Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File:                     irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier:          KpR3+burtmOIX8Q+UZwL4G8rBkSypI3M0agJQlBBpNM=
Subject key identifier:   63:48:98:80:BE:7C:55:E7:47:F0:E9:48:23:57:ED:2F:0B:A4:67:AB
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer:       /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial:       01962E2B48FCAF1470E801CDFF23207AA5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number:          093F
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
                          2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: ecgbXgigXlr1HVXIvNbDxByCq1IsgyTxgDI4hMzR8dA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:48:fc:af:14:70:e8:01:cd:ff:23:20:7a:a5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=63489880be7c55e747f0e9482357ed2f0ba467ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:23:8b:60:b5:10:62:ee:96:43:3c:2f:19:34:
                    28:54:4c:22:3e:29:21:00:6c:b5:04:83:00:71:36:
                    fc:9a:6e:b0:a9:27:13:11:69:2f:96:e1:7d:eb:bc:
                    05:12:ef:de:ad:a8:16:16:24:0f:a2:c3:21:b5:f2:
                    3e:38:00:af:22:6c:91:3a:91:cf:00:ba:d6:42:e8:
                    a5:91:d3:1a:4c:a6:94:cd:af:79:70:91:d7:12:2b:
                    f6:89:63:f2:c8:84:e1:77:24:a9:c6:cc:c0:60:a0:
                    b6:98:66:c7:c6:2e:b6:cb:bf:42:c8:56:12:fb:a0:
                    31:d1:ba:b3:44:26:ad:aa:f1:b4:3a:4b:01:d2:3c:
                    c2:40:a5:a8:91:22:7f:e7:1f:d6:53:14:d6:fd:e0:
                    9c:3b:b8:13:b6:d3:f3:cd:63:1d:63:05:24:81:c9:
                    80:a3:36:a2:0c:f4:34:99:22:a0:43:80:d3:2b:33:
                    50:1f:ec:e0:bb:52:cc:b3:43:13:8b:3f:d7:ca:ad:
                    dc:03:44:d1:3c:84:9a:dd:c4:6d:e0:6d:f1:18:b7:
                    20:8e:47:f8:10:9d:95:af:01:3c:49:ed:38:46:e1:
                    db:12:4c:f0:ff:7a:cc:90:6b:ea:96:7d:a4:33:21:
                    6d:d2:4b:ed:40:7c:58:79:3f:29:ae:64:62:a9:89:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:48:98:80:BE:7C:55:E7:47:F0:E9:48:23:57:ED:2F:0B:A4:67:AB
            X509v3 Authority Key Identifier:
                keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ff:25:49:ee:64:36:6c:d1:6c:79:4c:67:8b:0b:c6:ed:e3:
         d7:5c:ce:18:c8:13:51:32:f0:42:70:d9:06:3e:0b:c5:5b:da:
         0d:8f:bb:a0:26:54:ec:f4:2e:02:bd:0e:1e:df:bd:67:84:df:
         0b:69:f1:d5:be:89:7f:33:5b:cd:1b:6f:2b:c1:10:82:49:fc:
         de:ac:14:0b:8f:1d:db:a5:6c:76:0b:95:12:36:4b:12:7e:3c:
         d0:63:ac:48:f1:1d:27:9f:0e:fb:15:d7:df:8f:4e:f7:7e:ae:
         db:b6:a4:76:aa:95:db:90:6e:f3:91:6d:25:1c:ef:7d:53:19:
         fa:08:24:1d:d7:ae:70:65:68:a7:79:00:80:77:ad:4e:1a:25:
         e8:e7:d5:41:23:cd:96:c2:8d:c1:2d:e8:fb:68:8e:da:00:74:
         67:bc:43:04:17:8e:63:7d:a8:8b:09:b6:eb:e9:51:1b:78:f1:
         01:40:e9:01:5d:bb:e0:79:35:70:a6:72:04:be:ce:9c:8a:8e:
         b3:05:9d:e5:16:ec:3f:7c:72:2f:ca:7e:6e:87:ac:0a:5c:86:
         9b:c5:6e:2e:9a:ce:c0:6d:9d:2a:6f:14:bb:b2:5d:a2:1a:dd:
         36:18:54:6d:41:01:46:fe:ca:58:17:56:08:f1:c1:06:32:00:
         d7:8c:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----