Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File:                     lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier:          vmyiBPv7DJGMf6LDZQ8/NZE9AKvEmu+M/Rko7s1uZK0=
Subject key identifier:   1B:3B:7F:4F:43:24:8D:55:5C:27:06:B9:AA:30:C4:2D:10:67:E0:2C
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer:       /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial:       01962F74BBA60F194B9449917B6F6E7A6AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
                          2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: TopfRQ9IzUwStVqaoqfTr7X8tUIGvTWnLT7Cv2GaTAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bb:a6:0f:19:4b:94:49:91:7b:6f:6e:7a:6a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=1b3b7f4f43248d555c2706b9aa30c42d1067e02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:79:66:10:86:d0:7a:8d:b4:43:35:be:1f:
                    89:96:e9:78:84:0d:60:a4:53:93:d6:bc:6e:2a:fe:
                    77:dd:ae:33:02:13:0d:57:f0:55:a1:99:e4:f2:ba:
                    19:2c:20:10:fa:6e:d9:b1:c1:53:b4:15:55:28:af:
                    c3:18:28:f5:af:77:9f:f5:f0:f6:f1:23:c0:22:38:
                    97:f1:dd:8d:16:2e:67:a6:7a:17:e5:ef:e5:4d:31:
                    47:22:2d:4a:c6:f7:08:77:3c:6f:c4:cb:1c:2d:21:
                    ff:db:76:77:53:e8:0a:c4:02:f0:ed:11:20:1b:13:
                    56:d6:5b:76:cc:83:61:e2:d8:09:ef:b3:c4:65:98:
                    f0:0c:9f:42:4f:dd:61:16:68:46:cc:c1:7e:19:64:
                    00:a5:00:60:61:17:45:3c:a6:e4:c8:26:f2:f3:9c:
                    01:44:1b:72:c3:6d:88:57:04:ab:1e:4e:34:92:a5:
                    9f:b9:d2:a8:d0:bb:47:c7:c3:ac:27:96:0a:90:d0:
                    f4:e0:58:94:09:98:31:4d:b3:6c:06:5c:b4:f0:3c:
                    4d:13:6c:34:f3:6d:8c:99:40:0e:b1:74:5c:a2:6d:
                    57:44:79:0e:c7:53:a9:25:e0:de:db:a8:f6:cf:82:
                    22:de:1c:6e:e4:88:9a:a7:59:31:3b:14:a7:39:9a:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:7F:4F:43:24:8D:55:5C:27:06:B9:AA:30:C4:2D:10:67:E0:2C
            X509v3 Authority Key Identifier:
                keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:37:60:79:42:8b:95:40:50:07:ca:b1:de:5d:1a:84:01:
         8a:52:b7:c7:69:b1:a5:25:96:fc:a2:0a:e1:ec:0f:4d:24:c0:
         4a:32:90:7b:d2:fc:16:95:4e:1c:ca:7a:37:0d:e6:28:f4:4e:
         46:83:ba:1d:42:86:50:96:2e:db:b0:e3:00:5c:d0:0c:37:42:
         6b:a0:f4:64:fb:a5:83:86:9f:98:83:51:95:11:5b:d6:12:1d:
         94:5a:1d:09:4c:8d:93:61:b0:67:2c:42:f1:b5:e2:cc:30:9e:
         5f:cd:ce:19:eb:56:29:c9:53:eb:29:0d:15:6f:32:2c:84:5a:
         16:ee:7e:4a:dc:8e:2b:f3:8a:8d:8f:c5:bf:de:9b:ed:92:90:
         00:2c:d9:e9:a4:f1:58:d6:99:be:d6:26:40:c9:8a:a3:7f:cb:
         14:bd:a1:fc:97:b9:2a:bd:b6:af:ee:20:c9:2e:b8:3e:56:28:
         28:b7:e1:da:71:80:c6:cd:52:4e:ef:38:16:8f:36:6d:e3:a8:
         72:ec:ec:11:ea:2f:1b:82:14:50:60:31:b9:27:2a:c0:2e:c3:
         f9:6a:2b:5a:4b:5e:09:bc:af:32:89:9e:b8:9f:00:7e:c1:a6:
         a8:e3:6b:7c:f7:95:d7:2d:96:a9:67:ab:f2:47:64:50:17:d6:
         ba:0f:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----