Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          P/Z6Qf4oNFqx80jWTf/5Xm/bEPtc+V7PCrcjTkVvRS0=
Subject key identifier:   79:08:6D:D5:D1:EF:09:1C:08:E6:50:C8:DC:1C:D4:85:9F:16:FD:C8
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       01962F3DC299EAED9CCFEF098C57302DDCF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: JulcRklY+pKg3xY8OzP/Ym4Wg6DieBmvk1YkpEwLY9E=)
                          2: 9p3RysO-CtOjkTkrDq-1QR8iEt8.roa (hash: 7EEdwfYjIsLQLyh8n9mT3oh8OfyTFAKQe+oB+lllHm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:99:ea:ed:9c:cf:ef:09:8c:57:30:2d:dc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=79086dd5d1ef091c08e650c8dc1cd4859f16fdc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:50:c5:eb:1e:09:d6:a0:d9:a0:c5:c0:8f:
                    62:f3:c4:ad:6b:48:33:c6:8b:1f:84:53:6f:82:c4:
                    7e:51:7d:ba:fc:32:08:70:1a:58:de:1f:54:93:e2:
                    6a:52:a2:13:a4:39:fa:b0:45:27:6a:76:d0:a2:81:
                    18:c3:7d:9c:ee:ad:e9:92:e1:5e:54:42:53:c1:3b:
                    fa:79:85:85:d3:ba:23:e2:28:1b:27:3a:43:b2:2c:
                    1c:3e:19:61:81:e7:ba:9e:ee:a2:88:ba:8e:45:aa:
                    a4:8b:8a:5d:ec:bf:82:94:1d:3e:1f:7e:b7:28:d2:
                    b8:3d:43:10:a3:67:ea:a0:a6:c9:a6:9a:91:3a:44:
                    3f:b5:65:f8:66:6f:6f:e1:c6:85:57:45:b9:87:4e:
                    80:1e:69:01:18:56:6c:26:f0:37:79:4e:90:90:3b:
                    94:b2:dd:39:d3:03:bc:f0:56:c9:9e:fa:01:55:a6:
                    7a:e2:0d:47:8c:e4:fa:a1:b6:f3:37:2a:79:51:07:
                    4f:d5:af:e1:de:08:34:9a:3a:ed:4c:af:90:e7:25:
                    73:47:06:e4:01:a5:41:97:17:90:1c:29:91:a3:20:
                    40:83:95:4a:64:09:30:be:10:5f:7e:f2:26:97:95:
                    05:79:3c:7d:fd:05:83:51:3e:f6:98:89:04:ac:98:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:6D:D5:D1:EF:09:1C:08:E6:50:C8:DC:1C:D4:85:9F:16:FD:C8
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:46:7f:2a:62:f3:22:e1:aa:e3:55:a2:40:eb:9d:6d:84:e9:
         f9:32:08:84:8c:d2:52:d2:f7:23:2c:d5:06:ce:b3:e0:d3:bd:
         e9:0b:1a:4a:86:00:8a:80:5f:d8:f5:e6:2f:f7:5d:2f:08:ba:
         cf:eb:44:68:49:7b:05:d9:19:ab:c1:07:95:86:e7:ba:04:ea:
         df:bd:62:7f:4b:a5:28:22:55:b3:7f:22:8f:9d:9a:07:e1:10:
         d1:6b:29:5b:fe:d0:90:3c:df:f9:be:0e:d2:29:63:43:68:bb:
         bf:bd:33:e1:2c:2f:83:67:de:a9:06:ca:96:e9:06:62:1c:17:
         ed:b8:63:2e:cc:f5:5d:b5:c1:2d:fa:3e:3a:09:15:3b:58:4d:
         25:e1:98:ac:46:cd:8a:df:91:11:50:00:c2:86:e1:fb:da:5d:
         9f:b3:29:9d:e6:7f:ce:36:f3:4d:d9:43:c9:db:df:8c:d1:41:
         8f:68:9b:51:39:c2:68:9b:53:d4:41:8e:48:dc:02:e5:3c:87:
         16:3a:b1:50:9b:33:c1:a4:0b:d7:69:b3:1a:de:6b:6e:9a:a5:
         e0:eb:be:2c:2c:c6:2d:de:af:7b:11:b7:5d:34:1b:04:66:40:
         f9:b5:47:d5:9c:25:82:40:dd:04:7c:3e:61:af:06:87:f4:17:
         46:6c:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----