Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File:                     k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier:          HQXAVThuUybsZ8pYs/kQf0pTZfaJKq8vni/fEMS4MW8=
Subject key identifier:   1D:A0:F3:39:92:44:D6:A3:E0:AB:C7:BC:96:CA:00:37:35:24:5A:02
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer:       /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial:       01962DF3AA45EF99DD21B0ED08FA8F93E254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number:          0927
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=)
                          2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: ZzdtRGs/7N4XpsV/YmuoF9L87Y73gMtoRnsVuiQ9rqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:aa:45:ef:99:dd:21:b0:ed:08:fa:8f:93:e2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=1da0f3399244d6a3e0abc7bc96ca003735245a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:ab:7f:81:7e:ec:7a:26:1e:6c:d8:15:2f:
                    78:c5:cb:e6:ef:70:b4:63:a0:82:20:96:d9:f2:fe:
                    d9:ff:0b:a5:28:5f:06:ce:d0:29:72:c0:29:45:94:
                    d6:7a:32:be:2b:34:e3:be:df:fe:45:18:91:ad:d4:
                    6f:4b:c3:4f:0f:21:24:2c:f5:d8:5d:ff:60:ec:b9:
                    40:d6:94:28:8f:fe:0f:d0:27:8d:23:67:1d:6e:2c:
                    a8:97:88:4c:6a:5b:8a:a3:8a:06:13:11:5c:c2:8f:
                    84:2e:6a:f7:75:f1:b8:9e:a5:37:e0:e6:d7:3a:2a:
                    05:54:e8:0b:89:92:23:d0:90:f6:1c:74:d3:b4:a8:
                    05:16:30:92:cf:bd:e6:f4:09:d9:0d:2e:14:45:e9:
                    96:dc:08:9f:c2:db:bf:85:9b:58:ad:9a:8a:d7:24:
                    41:de:a6:ab:49:58:91:0c:26:27:2e:c2:49:f9:87:
                    f4:c4:6b:10:f9:22:47:10:4d:15:f6:74:54:06:6c:
                    52:b7:50:9e:c5:77:8e:38:57:03:e3:ba:0c:f3:19:
                    2d:49:83:e7:50:96:47:e7:1a:22:e1:3a:49:bd:aa:
                    39:47:0b:60:c2:b3:c3:9a:b5:21:b5:cb:3f:0a:69:
                    b3:9f:e8:2c:80:9a:c6:37:cc:3d:3a:a0:d4:71:11:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A0:F3:39:92:44:D6:A3:E0:AB:C7:BC:96:CA:00:37:35:24:5A:02
            X509v3 Authority Key Identifier:
                keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:65:9b:2b:3d:f6:2d:20:6f:b3:1d:5d:d6:fe:99:32:4b:
         b6:44:14:df:ed:80:57:92:95:7f:af:c2:4d:18:2c:6b:df:cd:
         6d:be:48:9e:c8:64:fd:4b:dc:2d:8a:34:25:79:d5:d0:c6:79:
         57:75:2a:2b:d8:d0:a5:d8:90:90:1a:d1:f9:ba:98:52:05:4d:
         4d:00:6e:c7:3c:10:50:13:cb:24:c2:9b:6c:3b:95:d1:15:87:
         cd:37:ef:b6:c9:f0:24:d6:3d:7b:1d:09:f1:9f:f1:bd:db:ea:
         cb:ac:06:1e:da:af:61:90:26:e8:9d:f0:e9:8b:b0:1b:a9:76:
         9f:5e:ac:34:5a:46:4b:1c:b5:bc:10:25:73:3d:d6:cb:f6:6e:
         09:a6:16:85:76:44:c1:86:01:79:d2:f9:e1:e5:8d:0a:a0:d1:
         91:f3:d4:0b:22:20:13:d3:c3:e3:cf:56:b1:20:77:3f:a6:74:
         da:f3:a7:e6:d8:5a:c1:d4:ba:b6:83:51:3c:d9:77:b7:5c:d9:
         ab:c4:9a:81:7b:a0:98:83:f0:f7:4b:93:33:05:88:86:1c:81:
         4a:fa:33:0e:8b:0b:c5:ee:18:2b:d8:f5:84:88:a0:03:5b:76:
         c2:e4:e0:78:af:60:7b:e6:e8:a0:72:0b:d9:53:3a:eb:50:4c:
         f1:52:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----