Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          kvg7rmvZt/uGwP5wHijNpzJ9+K1jsgm40FBeOFlRiro=
Subject key identifier:   EB:1E:46:72:4B:28:18:CA:11:39:1C:78:5F:54:7F:92:2E:4D:DC:09
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       01962E2B37AFB72CCB51FAE95296205039E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: L2MUXA7QcV2ktlXIcFADdZiK0+3KUydU+aloGF96IyY=)
                          2: zpGvhyYRAmjs5EUuaL_qNrktFtE.roa (hash: 24VotJmvmJDfDZLcY9ERb5W8a78zlapyR9WGVJQ5ABc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:37:af:b7:2c:cb:51:fa:e9:52:96:20:50:39:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=eb1e46724b2818ca11391c785f547f922e4ddc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:8f:77:2a:ca:cd:3d:3f:2c:19:4e:27:35:
                    78:4a:7a:1e:c7:2f:7f:28:97:d4:09:f0:fd:19:62:
                    0f:23:0b:65:d9:9c:74:41:8b:fc:72:93:3a:22:9c:
                    65:ce:c3:4e:c8:be:45:bf:cf:cd:ab:c0:8f:d6:bb:
                    08:95:1f:0d:4b:ef:e0:de:cb:3a:02:cf:e8:d4:ca:
                    69:1a:17:8f:79:e9:22:58:4b:65:f4:45:a8:90:71:
                    9e:c9:1b:84:9d:3d:9b:d4:21:24:64:e7:76:21:1a:
                    81:24:39:12:f0:9d:bb:f9:84:e7:7e:8c:85:fc:4b:
                    72:a3:90:a5:2b:41:78:4d:37:c8:54:6b:d8:39:3e:
                    f3:ce:ae:dd:0f:2e:cd:9b:f2:ad:d8:22:81:f8:0e:
                    75:5c:9b:36:c4:91:03:95:d5:8a:3c:0b:a2:c1:bd:
                    e0:87:64:ab:01:63:61:ec:ce:39:56:6b:29:ed:cd:
                    4a:df:98:57:de:25:fe:13:18:9f:ee:33:dc:bb:80:
                    53:26:42:17:46:ee:e4:49:73:ef:66:7e:32:e2:f5:
                    62:07:c7:26:36:d1:0d:76:a3:48:9b:34:bf:2e:d6:
                    9b:ad:ad:99:73:96:b8:6f:de:a6:1b:07:30:36:c7:
                    28:8e:a4:e3:cc:f6:12:10:16:66:dc:36:60:d6:5e:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1E:46:72:4B:28:18:CA:11:39:1C:78:5F:54:7F:92:2E:4D:DC:09
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:97:63:dc:5d:5d:29:6e:f4:84:1e:b0:a9:b4:3f:19:ab:
         c9:1f:69:ef:a0:05:36:6d:d5:4b:4d:87:18:10:26:02:fe:c0:
         a7:ee:d3:14:96:2b:a0:21:23:5e:60:9d:81:e7:ac:21:40:08:
         cc:f2:2d:4d:2e:dd:12:1e:7f:25:ac:8f:e1:7e:b0:29:5a:a3:
         0b:a8:b5:e1:40:c3:94:b8:19:13:7b:0b:84:c0:2e:60:a5:6c:
         57:f6:40:94:11:a3:ff:b1:99:df:2c:d1:22:c4:93:09:65:9e:
         e8:42:89:51:10:af:44:b7:98:ec:f5:82:1f:28:48:3a:db:9b:
         03:18:81:66:ec:36:6d:42:60:8d:98:32:f7:39:a5:90:a4:0b:
         45:b6:cd:59:20:0c:07:98:3b:6a:e9:f0:5c:e0:a5:20:5e:3a:
         74:e1:7a:8a:80:01:49:f2:1c:c9:4d:15:e8:82:ca:dd:4a:89:
         3e:26:62:04:e9:90:8a:5e:cc:a1:2f:47:f3:cf:0b:51:d8:2b:
         d0:ce:ef:82:12:07:f9:08:6b:84:65:1f:cb:8f:3e:b5:a0:dd:
         aa:a6:17:9d:34:3b:3d:6e:74:3a:b5:81:20:d1:1e:f8:ea:63:
         17:70:6a:87:39:50:b7:16:e2:de:5b:95:94:de:93:85:79:d7:
         e0:17:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----