Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File:                     1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier:          4ez/55HWH3KUMkg9E61ZUH6rdXdsO1fFhFq9Ffb3X0k=
Subject key identifier:   E1:A0:F8:79:DD:E6:9C:DF:86:AA:79:87:DD:CC:6E:CD:8B:91:56:E3
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer:       /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial:       01962E99C4DD4CC119D848FDC0E213F989C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number:          09E9
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: oEq9XCXr25xyEjgocYPt62WHJuNxeOYz3uDGi5dRCuM=)
                          2: 5hvMdLYnfsXTSuV237JH9FWLZN0.roa (hash: +NNavIzbs+bo3gjOvC6npGrxT+kBJ6ESc9cDAGFiB9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c4:dd:4c:c1:19:d8:48:fd:c0:e2:13:f9:89:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=e1a0f879dde69cdf86aa7987ddcc6ecd8b9156e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:56:3e:89:49:79:5a:13:68:f4:73:ba:bb:
                    12:9d:6a:41:8d:d8:f5:b4:75:b6:73:5f:6a:b0:f1:
                    0b:36:ea:bb:a2:e9:81:1e:fe:d1:bc:3c:39:28:40:
                    d7:ea:82:6e:fa:6a:b6:53:5d:00:fa:7e:6e:83:08:
                    9d:58:47:4e:20:de:5f:2f:b6:d4:1e:ea:89:3c:ad:
                    0c:48:c4:be:e9:ad:4d:bc:3d:b3:27:89:29:c6:b7:
                    91:2c:e2:e3:0f:4e:60:8d:45:40:2c:26:1c:71:61:
                    6d:ee:d0:33:aa:bc:44:19:a9:9c:2b:e7:59:47:40:
                    b5:58:ab:75:a7:08:ea:34:48:1d:a4:b5:84:01:83:
                    9f:47:ef:51:eb:fa:6d:ab:16:52:8a:58:de:b2:16:
                    55:48:8c:e5:c0:d9:dd:92:e7:8e:2e:a2:49:5c:d3:
                    d2:6a:b4:19:a9:50:42:bb:0c:02:74:55:ed:a1:9c:
                    a6:9a:45:35:67:26:9a:26:f6:85:18:0f:fe:c9:c5:
                    ff:03:12:62:67:e1:4f:32:9f:bc:d3:b8:12:14:2c:
                    57:66:5a:9a:e3:29:6d:24:45:84:a1:7c:d4:76:ed:
                    e4:b1:06:cf:12:34:99:c6:7c:64:13:f7:5c:4a:0f:
                    e6:2d:29:c2:37:e4:da:6d:7a:21:5b:20:a0:bf:fe:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:F8:79:DD:E6:9C:DF:86:AA:79:87:DD:CC:6E:CD:8B:91:56:E3
            X509v3 Authority Key Identifier:
                keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:63:7c:04:6b:21:2d:01:c0:18:62:4e:f1:0c:15:86:73:bd:
         b8:7d:a5:6e:72:11:52:0c:04:a0:7a:4a:25:48:19:50:cc:03:
         b1:16:2f:66:89:9d:89:b5:44:32:d6:4e:24:8f:8b:f5:5f:98:
         e5:d0:1e:f2:b8:8d:03:2a:39:09:52:99:81:13:b1:c3:ed:f7:
         48:54:6c:4a:e5:a4:2d:ed:46:57:99:60:46:57:e6:f1:21:89:
         2d:19:a1:9c:d2:1b:82:60:cc:c9:32:d4:b5:0a:63:f1:b8:08:
         ed:67:dd:20:22:bc:1f:0f:d8:ce:f7:67:dc:6b:f1:67:60:e1:
         13:be:e0:3b:e9:6a:12:5f:67:4b:8d:a8:46:3a:bd:4f:61:99:
         3c:69:81:82:c5:cb:a6:58:6f:28:52:33:a9:6a:4a:a8:82:b8:
         e0:7a:15:4e:70:9f:ae:62:84:fc:96:22:c5:42:1f:78:ee:bd:
         fc:20:bf:71:36:59:d6:52:f9:1a:c9:bb:07:21:35:81:f9:78:
         90:44:99:ce:bf:c9:5f:de:46:06:2e:65:e4:ac:a4:16:28:6d:
         87:9a:a0:83:3a:5d:82:cb:1b:71:78:6a:6b:ab:d5:69:42:1b:
         c3:5d:40:0a:de:33:dd:6b:d5:1e:c2:fd:ed:61:8b:c5:97:50:
         de:0f:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----