Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File:                     0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier:          iI1nZS+XPCh9887+qG4+I64+SoGIGlWR2rK6iZG9ueA=
Subject key identifier:   2D:40:B7:60:8D:34:F8:FE:7E:29:68:10:69:C6:57:AC:3A:CD:48:D7
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer:       /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial:       01962F070DF163FD21A38CC9D51B601444FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: ZVNcJO+xKYZuEnKuZ8w5Y/KH5X4KcyM3j7NbaW9Skpw=)
                          2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
                          3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0d:f1:63:fd:21:a3:8c:c9:d5:1b:60:14:44:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=2d40b7608d34f8fe7e29681069c657ac3acd48d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:82:fe:79:76:f3:ef:2f:f3:3e:f7:bf:36:
                    4b:34:83:ee:13:b1:d4:38:c3:c7:ed:e6:98:ad:f6:
                    a7:88:89:f4:45:5f:1a:26:66:fd:79:f6:5f:a8:6a:
                    3d:0a:40:e1:bf:bd:6c:06:39:ef:99:dd:8b:9a:0d:
                    eb:59:d8:e2:be:c7:6b:d9:c7:76:55:4a:51:e5:5b:
                    07:f9:eb:21:ef:1f:6a:69:6c:a8:27:8d:bb:41:a2:
                    e3:80:33:23:3f:9b:e9:42:7f:c5:cc:48:49:bb:06:
                    f6:fb:39:78:91:7c:e7:b0:e4:6f:2a:bd:3c:5c:71:
                    d4:4f:7c:fe:94:d7:5e:1a:70:61:e2:a8:ef:4f:af:
                    41:16:b2:63:ee:99:b8:e4:51:75:fd:62:4b:73:ba:
                    2e:03:32:03:63:4c:31:33:b5:41:61:3f:84:c5:e6:
                    52:a3:b9:ad:27:51:d9:23:2d:87:84:b6:63:17:74:
                    96:da:2c:cb:23:db:7f:b4:46:b9:56:7a:04:67:37:
                    74:98:0e:0e:ce:07:6b:15:af:5f:6e:bd:b5:3b:54:
                    4b:82:6f:c9:1a:5c:b2:46:e8:a5:48:ae:66:bb:a7:
                    47:fc:cd:c3:f6:33:f9:62:39:7e:41:a9:c7:a5:71:
                    ff:07:64:11:e9:9c:d8:28:6c:7e:ae:e9:56:64:70:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:40:B7:60:8D:34:F8:FE:7E:29:68:10:69:C6:57:AC:3A:CD:48:D7
            X509v3 Authority Key Identifier:
                keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:df:0c:7a:e1:06:b4:5c:70:a7:e4:11:0a:c0:98:2a:d9:
         77:c3:d9:4f:e2:87:37:d6:0c:7a:33:e2:7a:b5:ad:c4:e1:56:
         ab:f5:71:98:c1:13:8d:5c:ec:b4:e7:7e:2c:86:a2:53:ee:1f:
         41:b9:07:9c:bd:be:a0:0b:a9:23:06:76:f3:21:a3:71:a2:52:
         36:16:e8:56:6e:7e:62:4e:39:71:83:2e:57:c7:0c:e5:f6:a4:
         f5:a7:c9:df:8a:8d:83:9f:99:1a:c3:24:44:11:ac:58:57:a3:
         e8:ad:58:4a:89:68:bf:3a:6f:69:3a:68:82:11:02:fa:19:ab:
         d5:56:c9:82:14:9b:97:2b:96:fe:9b:79:e3:e7:41:04:3c:c1:
         1c:19:18:51:0c:7f:0d:9f:c8:af:65:d5:de:dc:be:de:4e:3d:
         f4:46:1f:4e:69:8a:41:18:fc:7f:2d:dc:7c:ed:69:90:b0:9e:
         4b:09:2e:8f:b0:b6:15:be:dd:96:63:7f:25:46:79:37:0c:8d:
         7d:49:5b:17:29:cf:19:47:19:33:72:24:f4:c5:29:f4:1b:8f:
         48:53:51:a6:88:9a:49:b7:07:a9:ad:25:32:b6:77:46:6d:6f:
         b0:70:19:e3:23:46:81:a3:8c:da:5a:03:89:89:14:f7:53:e8:
         df:22:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----