Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File:                     eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier:          n8MVxU3h9wvf9bnP2Zq0nAjDkHmQqSO0GiubjiwPh7k=
Subject key identifier:   42:17:98:01:15:69:AF:0A:07:6F:C4:8D:AC:58:84:67:F9:4D:74:23
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer:       /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial:       01962E9875BAED5AB81C607D8EF2C945D122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number:          09DB
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=)
                          2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: xCRIE3G5fs2KS8m01AeZSrSaS6ap7td2BEfaDqB87UA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:75:ba:ed:5a:b8:1c:60:7d:8e:f2:c9:45:d1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=421798011569af0a076fc48dac588467f94d7423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:af:38:09:97:74:e3:3a:3f:78:3b:58:82:
                    4b:07:96:d9:bf:78:b6:8a:52:02:af:90:99:3d:c6:
                    54:56:a7:0a:aa:4a:29:ad:58:a8:1c:b3:b8:5a:00:
                    2f:26:4c:60:82:02:b9:84:ce:95:e9:bb:c3:ee:d5:
                    ad:b7:83:f0:37:30:83:69:9e:a2:fe:0d:ac:5e:22:
                    9c:92:1a:ed:e8:04:d1:00:81:8b:f4:56:9d:64:d1:
                    33:5d:6d:0a:5d:f7:0a:29:39:3e:ae:72:a1:3a:b9:
                    a3:e3:de:a6:e4:c7:fa:6c:88:1e:ae:b6:55:4e:58:
                    47:32:85:9f:5c:24:ff:d9:7d:39:aa:83:bf:82:d4:
                    60:f6:1c:e8:a9:ca:49:0a:c7:51:cc:c3:66:bc:d5:
                    2f:aa:6b:57:5d:ec:8e:a1:49:3e:e3:92:a9:9b:2a:
                    ca:42:ee:70:94:8c:4a:17:a4:94:e3:2c:13:e1:9a:
                    a9:82:80:45:69:a5:2f:5b:e1:fb:61:40:56:09:75:
                    ca:b4:27:db:13:ad:35:87:53:47:5c:ac:60:76:62:
                    80:87:02:9b:96:c9:b7:e0:4f:b7:06:b0:11:24:8d:
                    76:4a:d5:53:45:40:66:58:03:1f:b2:68:7f:88:22:
                    90:d9:b3:8c:4e:cb:2a:62:57:ee:91:04:02:53:99:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:17:98:01:15:69:AF:0A:07:6F:C4:8D:AC:58:84:67:F9:4D:74:23
            X509v3 Authority Key Identifier:
                keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:a4:c8:b5:c3:f6:cb:9b:ab:ad:b1:99:14:b3:94:92:23:64:
         d0:88:17:5f:98:bc:b8:bd:75:2c:6f:60:f5:2e:0c:37:42:a3:
         f9:c8:54:09:1e:6d:f1:0c:79:ea:0e:4a:11:46:bb:6e:58:c7:
         41:67:9b:c7:96:dc:24:c8:dc:2d:40:63:8a:f8:c8:8b:14:12:
         d5:7d:e0:45:a9:8b:71:df:9a:51:72:45:4b:20:28:90:20:7a:
         22:1a:02:64:76:4d:20:55:a9:2b:57:a3:3d:0e:96:aa:03:b3:
         de:c4:16:14:69:1d:a1:56:59:ef:dd:3a:26:d4:a5:39:77:4f:
         30:4e:d7:30:db:2e:68:55:88:ce:63:75:49:7f:09:ad:68:3c:
         fe:90:ae:dd:cb:02:13:ec:ca:32:0e:dd:78:88:86:22:ae:65:
         20:64:44:4a:13:1f:f0:f3:56:cc:90:73:b6:74:fc:3e:07:08:
         fe:99:ae:06:a6:74:e0:82:df:c7:d1:d7:80:06:ec:c8:83:3c:
         0b:21:90:31:63:a6:50:b2:d4:96:0e:06:d7:da:fd:a1:cb:1c:
         34:e6:0d:63:07:69:bd:aa:32:56:71:61:f4:13:88:4d:2f:8e:
         52:6b:37:90:3b:4c:b0:7b:16:f8:66:06:43:47:1b:b0:82:a6:
         77:a0:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----