Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File:                     lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier:          GWVRhRo7rjvelc62Y+NzCcbvNwDrMjLQxu/KqqGwF58=
Subject key identifier:   5C:3E:68:F2:3D:93:2C:03:DC:14:73:29:BC:E3:F5:F8:90:19:96:6E
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer:       /CN=9514d5a840049d442df377445394df719201a773
Certificate serial:       01962DF3E82F20BB01F88404808418044545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number:          0330
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: h0vy9KP5l8xr8yJ-2ncCcO3rvZU.roa (hash: WW+DmP6TLxBJVPgyfFOFc50eb4JwhFwUi3K7+OUSV3A=)
                          2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: hg1/bPretBwvXqZAR/vORyDWMkIA2q2aeR9sNByIAAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:2f:20:bb:01:f8:84:04:80:84:18:04:45:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514d5a840049d442df377445394df719201a773
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=5c3e68f23d932c03dc147329bce3f5f89019966e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e7:4f:4d:ee:ce:3c:75:d0:36:e8:e0:74:42:
                    86:30:b5:30:c3:df:8b:14:6c:dd:a6:cc:d3:14:2f:
                    9d:6a:72:2a:f8:92:93:21:af:46:a9:91:6e:85:e4:
                    21:e8:3d:4c:a6:7a:de:e3:6b:fc:85:9a:40:a0:08:
                    e0:58:99:7f:01:db:f3:1a:a5:7b:ff:ba:c9:a8:df:
                    97:b7:06:1f:73:30:b6:a2:68:d1:a9:02:e8:45:99:
                    1f:67:21:a7:69:ce:ec:42:19:c8:dc:82:2a:69:45:
                    f2:e3:1e:4b:64:01:93:a8:e5:c4:b8:0e:d7:42:33:
                    b8:9b:f0:a8:32:cf:5d:46:63:3a:0d:1a:17:8d:3d:
                    18:54:ce:89:57:f9:81:be:13:e0:d3:75:04:60:b5:
                    cc:3d:97:9b:69:df:14:a6:49:24:d0:c3:49:56:e4:
                    76:94:cb:70:51:77:f9:e0:02:c0:03:19:a6:d8:e9:
                    ea:01:c5:93:a0:18:80:4a:7d:46:9d:42:b0:e6:ba:
                    ef:4d:b8:28:2f:d5:6b:ee:87:67:55:f7:08:11:fe:
                    9d:77:a6:db:eb:0d:1c:4c:d1:5b:7e:49:68:cd:3d:
                    7d:6d:27:1f:17:ca:8f:28:84:a1:57:46:19:71:9a:
                    f1:95:3d:a3:95:ad:4e:9b:73:23:10:e9:1a:c9:4f:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3E:68:F2:3D:93:2C:03:DC:14:73:29:BC:E3:F5:F8:90:19:96:6E
            X509v3 Authority Key Identifier:
                keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:d9:a6:ac:84:e3:6c:16:c2:e1:e4:a6:5d:4d:b7:60:f9:
         8d:f3:6c:57:97:1c:7d:5a:73:4f:e0:c7:47:2a:41:41:43:b7:
         e6:b0:b0:e9:53:f8:2d:38:d0:1a:e2:78:c8:25:ad:2d:38:91:
         ac:dc:53:7d:7a:fd:dc:b7:22:70:15:9d:65:c8:ae:36:3e:57:
         ba:7b:e1:35:ec:2f:cd:74:71:60:99:af:46:23:df:0f:e7:26:
         83:3f:7c:f3:27:85:7c:63:55:79:33:52:36:2f:46:28:9a:9c:
         fd:fc:d9:67:53:3c:a6:d3:c5:02:37:1e:19:30:af:bb:b6:40:
         f4:4d:70:b2:6e:d3:7f:6c:f0:51:50:27:2e:ba:a7:2b:40:6f:
         5a:d8:40:41:4d:0d:67:81:6f:9e:83:88:a2:2a:78:78:e7:de:
         d9:29:43:b5:30:b2:9b:41:9d:18:b4:c0:16:b3:4d:8e:f5:3a:
         aa:93:80:b5:34:b6:6e:32:c3:cf:01:c2:0f:ae:7a:2b:a5:65:
         7b:38:51:d5:76:a2:e1:ca:b6:1c:b2:69:26:bc:ed:ea:ad:cd:
         e2:7d:53:2c:31:c7:fb:d1:f6:73:36:31:8c:64:dd:aa:b7:dd:
         9c:7e:17:4d:d5:48:63:42:01:a5:ef:73:d3:f4:ad:57:27:5c:
         0e:4c:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----