Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File:                     1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier:          5liaEG35TRaJaLtxAZBlEO4Rx3ltbs6Zvn/kkNmAz1w=
Subject key identifier:   36:D8:90:2C:68:13:A7:43:D5:E8:6C:FE:1E:A0:E4:7B:FE:FD:0F:55
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer:       /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial:       01962FAB2EFB89B656095E046C6B47C0B63A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number:          031B
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: h+Wu2vLlFek34NaV5vxC78OQrSJzT9ezlJK4LHY+kSU=)
                          2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:fb:89:b6:56:09:5e:04:6c:6b:47:c0:b6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=36d8902c6813a743d5e86cfe1ea0e47bfefd0f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:cf:c6:71:f8:5e:18:22:a7:fd:6a:eb:08:
                    1b:77:a2:e5:dc:25:36:94:34:04:65:93:b0:a2:da:
                    7f:8e:63:00:f4:30:2f:6a:a1:fa:2c:c8:99:04:18:
                    d4:30:39:08:d5:a9:b5:f0:e6:ea:a0:8f:c8:3a:d7:
                    4e:61:bb:7e:aa:99:cf:20:02:1a:cb:69:b6:78:3b:
                    93:9c:86:03:d4:53:d3:01:fd:c6:8f:a1:b1:76:4b:
                    c4:44:76:d1:40:59:da:ca:c1:ca:7b:da:e3:e1:99:
                    ff:6a:6c:de:ae:a5:2b:7a:7c:ed:2a:c9:5c:04:1e:
                    1d:07:ed:dd:80:55:26:4b:47:a8:11:c9:7a:30:ee:
                    a8:4c:5b:0a:e6:93:f5:da:f1:b5:64:59:bf:05:a2:
                    1a:07:be:6c:0e:9f:4d:aa:0c:a5:90:4b:96:f2:57:
                    fe:4e:29:17:ec:2f:0b:a8:5e:65:d2:d9:e2:ef:d2:
                    62:cc:19:99:7c:31:9e:81:04:86:73:e9:5d:d4:53:
                    69:49:a5:0f:0f:a8:7b:4d:86:8f:56:a2:a5:26:93:
                    1e:f3:6c:c6:68:3e:f3:b0:f9:3c:83:90:82:10:8e:
                    23:4d:a3:f9:15:b6:f1:7d:2c:71:29:0e:b0:c3:5c:
                    01:c8:db:d0:5e:08:a6:d7:de:58:52:e4:f5:f1:4d:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D8:90:2C:68:13:A7:43:D5:E8:6C:FE:1E:A0:E4:7B:FE:FD:0F:55
            X509v3 Authority Key Identifier:
                keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:a9:c4:20:26:f2:9a:03:46:f0:bd:3e:2e:83:4f:a6:1c:
         16:53:4a:50:59:5b:1e:7e:0f:f6:da:6a:0c:bc:d7:be:48:59:
         be:88:50:14:ee:29:47:c2:a6:29:71:76:6f:64:60:26:da:48:
         29:f8:07:e3:72:39:3c:dd:b4:e0:ce:40:bc:c8:f6:62:ef:bb:
         3d:bb:d8:90:4a:72:d9:e5:1a:c6:06:49:11:a7:e7:c8:ca:80:
         56:14:3b:c3:15:81:9f:57:7f:ce:08:e6:dc:7f:e4:b7:0b:10:
         01:d1:bd:18:89:4e:33:a0:a9:98:c8:29:10:70:ff:45:40:c6:
         f4:52:52:99:3e:9a:2a:69:e3:2a:34:54:db:4f:dd:06:9c:7e:
         2b:3d:f3:80:df:b4:7d:0e:63:23:e7:ff:75:2f:d2:d7:51:e1:
         63:63:a6:47:c0:78:26:44:4d:42:0d:ae:b8:08:31:00:da:d3:
         9f:85:f5:1b:91:fc:08:e5:23:79:79:96:30:90:b0:ef:8c:ba:
         7f:0c:ef:94:f8:ea:c0:74:74:af:92:76:c0:ca:8a:8d:e4:21:
         a9:d8:fb:8f:be:d7:a6:ea:b9:d8:a5:6e:54:fc:cf:4f:b0:7e:
         c7:07:de:0d:22:d5:13:36:18:a2:e0:c1:10:7d:da:5c:18:11:
         3c:e2:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----