Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File:                     lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier:          0pJ3vWqyWd6dKYvud2XovWJPs3LiU9V8b6z7oF+QdqY=
Subject key identifier:   6B:C6:00:08:D9:97:18:3D:1E:08:3B:C2:A9:4F:0C:D0:04:5C:5F:AC
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer:       /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial:       01962DF3EAC02F78522BB2A01809D36CD653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number:          0F10
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=)
                          2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: E5T6TGy3DAC5DmAOUtqkpccxT9j47lUsttI3cOiNr+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:c0:2f:78:52:2b:b2:a0:18:09:d3:6c:d6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=6bc60008d997183d1e083bc2a94f0cd0045c5fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:63:d8:01:c2:b5:5d:07:f3:f3:0e:d9:0a:
                    a5:56:46:5f:f0:ee:9b:e4:25:9e:54:4a:59:4a:0f:
                    77:a8:f7:c4:c3:11:62:a6:ab:b3:f9:a5:55:b7:ba:
                    57:ee:5a:4d:12:2d:2d:45:93:17:5f:69:a0:5e:c2:
                    32:61:13:1b:77:4c:ca:a5:52:76:11:b6:f8:b9:70:
                    c4:16:de:ab:ec:80:89:ac:ac:3a:75:02:0d:5e:95:
                    32:ce:89:25:5f:3e:42:05:6a:b8:75:c9:e8:cd:37:
                    2e:eb:04:2e:7a:ce:e9:ec:02:bc:9d:2e:70:56:ff:
                    60:41:a9:92:61:8c:5f:c5:e0:73:2d:81:4b:73:fc:
                    ae:c4:05:53:ac:2e:b7:fc:11:87:38:90:25:12:9c:
                    4b:7b:62:4d:bd:8f:58:28:78:ac:64:7e:57:d0:33:
                    39:15:03:49:96:76:48:77:86:46:dc:2e:2c:1c:88:
                    be:e4:11:e8:cb:91:08:b7:c0:09:c0:3e:25:8b:a3:
                    0b:47:e5:b4:87:cd:74:fa:5e:63:56:96:66:6f:5e:
                    c2:ad:23:db:14:42:68:6c:dd:6f:ee:fe:05:0c:7e:
                    cf:f5:64:74:a6:a9:ef:39:ae:0e:a0:d8:39:e4:7b:
                    88:ba:43:47:4d:8d:ca:3a:9e:19:7b:4c:30:1a:aa:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C6:00:08:D9:97:18:3D:1E:08:3B:C2:A9:4F:0C:D0:04:5C:5F:AC
            X509v3 Authority Key Identifier:
                keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:37:e3:9b:d4:64:24:31:02:b4:06:b1:12:89:c9:e0:ff:aa:
         b9:9b:d2:7d:e2:22:82:f4:39:e3:2b:70:c7:38:ca:84:ca:ac:
         d0:66:89:f5:fd:49:55:fc:6e:38:99:52:56:e9:b9:30:a3:fb:
         73:1e:b2:20:94:55:ab:14:cb:34:eb:11:54:4c:22:46:10:e6:
         6e:89:a0:7b:74:5b:f9:79:0b:47:8c:6e:aa:e9:d2:b8:0a:49:
         5d:94:54:66:8f:07:30:12:22:60:e3:34:74:ff:1e:fa:0a:67:
         9a:59:79:bf:a7:28:28:f0:5e:8c:0a:a5:9b:af:9f:27:6a:93:
         6f:c9:3f:19:c9:84:7f:c2:10:82:97:cc:d5:e0:f2:6e:27:b5:
         55:20:43:ca:21:98:8d:ab:7a:4c:19:c0:47:77:a9:52:4f:60:
         85:c3:3f:b6:6f:ec:aa:3d:2e:88:c9:59:7c:b2:71:48:fb:02:
         3b:83:66:d4:8e:41:42:7c:5c:88:78:24:bc:cd:72:31:a4:3a:
         c1:37:af:69:6a:47:c7:00:95:18:97:49:97:6d:59:40:3b:e3:
         2e:dc:57:e4:a8:d0:3c:04:89:61:53:07:33:4b:d8:cc:83:35:
         78:e4:8f:b8:28:9a:09:a9:a4:3a:73:39:00:69:09:c6:12:91:
         08:76:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----