Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File:                     Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier:          yUL+CCwZZ1jkqieIy6BofsTLyNO4WzxMwStftz9qMxo=
Subject key identifier:   AD:89:FC:15:2E:B7:0E:A8:D1:E7:E8:C0:07:4A:4E:72:8A:ED:8F:7A
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer:       /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial:       01962F3D515F346B4022E2FDE6837993CBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number:          093E
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: wfMpNuZN4TY3CuD4QEDWsKAZGHDqYAUTekO2Nx5/0xc=)
                          2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:51:5f:34:6b:40:22:e2:fd:e6:83:79:93:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=ad89fc152eb70ea8d1e7e8c0074a4e728aed8f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:56:7e:c3:21:1f:8e:c8:40:37:4c:c7:a7:
                    2d:ed:0b:3b:98:5f:08:c3:9b:5d:75:20:df:ae:53:
                    26:6c:bd:fe:23:5e:84:30:d8:2e:23:d2:e4:6b:67:
                    05:e8:cf:ac:46:af:32:44:7c:cd:e2:c2:94:89:5b:
                    fd:5e:80:3c:d8:43:cf:5f:81:3c:a2:28:bc:52:bd:
                    d9:48:70:f5:2e:69:fb:a6:4d:e1:b7:c9:a0:40:d7:
                    34:3d:fd:c5:2b:51:65:e2:ba:4e:62:ba:00:f6:90:
                    bd:81:82:a2:2c:4a:bc:21:32:17:3c:ba:55:9a:d6:
                    2b:15:46:a9:fe:ad:af:f0:51:91:51:60:3a:77:e6:
                    f1:e6:33:81:fd:09:1a:53:b9:b5:de:14:de:7b:fb:
                    bb:05:c0:24:1c:92:b5:67:05:03:18:81:59:08:c2:
                    71:46:84:34:ea:06:52:96:fc:f3:f6:ce:69:79:e2:
                    c4:15:e5:48:35:f6:ef:ee:21:71:e3:3b:e4:03:62:
                    e8:83:08:f5:5f:8b:24:59:de:84:ce:2a:76:9a:9e:
                    eb:82:95:e6:7a:9a:92:49:55:d6:cf:2f:96:ee:58:
                    8f:d7:af:ab:89:7f:a2:04:e3:db:e8:bb:70:41:aa:
                    4a:17:0d:38:8e:ff:29:e7:59:ec:1f:d1:da:82:8d:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:89:FC:15:2E:B7:0E:A8:D1:E7:E8:C0:07:4A:4E:72:8A:ED:8F:7A
            X509v3 Authority Key Identifier:
                keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:63:5c:13:68:89:1b:d5:07:e0:33:c2:28:9a:f6:49:07:
         76:91:e2:c8:6e:26:0b:86:5b:24:d5:15:b6:58:e4:b6:6b:56:
         aa:7d:0f:03:39:62:c6:68:9e:e5:51:ae:70:60:19:65:04:b1:
         03:f7:db:ad:2b:46:49:28:f0:f1:fe:eb:79:ad:88:61:17:61:
         30:dd:f1:47:f1:36:e0:20:55:08:5d:80:85:cc:93:7c:7c:8b:
         09:8d:e8:51:db:ce:f4:f8:44:91:52:ad:e8:b1:8d:c5:72:9c:
         81:b7:d1:2d:a0:d5:62:9a:2a:90:74:73:14:45:aa:96:fc:75:
         e0:07:39:02:2b:64:47:66:41:2e:13:53:92:85:1e:85:fa:4c:
         67:ca:36:78:6c:89:32:6b:98:bd:17:45:4a:79:06:45:d4:29:
         7e:93:06:70:a6:b0:04:98:ab:cd:7b:07:70:c9:49:23:d4:8b:
         00:9e:b8:41:cf:e1:2b:da:8e:1a:d1:4c:f6:ea:42:33:5f:ac:
         ba:cc:1a:69:4d:ba:ab:54:54:98:f4:70:11:8a:db:b2:d2:a3:
         18:19:4b:8f:50:c9:ca:90:9e:d6:e2:e5:c5:9f:41:3f:85:31:
         94:4c:d8:24:04:97:41:3a:98:cc:57:2f:de:c5:21:bb:5f:c2:
         94:ab:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----