Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File:                     lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier:          95K4z8VRL6Ciw32Cw+EuOBlXqf/tO/cc9vssMous+FM=
Subject key identifier:   AD:BD:82:08:F3:E2:38:16:C3:E8:F3:63:74:26:80:1F:B4:8E:96:F5
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer:       /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial:       01962E61EBADDD6268BA4E1AF084C883C8B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number:          09DE
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: cJPUTKGhm9-SQMKgHrLgVtONres.roa (hash: YPKASk/Rrx47xThFCgmIxwpwkFMGL6Ambuvld828dUQ=)
                          2: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: BL5YIeEWXji2F7xjj9g/XRBh1NGH/NCvXREcFySfwf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:eb:ad:dd:62:68:ba:4e:1a:f0:84:c8:83:c8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=adbd8208f3e23816c3e8f3637426801fb48e96f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:53:d1:30:76:2b:44:ba:c1:9e:90:46:46:
                    3e:74:b0:14:09:91:63:e5:e8:29:d0:85:9d:5b:52:
                    ea:3f:36:98:de:86:e3:2e:e8:c0:fc:79:af:64:19:
                    c4:ea:e8:6a:f3:06:24:f1:55:d6:91:43:c2:6a:c0:
                    06:74:62:28:a2:6d:9e:1a:33:a0:ad:9e:01:e5:66:
                    c1:54:39:11:fe:a9:b5:10:b5:9f:27:82:9e:b3:a8:
                    09:20:a7:61:af:94:89:c7:fa:19:56:24:a8:da:7f:
                    c3:83:25:df:6f:b4:ef:80:ac:74:6a:08:4d:5f:c6:
                    cf:58:af:e5:9f:21:10:89:9c:a9:d3:a4:7c:e9:dc:
                    8e:02:a0:9c:3a:2b:03:f5:d8:99:bf:7b:86:8d:b1:
                    fb:2b:f9:0c:4f:e3:7f:81:14:f2:9e:05:a3:4f:56:
                    91:db:5a:25:e0:2c:ea:43:0a:9f:91:96:2f:c8:28:
                    b4:40:67:85:eb:35:39:0e:c4:3f:08:68:8e:c6:fa:
                    7a:ad:d7:3c:85:24:1b:b2:06:db:36:8b:08:65:af:
                    3c:7b:96:1f:8e:71:29:18:79:b9:3f:07:9e:e0:6c:
                    dd:3b:87:8a:dd:18:15:6f:f8:3d:20:09:43:68:22:
                    79:8e:ce:a9:fd:34:35:86:78:d3:57:19:98:df:a4:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:82:08:F3:E2:38:16:C3:E8:F3:63:74:26:80:1F:B4:8E:96:F5
            X509v3 Authority Key Identifier:
                keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:0a:c3:07:fc:b1:36:83:f7:b8:ce:68:b6:12:b0:c2:08:
         cc:6f:2f:41:c6:7c:70:89:98:ff:d0:59:7d:61:1e:75:1d:4f:
         a4:dc:f6:53:65:8c:09:8f:a7:e6:9b:54:e0:92:23:53:bd:ce:
         df:62:4d:cd:9c:7f:a5:15:c1:fe:93:58:dd:43:8d:24:4e:30:
         28:49:34:de:07:cf:f5:7c:8d:a5:51:9a:d9:8a:b2:0e:90:dc:
         32:35:6d:f6:5a:63:73:f1:f7:d6:a2:2f:50:2d:d0:fb:7a:81:
         19:74:3c:da:62:ca:93:a4:70:a7:56:16:3f:8e:be:f8:43:f6:
         90:12:0a:2e:07:7c:30:43:9c:31:32:4b:24:8a:ad:87:fc:8e:
         21:16:97:d9:3b:52:b1:2c:90:b1:5a:b9:1b:b3:9a:d7:5b:3f:
         24:ed:d5:e7:4a:99:62:40:47:05:b1:7b:0f:3b:01:c5:80:3a:
         60:84:57:b2:d2:f2:7b:97:92:b0:a4:4d:c0:00:c4:2d:b3:12:
         3d:ca:4f:87:7d:f7:a5:7c:8c:03:44:e9:a6:46:20:59:4d:48:
         4c:78:2b:4c:5e:87:9e:af:0b:be:58:ea:48:85:be:9e:d8:ce:
         10:a6:4f:35:cf:b1:72:af:9f:d4:33:4f:26:dc:1a:07:bd:bd:
         4b:13:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----