Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          O5iaOgBbvI6eA0Sgi3SBIncgB/h4WTje4JxHViPfaBI=
Subject key identifier:   38:E4:19:D1:2A:34:A3:6B:21:C0:A5:2D:4C:BB:ED:01:D0:65:65:21
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       01962E6195F173F8738582D3D62435A19F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          1476
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
                          2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
                          3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
                          4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: zHWwUIBb8ZLQpwa2UiPCnnnlOFErtVDgTCq3IsbcWdY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:95:f1:73:f8:73:85:82:d3:d6:24:35:a1:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=38e419d12a34a36b21c0a52d4cbbed01d0656521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:69:7b:e5:a3:39:3f:d5:6c:5b:a4:b1:96:
                    45:88:6e:fb:be:6d:5b:85:b5:06:65:75:f0:e6:34:
                    38:c6:a7:f0:07:60:d5:d8:e8:ec:7e:6e:0b:50:13:
                    fc:a4:0e:87:16:a1:74:9d:67:a7:a5:82:5a:3c:80:
                    ef:14:35:2b:8c:fa:37:2f:75:bd:c6:ae:1d:65:2a:
                    03:53:9f:c3:89:3a:c1:06:6b:63:f9:f4:23:3c:a4:
                    e7:4f:37:bb:86:19:ff:a5:2a:4e:e2:cf:82:48:26:
                    ce:94:0c:40:31:1e:57:64:e0:63:32:fe:f4:ed:f2:
                    51:42:66:43:8d:44:48:51:75:d5:91:c0:85:91:99:
                    36:12:bc:7f:36:f4:22:77:f3:08:48:62:f3:3b:70:
                    21:75:b2:20:d9:87:ad:ef:cd:8d:3a:f4:1d:42:2a:
                    d2:a9:b7:02:b0:33:6b:13:fb:10:27:5c:92:0d:8f:
                    87:25:60:da:fe:2b:3f:e5:b2:21:03:f4:02:3e:02:
                    a0:d9:c7:ea:fc:dd:84:0a:49:d5:a1:42:4e:be:79:
                    c9:1e:11:37:21:22:d8:c7:7f:ff:8f:dc:f1:59:3b:
                    aa:6a:e1:2e:ac:20:1f:14:2f:85:54:17:fb:aa:2c:
                    fb:09:6e:1c:09:a8:6d:e3:31:a1:a8:75:f6:02:2b:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E4:19:D1:2A:34:A3:6B:21:C0:A5:2D:4C:BB:ED:01:D0:65:65:21
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:53:dc:cf:ad:60:1c:d7:fc:25:80:53:cd:94:e0:0f:33:48:
         9b:fa:cd:ac:cc:d5:0c:52:fd:b9:62:56:b2:f1:4f:ad:95:7d:
         7e:ff:4f:c6:fd:af:37:f9:9c:34:24:af:c1:26:31:52:18:ac:
         ae:26:22:70:3b:aa:e6:5a:76:e8:96:ea:8a:b0:27:76:e0:48:
         90:df:1a:ac:06:e0:e4:61:b9:75:9e:fe:e4:43:5f:d9:72:df:
         f7:60:f5:c5:07:80:8b:35:5e:a8:a9:40:99:d6:6a:10:c1:53:
         a6:2e:02:47:c6:12:95:99:06:7b:29:a6:d9:bb:df:a3:89:99:
         6c:19:1f:aa:11:24:d9:87:01:f7:ca:3f:cc:0f:f5:7d:03:a0:
         a6:f2:41:90:34:71:4e:f6:66:44:0e:23:9a:bb:38:91:f3:40:
         d7:5d:2c:4b:b2:4a:57:30:80:48:9d:10:11:13:43:a5:f6:ef:
         c2:60:c3:1d:09:0d:cd:88:f1:24:aa:0f:9d:ed:a7:2c:27:72:
         e5:08:17:24:19:e7:f8:4b:2d:7e:92:31:34:ae:f0:5e:eb:3d:
         0f:e9:a1:fa:5c:28:49:6c:90:70:11:3e:a2:be:2e:5c:48:78:
         e0:36:1c:de:a7:b2:6a:7f:64:fe:0b:c8:67:a4:70:fd:fa:0a:
         3b:07:34:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----