Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File:                     1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier:          PiU2GnXE/Y2d21b8CARBrCwgZ5AZA7vEtRkGXxtYS8o=
Subject key identifier:   08:C8:AB:38:08:69:68:31:37:0E:AF:DA:AD:85:2F:48:1F:95:12:C6
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer:       /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial:       01962F749A72B3E52A0AB41B5C2477B71440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number:          14A9
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: jKuIDcuGWiZgbPQc8V6TYh2f00ZngUJpJvyqxSCiqlk=)
                          2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9a:72:b3:e5:2a:0a:b4:1b:5c:24:77:b7:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=08c8ab3808696831370eafdaad852f481f9512c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:96:01:e5:00:e7:68:e0:2e:e3:7d:48:21:
                    fc:b4:e3:3e:aa:23:9a:49:b6:51:17:6b:1a:e9:e3:
                    2d:e8:cd:1f:0a:f9:38:a3:b5:c5:87:3a:fb:9b:82:
                    90:44:1d:b2:e3:7d:54:b6:21:02:27:0c:a3:41:4e:
                    e0:a3:3e:ef:92:07:68:4b:6f:d3:a0:e4:d9:0f:1a:
                    17:6c:1f:d3:59:58:d7:71:ce:d6:4f:46:bf:2b:17:
                    56:84:cd:73:5c:be:ff:b9:a2:1a:fc:5c:c9:0c:a7:
                    60:28:88:d8:36:3a:58:37:63:1c:a0:46:cb:e3:0c:
                    f4:c9:a1:fc:9b:6a:92:81:a3:24:29:4a:95:f9:59:
                    88:b2:8c:c8:83:bd:e1:c4:39:ee:a6:13:a3:53:bd:
                    5d:bb:92:3a:1f:97:99:25:81:75:90:22:db:61:6a:
                    92:d9:1f:54:00:77:a5:64:ef:b2:e0:a4:03:72:82:
                    90:df:0f:8d:77:cb:6e:67:c7:ba:ed:cb:67:d0:d1:
                    84:61:f1:9c:2c:bf:12:5a:84:26:98:16:39:0c:23:
                    08:cd:bf:e5:c6:76:51:23:64:e1:6b:31:35:bd:3c:
                    fe:82:28:02:df:99:82:2e:c1:46:47:25:44:68:4e:
                    53:04:c7:52:ff:59:27:59:20:2c:1e:46:66:d6:8e:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:AB:38:08:69:68:31:37:0E:AF:DA:AD:85:2F:48:1F:95:12:C6
            X509v3 Authority Key Identifier:
                keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:04:14:c1:e2:64:27:e6:7c:7a:22:a8:12:f8:5e:18:77:78:
         28:62:07:2e:0e:b2:23:a4:00:da:82:c8:d2:b3:9a:b6:ad:6c:
         2c:ad:18:f9:3f:e2:09:90:a0:9b:1c:2e:e6:34:6c:b3:90:d8:
         24:bf:21:40:5c:db:33:b2:71:98:61:bd:2b:d2:45:29:96:90:
         3d:d1:83:81:de:28:8f:2a:0d:63:50:e6:49:3d:bc:ea:4e:63:
         b8:67:27:8f:23:97:9a:70:f0:f0:95:b5:29:b5:4d:56:84:00:
         67:0a:13:69:8e:fe:02:ba:db:70:9d:7b:d5:9e:63:19:69:dc:
         04:c0:44:5d:fe:4f:86:49:ae:67:f6:6d:c7:a0:51:e6:30:c0:
         94:38:7d:4e:50:a6:08:9e:63:f1:2c:39:4e:c1:56:83:ac:e1:
         e8:26:f8:f4:ec:2d:89:87:58:4e:e7:8b:1c:03:f6:1d:0a:5c:
         49:8a:6d:da:ce:a6:b5:63:0f:09:d7:ac:4b:e9:2c:9b:b8:08:
         48:7f:d4:58:e5:01:24:6f:6d:fe:22:8a:bb:7c:6a:14:12:c9:
         a3:ed:c2:c3:9a:42:78:cd:82:5e:49:ef:3b:50:f8:cc:84:1a:
         38:8d:e8:91:75:9c:5b:d6:2a:1a:f6:c2:1b:3d:71:ee:56:8c:
         b0:7f:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----