Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File:                     1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier:          rA9ORIQdsn76tWGFLXDAA14eEQSACd8hiE8TQs5V2P0=
Subject key identifier:   E7:60:E5:AC:AA:FD:FB:10:71:19:9A:F9:EF:55:72:F2:3F:28:E8:4A
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer:       /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial:       01962E61F980EF74870215ECA083D458135E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: z/OA+k4s2buGaKd7/zh6toUsDnOygD8rct5a1SiDtS4=)
                          2: DiWaQ483B87mmH9xBQjUT-gKREU.roa (hash: +HNilVQSXx0rRIqto+Np0Fi3ncazRRex3uQcgtaQ1OY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:80:ef:74:87:02:15:ec:a0:83:d4:58:13:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=e760e5acaafdfb1071199af9ef5572f23f28e84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:e3:b5:6e:a8:47:24:8d:ac:4a:29:73:0e:
                    fb:d2:a9:9b:9c:c2:9a:c8:b1:fd:57:ae:be:1f:02:
                    10:75:7d:63:ae:42:04:3d:d5:58:9d:47:78:2e:ed:
                    fd:05:28:72:88:87:91:64:e0:f1:09:07:27:89:f4:
                    9b:74:aa:f4:35:22:5c:f9:4a:28:7b:95:36:e9:bc:
                    64:ca:65:79:0c:c4:51:bd:e9:1b:ea:23:84:a2:c7:
                    a4:ce:f1:59:b5:c5:dd:63:c0:6c:2e:c5:37:4a:1e:
                    0c:af:3f:fe:58:ab:8f:ee:fe:15:9a:9c:2c:8e:cb:
                    23:c6:39:8c:37:56:84:37:75:79:65:35:a5:d9:a1:
                    55:da:57:88:a4:81:19:8a:46:c3:c8:00:64:ec:f4:
                    e2:33:b9:7a:cf:fb:50:53:b5:43:f8:d9:f2:b3:17:
                    6d:4c:d5:13:f0:20:b1:a1:33:ab:3b:67:33:7b:4f:
                    f0:20:10:f6:02:7e:aa:92:1d:4c:3b:a9:b4:c1:e4:
                    71:77:4b:a7:b4:a8:4a:52:d9:6e:64:50:bd:44:b0:
                    40:7d:1e:c8:8f:9c:df:db:7f:78:76:12:0b:8d:4c:
                    21:b1:f9:c2:2f:33:33:f4:76:3a:0d:56:ce:ea:ae:
                    15:36:4e:b5:18:2e:4d:15:aa:60:7f:56:6a:58:3a:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:60:E5:AC:AA:FD:FB:10:71:19:9A:F9:EF:55:72:F2:3F:28:E8:4A
            X509v3 Authority Key Identifier:
                keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:ed:f6:06:0e:07:cd:c6:2a:e1:5d:1b:7c:c0:cb:fc:c5:
         28:a5:e6:28:a2:8a:91:b3:65:ef:6f:db:19:aa:70:37:d8:be:
         11:21:2b:d6:e1:83:3c:5e:07:67:18:46:c8:b8:e7:f3:9c:cb:
         40:4a:40:84:02:7c:cf:75:d9:34:93:3b:35:ff:e6:85:dc:4a:
         1a:74:df:f9:dd:b4:56:76:24:3d:6c:60:cf:64:f1:16:b8:7b:
         a8:00:22:75:89:4d:5c:00:08:f6:15:55:90:3c:bd:0d:96:3e:
         62:e9:ab:a9:65:32:eb:06:d5:d2:10:82:7d:25:c2:fe:c2:73:
         3e:95:e2:d5:d8:b3:5e:6e:11:91:e7:9a:37:8e:83:dd:2f:b4:
         42:79:83:f7:53:86:41:bc:ba:cc:ea:5d:ac:d9:c9:72:12:57:
         25:13:76:b7:95:62:90:10:b4:51:9d:8d:fd:5f:a0:28:e6:a5:
         b8:76:51:a6:ce:24:47:9b:29:bc:50:57:1f:a8:b5:90:c2:98:
         b3:ed:60:25:c8:e3:f8:af:19:91:95:79:15:60:b7:f2:fe:1a:
         39:97:15:6b:2b:8b:2a:53:c4:1c:e6:86:78:ad:50:b8:83:98:
         25:f3:b1:e2:75:03:b9:a0:5b:00:dd:c4:8a:d2:6e:d3:37:06:
         41:f9:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----