:f8:50:33:a6:e5:
                    b9:32:33:e2:0c:4c:8b:28:4b:77:92:af:1f:bd:df:
                    ae:d8:16:d7:9f:b9:1c:aa:5b:5f:72:2f:99:b7:df:
                    53:68:ae:cd:7a:5b:65:28:65:74:94:3d:92:01:5d:
                    81:d0:6e:bd:a1:3d:3e:79:71:1b:33:25:23:75:84:
                    41:2f:45:0e:48:9b:ef:15:3f:3c:bc:3a:89:dc:45:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4A:3C:08:76:F1:4E:BF:31:7D:08:27:CA:B0:8E:78:57:18:8B:43
            X509v3 Authority Key Identifier:
                keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:ca:1e:a5:28:d1:ce:81:f3:a3:e4:de:a6:9f:a0:5e:af:
         16:5f:03:4e:56:6c:bd:f5:71:35:d0:bf:8b:12:84:cf:3c:78:
         9c:d2:2e:e5:c9:ba:18:0e:52:b3:45:b0:61:56:9e:fb:58:4c:
         cc:12:da:17:e5:8c:9e:35:8d:a0:b8:67:10:d1:fa:ed:49:02:
         59:11:4b:ac:af:c7:07:a0:77:06:8a:90:ad:c7:f5:f0:1a:5d:
         ee:e6:9b:04:37:e6:bf:16:1a:58:04:29:92:97:ce:73:32:40:
         d4:8a:d9:b7:65:ba:a9:12:b7:bc:84:6d:11:d2:b0:5c:11:1d:
         4b:4b:71:2b:bd:7d:92:c2:1a:9a:e3:ac:f5:de:85:78:c2:99:
         3e:91:3b:64:42:f2:2e:e3:96:da:70:65:f5:34:db:fc:4c:06:
         72:33:3b:76:56:6a:b6:d3:5c:20:a8:1d:f9:2d:11:b7:34:9b:
         7b:4e:09:84:c6:e1:74:fd:97:b2:31:bb:70:35:4d:24:70:de:
         5c:0f:8f:4f:d6:c7:93:11:b2:ae:ba:4b:ab:73:5c:12:45:cd:
         03:cd:11:12:d8:56:02:2e:5f:21:1b:02:65:9c:56:62:5e:f1:
         61:d1:d4:69:28:55:0f:30:55:83:d1:02:55:e4:30:0e:85:f7:
         ed:9d:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----