Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File:                     CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier:          5JFKGnkfmEXdaUfFpuVnuqB63xgGPDOAUfHoyW6BcT4=
Subject key identifier:   76:81:0D:C2:42:FD:D9:99:B1:F6:76:4F:96:A9:60:A4:51:5B:E8:CB
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer:       /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial:       01962E9901B53A922F803F6E98EC7D2161DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: Xmy92j5q8KvDw0yettSsBopaQGHq7bNPKE2exrfZdfo=)
                          2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:b5:3a:92:2f:80:3f:6e:98:ec:7d:21:61:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=76810dc242fdd999b1f6764f96a960a4515be8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:1c:70:c1:12:bd:80:93:c9:90:28:53:fb:
                    f6:7d:cd:c5:33:d4:8c:39:69:5b:32:02:d1:e5:45:
                    fc:57:42:ea:cb:21:f1:88:1c:af:9b:01:03:6e:d8:
                    47:c8:1d:ce:6f:f8:ff:18:61:3b:75:4d:b7:e8:8d:
                    9e:2e:2a:41:26:95:83:b9:17:b5:56:22:5a:50:fd:
                    83:aa:89:97:25:cb:58:d8:a4:9b:76:3e:13:a1:43:
                    9a:40:66:dc:7c:dc:a4:01:6a:57:1e:67:9d:d5:85:
                    eb:12:c0:22:45:cd:52:93:37:27:75:20:81:e6:17:
                    b5:d6:c4:f7:18:be:39:23:31:9c:0d:63:a1:37:34:
                    cd:9e:78:15:fc:79:e3:1e:fb:8b:06:11:5a:44:34:
                    af:ff:41:04:4c:bb:1a:86:ee:51:02:7c:e5:32:4f:
                    05:29:e5:88:68:5e:10:63:45:fb:e8:19:be:00:27:
                    15:8d:38:99:d9:e2:37:35:ef:62:5a:58:5e:2e:ab:
                    63:19:65:d8:46:43:90:96:00:8e:8f:d8:ad:6d:42:
                    dc:1d:3b:b8:16:4c:1c:31:69:4c:ac:30:ca:cb:ae:
                    2b:3d:4d:7e:0c:6a:02:77:ab:72:11:a6:f1:48:97:
                    a9:26:c3:15:b7:48:2c:6f:5c:de:4a:10:05:79:46:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:0D:C2:42:FD:D9:99:B1:F6:76:4F:96:A9:60:A4:51:5B:E8:CB
            X509v3 Authority Key Identifier:
                keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:10:8b:30:bc:0d:8f:3f:be:d1:dc:58:00:fc:84:ed:bb:
         7a:41:5a:d8:d9:fc:cb:97:a7:f4:9a:42:70:9b:57:b2:f6:86:
         7d:9c:f5:ec:ac:c2:0d:04:4f:4b:5f:22:ae:e8:c4:13:94:bb:
         33:df:66:f9:2a:5f:54:19:26:6b:80:66:40:d0:30:42:2c:8b:
         b6:5e:e8:d0:b5:b5:c1:14:5f:29:95:09:21:ae:34:af:ed:49:
         d5:91:6a:ce:21:e9:d3:44:3b:ec:d2:c5:53:eb:75:cc:1e:24:
         b2:c7:3b:c4:d9:60:93:ef:c6:ec:fd:c6:53:63:d7:bf:89:8b:
         53:24:02:da:8b:54:89:74:fa:fe:e4:4c:b0:f9:54:f7:d2:79:
         0f:ea:45:14:55:a5:1d:c9:f7:ab:3d:73:0d:ac:d8:0e:a8:cb:
         6b:b5:04:91:00:0e:08:3b:d9:4c:da:13:c6:0a:a3:00:58:76:
         bd:da:99:87:d1:a5:5c:ed:61:33:de:15:09:ec:96:34:8d:87:
         ba:51:33:c2:c4:a0:78:72:21:59:3a:48:c5:7f:51:77:52:fb:
         a5:4c:5b:8f:39:59:6e:27:89:40:81:95:eb:0a:c0:c0:9e:6f:
         c7:9d:77:39:54:4d:bf:e7:91:ad:6d:c3:50:08:a0:9b:09:f7:
         d0:42:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----