Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File:                     lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier:          trdBIaDMOEKgxLn2vpYsw6+Eyi+M+f64b1iH1t2H9c8=
Subject key identifier:   C7:32:77:3C:1B:61:53:8A:41:9C:FC:A7:3C:15:CA:9C:A5:6E:80:BC
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer:       /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial:       01962F3DD72F124B7339D8943D230F9F7952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=)
                          2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: xgDV3OUB9zjB7Y4oyHcC/c5tfviT4RTXJXc+fc97H+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d7:2f:12:4b:73:39:d8:94:3d:23:0f:9f:79:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=c732773c1b61538a419cfca73c15ca9ca56e80bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:4e:4f:6d:9d:a9:da:37:a3:03:aa:67:c7:
                    e4:34:7f:fb:a1:9b:34:bc:e2:1e:36:c6:21:93:1c:
                    8d:cb:22:cd:c9:9c:cd:18:cd:4c:ee:70:fc:7a:a3:
                    c5:76:0a:53:cc:ed:11:fa:60:e4:24:e4:c2:5e:2c:
                    54:7c:60:39:72:41:57:8f:c6:d5:7c:71:60:b7:96:
                    87:21:ff:a3:1a:c8:4f:2b:1d:0f:17:91:83:20:db:
                    20:85:75:f1:97:ea:ef:c7:71:8c:5a:11:58:cc:f4:
                    8b:4c:b7:df:7e:af:01:8f:56:e9:a4:0b:df:4a:b3:
                    69:43:80:18:7b:40:cb:ef:62:12:9d:98:93:72:3d:
                    42:ac:3b:ae:68:82:94:a5:10:2d:28:04:66:9e:4a:
                    c5:16:3d:6e:f3:d2:b5:a0:5b:48:7c:fe:02:fb:44:
                    ac:ee:86:71:90:d0:06:f4:ce:a3:6e:12:ea:8a:0f:
                    ac:95:12:6b:f6:40:d7:dc:3a:4e:a6:b2:13:bd:8c:
                    0b:cf:16:a8:32:1f:be:69:04:55:40:cf:48:68:b3:
                    13:2f:8b:54:45:d3:f4:04:21:43:cf:81:d1:35:9b:
                    78:f4:30:c1:14:d8:bc:11:51:5e:01:ca:18:ed:34:
                    cd:45:e9:ae:fb:62:d7:88:56:3c:0d:a4:9b:fa:20:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:32:77:3C:1B:61:53:8A:41:9C:FC:A7:3C:15:CA:9C:A5:6E:80:BC
            X509v3 Authority Key Identifier:
                keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:06:4b:34:ff:34:3b:01:ac:d4:29:39:b8:c0:57:88:69:
         a3:46:84:da:3a:67:8c:80:d4:0f:2e:b9:7d:2b:b6:26:c2:a0:
         ee:2b:df:95:1a:35:2c:e8:e5:33:9f:35:6a:98:00:74:89:83:
         90:14:58:25:17:41:0b:f2:57:4c:2d:d3:10:6b:f4:f1:a2:45:
         62:fc:2e:ab:d5:bc:38:86:2b:cd:cf:58:3a:27:47:cb:d6:93:
         5a:27:3b:22:18:a1:21:8f:06:f6:06:6e:63:9a:87:4a:5d:4f:
         eb:da:22:a4:30:9d:b6:1e:67:7e:d2:6a:70:9e:fc:d2:a3:8a:
         4f:a3:9e:44:35:19:22:53:a4:32:c9:24:89:b9:d9:89:af:91:
         d8:ac:51:61:00:1e:2a:85:88:67:3b:3c:05:ef:dc:3e:db:8f:
         3d:7f:9c:d9:a7:48:a0:7c:ab:0e:fe:ab:37:ad:44:08:d4:ab:
         90:5b:f0:f0:11:8a:4c:9c:18:a1:26:71:a7:92:49:a9:a4:ca:
         8e:0c:d3:4a:b6:5f:d3:ad:a1:b9:00:2d:ab:f5:3c:73:f2:d3:
         12:9c:c9:b1:a5:76:72:f9:c6:5f:1e:cb:fd:7a:19:4c:e8:1a:
         d4:df:49:77:2b:6d:e7:37:4c:4c:65:66:e9:20:86:02:d5:0c:
         e4:f9:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----