Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File:                     iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier:          2HA8TkHXn0PKP51UUWnhRBc8O5Nao6INeOGu9MTMmzE=
Subject key identifier:   2E:D8:79:60:F8:14:60:BA:7F:2A:BF:73:68:E8:BC:E4:6F:28:F2:78
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer:       /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial:       01962F74BDFA7289C316187D35E9C5DC84F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number:          05D7
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
                          2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: +nuYwIBR4Y0kQZeOCagRbLoNWBwJNbt+C4Trt84UMMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bd:fa:72:89:c3:16:18:7d:35:e9:c5:dc:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=2ed87960f81460ba7f2abf7368e8bce46f28f278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:60:5d:f9:b7:28:05:e9:64:e2:ac:e2:a5:
                    06:53:86:91:7a:40:e3:f0:7f:c5:2c:6d:ed:5c:a0:
                    d8:04:67:08:87:cc:78:74:73:97:ec:0c:90:10:e8:
                    6c:9d:4d:5b:91:f6:8c:aa:6b:9a:83:c5:bb:8b:5b:
                    fa:37:b4:22:93:19:06:8b:0a:2a:18:9b:8d:c9:31:
                    c5:c4:9c:f3:cc:04:51:dc:f6:b5:7e:1b:16:d4:a4:
                    ae:89:ab:67:be:44:04:91:67:05:1c:72:91:1e:a4:
                    ac:33:71:1a:bd:b1:70:08:db:37:6d:16:e4:9d:16:
                    99:6f:9c:29:ad:f0:e3:a2:04:c3:4b:0b:15:94:40:
                    9c:18:da:aa:15:81:0e:df:7e:08:f5:9e:20:40:3e:
                    90:62:37:bc:a4:b0:53:9c:38:ab:83:a0:70:8d:fa:
                    b0:55:77:8e:ca:f2:83:41:eb:da:e8:89:48:78:ee:
                    c5:d6:4c:81:23:bb:11:56:bb:1b:59:6f:85:c6:d3:
                    9f:e9:a8:f2:98:81:45:99:7b:69:35:77:1a:ae:8e:
                    ee:35:fb:7d:86:db:d5:9c:81:41:52:5c:8a:e3:ac:
                    f8:95:f6:a6:a8:f2:35:2a:30:c0:50:42:96:97:a3:
                    e9:93:87:40:ee:b8:57:a4:14:09:54:b9:7c:ca:ad:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D8:79:60:F8:14:60:BA:7F:2A:BF:73:68:E8:BC:E4:6F:28:F2:78
            X509v3 Authority Key Identifier:
                keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:a0:e0:1a:ba:1d:cd:a9:10:63:7b:9e:77:41:2e:1d:79:
         05:5f:aa:58:48:25:31:50:13:a5:18:6f:8f:09:56:ba:5a:4f:
         5e:f3:52:76:a6:98:e8:f9:10:bb:28:51:2a:69:14:47:fb:f2:
         a7:b7:96:ce:39:fe:69:69:81:0c:fe:da:2d:99:f7:d4:94:75:
         d8:2e:41:6a:ba:e5:6f:21:d6:57:fa:c6:c3:8d:f4:8f:28:89:
         0f:46:10:89:9c:c6:d9:88:52:fd:95:ca:25:2b:e4:1e:10:50:
         1d:2e:5c:3d:ab:6e:78:2e:57:fc:ce:b2:ca:db:eb:a1:82:2e:
         70:26:32:f6:57:b4:26:45:b2:a3:41:f8:0f:9c:f4:cc:d2:05:
         ba:b3:4b:a8:39:a7:45:e2:84:fe:eb:9e:e2:36:0d:ae:64:ca:
         16:f7:a0:a7:7b:7d:6d:54:9b:b1:04:eb:25:48:d1:0f:a5:db:
         54:c4:ea:87:db:1a:7f:72:23:fb:f9:26:50:ac:c7:61:72:67:
         d3:af:ad:4f:1b:0f:16:ff:6b:e9:1b:2e:16:a6:89:94:3c:09:
         42:66:e7:47:74:1f:43:a1:3b:5d:74:41:25:8a:0b:50:ea:6c:
         cc:12:65:50:e3:cb:73:f4:40:2c:96:06:72:aa:67:be:e0:7f:
         56:14:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----