Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
File:                     ll4IgLPHvQuQpkwkTi-hzw030HI.mft (raw, json)
Hash identifier:          1bqkKOcEwXPCZgJkEM/zTIMbP8KMwXJKSiqnNLgRZ1Y=
Subject key identifier:   B5:81:41:09:DF:AE:01:39:7C:44:DA:55:1D:92:E6:F0:53:5E:5A:E0
Authority key identifier: 96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
Certificate issuer:       /CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Certificate serial:       019547EC4AE686BB7AF0DA1D6848F40B66E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft
Manifest number:          01C9
Signing time:             Thu 27 Feb 2025 15:00:22 +0000
Manifest this update:     Thu 27 Feb 2025 15:00:22 +0000
Manifest next update:     Fri 28 Feb 2025 15:00:22 +0000
Files and hashes:         1: JksTwBqMu6mir3iXItYAcZTkiBg.roa (hash: RpdxCkhqaoSpmsMLdu6NPf18xyekalTabGY7q5mIpGE=)
                          2: XR5EtNSJMICq3YbRtKFluRtEWv4.roa (hash: zdpy5fa6FzFGRXkI56ldRGEVpTT7+e5p/QUx0x6zPj4=)
                          3: ll4IgLPHvQuQpkwkTi-hzw030HI.crl (hash: Fk+C+UvpAgh/pE+NL7WDEK6q7bSwMy6a4lnIwoF163g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:ec:4a:e6:86:bb:7a:f0:da:1d:68:48:f4:0b:66:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
        Validity
            Not Before: Feb 27 15:00:22 2025 GMT
            Not After : Feb 28 15:00:22 2025 GMT
        Subject: CN=b5814109dfae01397c44da551d92e6f0535e5ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:40:7c:81:04:a2:af:5c:f0:b5:48:35:de:
                    6f:c5:7b:4f:0e:36:73:2f:89:d3:4f:c8:02:e1:22:
                    96:53:1c:3d:fa:3f:8d:f2:c4:b2:6f:a0:d4:9c:60:
                    6a:1b:0b:f6:ce:fb:53:41:67:5e:f6:47:e8:cf:61:
                    60:f4:21:46:6c:ad:0f:50:ba:67:53:50:10:4c:f1:
                    6c:99:a0:c8:2e:b5:dd:aa:10:cf:c7:83:69:cc:a9:
                    14:f3:85:aa:55:04:f2:a8:14:74:12:29:2e:92:1f:
                    d4:7c:b7:f8:f8:60:37:dc:79:2a:8a:0e:cc:4e:56:
                    20:aa:62:ba:cb:7e:db:be:59:8d:83:47:ac:7e:ff:
                    9b:92:42:e1:ae:99:44:05:3b:1d:03:0d:0a:92:24:
                    4c:40:b6:e7:fe:ed:a1:b0:c8:69:81:01:62:63:e2:
                    76:7e:08:7d:e6:aa:82:39:3d:12:8b:38:9a:a2:62:
                    4d:f2:d8:d7:52:53:22:c8:c2:54:a6:d0:71:49:de:
                    47:0c:08:68:1b:a3:33:22:d6:a4:4f:0e:3f:28:e5:
                    7f:07:dd:63:19:32:82:b3:19:07:52:c6:c9:aa:d9:
                    e4:86:d3:dd:ad:03:f8:be:a9:d4:a6:42:af:6a:c8:
                    c9:95:6a:fb:48:08:18:76:85:b1:42:51:93:de:bf:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:81:41:09:DF:AE:01:39:7C:44:DA:55:1D:92:E6:F0:53:5E:5A:E0
            X509v3 Authority Key Identifier:
                keyid:96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7e:60:d6:8a:d5:9d:18:1f:36:88:ab:db:e2:26:f8:6a:5b:
         75:87:44:b2:4a:ce:8c:59:4a:62:88:da:c8:37:94:94:57:85:
         d6:70:94:81:3f:f0:16:c3:9b:bc:32:8c:c1:7e:1c:58:55:bd:
         be:13:33:67:f5:b5:0d:7f:63:a0:5a:01:98:6a:38:74:5c:2b:
         63:6b:19:6a:79:14:61:4c:81:9e:4e:9e:b2:92:f8:0f:24:3e:
         ef:90:0f:65:2a:ee:5f:fe:3c:c0:d7:a1:3b:22:c2:a8:87:4e:
         32:f1:ac:49:88:a9:14:13:48:a9:9d:fd:75:4d:f4:9a:c8:56:
         e8:ef:d8:31:e3:41:e8:5b:37:6d:36:60:10:7d:94:7e:5b:03:
         30:6c:ac:6f:66:1f:f2:56:e0:27:f9:77:52:47:51:3c:5e:04:
         d1:a2:2a:62:58:86:bb:61:f1:6c:c6:a0:1e:b1:6b:7e:08:92:
         28:e7:d9:7a:da:50:26:60:0f:70:76:46:99:1a:bb:fb:89:c6:
         ce:a8:e1:b6:93:11:7d:5f:29:59:18:85:5e:5d:b3:ea:0c:81:
         c2:17:06:bf:32:a1:16:d6:e3:e3:32:0d:33:91:72:60:b9:c0:
         71:01:e2:63:5a:05:35:92:07:0f:d7:52:0a:42:70:54:9b:30:
         d3:93:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----