Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File:                     lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier:          JjM7UacG+yBpWMMsCaEjlJlv0GBsuAaX+5qwQHAeJHc=
Subject key identifier:   95:72:67:8F:25:BF:A8:31:D9:89:C0:4D:D0:46:E1:C9:D0:FC:C9:69
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer:       /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial:       01962DF3DA6AEE162D4B77DBD1CCCE41F5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
                          2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: FWhbwhb8Y8zCWgF6kyq1j2ZRguGpHcstUd9MyjdGoiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:da:6a:ee:16:2d:4b:77:db:d1:cc:ce:41:f5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=9572678f25bfa831d989c04dd046e1c9d0fcc969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f0:20:12:f2:e2:8d:bd:6b:55:06:86:1b:7f:
                    c2:22:db:b6:33:5d:ea:9b:76:23:a6:22:05:4d:58:
                    d4:ae:21:37:29:c8:73:3a:01:bc:69:eb:05:5e:1b:
                    25:00:d2:fb:24:71:fd:90:7d:a2:82:67:a9:76:e9:
                    d5:93:72:48:75:a7:df:6c:68:7f:81:6d:4a:b2:cf:
                    ad:0c:c4:0f:81:3d:89:7c:28:7a:cc:75:8a:5d:72:
                    31:59:b2:f0:31:e3:d2:8e:3d:a4:35:80:f1:68:fe:
                    c7:99:e2:b6:89:7e:ff:03:4d:1d:bb:18:88:78:f8:
                    fd:61:53:6a:90:da:39:af:73:62:e7:7d:51:33:04:
                    25:b5:e5:8c:d9:71:61:3c:25:0b:1f:79:1c:ae:6a:
                    52:4d:9a:51:30:18:3c:af:60:00:57:70:db:fd:e0:
                    57:bd:dd:30:ab:f0:60:82:9c:1b:58:74:c6:d1:7c:
                    04:6f:0a:4f:ad:88:36:5d:a9:47:a6:28:61:6e:52:
                    fa:81:7c:e6:b6:dd:93:8f:20:45:03:d0:6f:1e:29:
                    e7:18:b4:d1:8e:f5:87:e6:73:19:42:17:86:4a:4e:
                    81:4e:a5:41:c5:1a:36:f1:cb:98:c8:0f:5c:9d:84:
                    78:de:ee:67:c5:a6:d8:9d:c6:76:c4:fb:c6:12:cd:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:67:8F:25:BF:A8:31:D9:89:C0:4D:D0:46:E1:C9:D0:FC:C9:69
            X509v3 Authority Key Identifier:
                keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:50:13:50:4e:08:ec:96:ed:e8:eb:b6:b6:15:3e:06:25:
         ae:f7:1d:c5:4d:69:b9:a5:b6:2d:b5:05:62:8f:19:11:d9:68:
         c5:04:95:97:62:44:c7:f8:1f:b4:d7:c7:85:8e:33:81:7a:22:
         81:fa:3d:f6:72:9e:19:d0:b2:c8:6c:9c:cd:cb:5b:8f:92:01:
         10:ac:5c:37:55:0c:19:f5:c1:98:11:0d:db:6e:51:0d:76:f0:
         17:61:dd:3b:ed:8f:c5:6d:98:07:11:3c:30:48:51:a5:3b:ec:
         10:1f:bb:f7:de:8d:bb:5e:91:5b:92:80:56:5a:f1:0c:01:6e:
         16:e1:34:01:c3:59:17:54:39:40:fc:57:98:b0:78:f3:e9:6f:
         6f:69:59:74:27:27:63:4f:69:20:c9:29:17:ff:64:b0:38:d3:
         3f:6a:43:52:7e:50:20:67:c4:08:5b:21:2f:a3:35:92:bb:19:
         70:76:e0:a7:b5:ed:a0:e5:ea:20:7f:42:43:43:03:4b:a1:3e:
         4d:c3:68:99:29:4d:1d:29:97:c6:ed:ab:e4:fb:78:ab:2c:b0:
         ed:aa:9d:8c:a3:8c:b2:79:f1:c7:52:a6:9f:4e:5a:d7:9b:65:
         1b:ab:32:8b:bb:dd:69:1a:aa:3e:17:96:f4:9b:58:c8:a6:0c:
         8e:87:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----