Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File:                     mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier:          YfVmrLrqxFpaduQhp8+KLU/n8Rouf6n42a5ESUpdJn0=
Subject key identifier:   E0:54:BE:7E:EB:39:62:FE:3E:BB:75:69:5A:5C:49:80:C5:57:0E:4E
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer:       /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial:       01962E988E4CE3BA8230BCDF180F8D0E9750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number:          13CD
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
                          2: 5Sxq5_88aKl6Q1AixLmSpdxssj4.roa (hash: 930p4kPdeb7NPu1eD23W3ram0O2yZZYGtkILA0nswPo=)
                          3: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
                          4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: 1YuskbsBtaO53OyIspqq5uf/L2dxDjQx+gTCEAXuOJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8e:4c:e3:ba:82:30:bc:df:18:0f:8d:0e:97:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=e054be7eeb3962fe3ebb75695a5c4980c5570e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:34:af:30:03:28:c0:c8:e6:74:5b:55:b1:22:
                    bf:c5:83:01:16:e7:59:b7:dc:91:4d:2c:41:7b:1f:
                    27:42:19:45:a3:ef:54:8a:f6:19:cb:d9:f8:9b:06:
                    51:31:b0:fa:bc:94:ed:bc:d3:8a:d7:4e:16:ac:ba:
                    e3:20:1a:25:32:b3:82:26:b0:15:92:18:b2:b6:ab:
                    b2:ea:34:c9:02:28:69:5d:0a:9f:0a:bb:46:f5:76:
                    44:35:9e:bc:74:14:53:ba:34:26:53:9c:86:81:3e:
                    07:25:77:78:0e:3b:dd:fa:db:a4:85:50:13:5a:41:
                    ec:f2:24:11:cf:cc:23:75:28:32:21:57:fa:5c:3e:
                    fb:8d:72:45:5d:c2:cf:9b:39:2b:af:3a:c7:1a:a2:
                    99:8b:17:eb:85:54:e9:fa:73:60:ce:80:31:4d:17:
                    b1:4b:cd:c8:01:bb:29:d4:b8:89:86:13:25:f4:d5:
                    4f:99:07:79:e0:18:70:5d:58:59:56:91:70:8d:d7:
                    12:bd:fc:d9:c7:fb:54:fb:1a:b6:7f:41:8c:cc:eb:
                    2b:e4:b8:b3:e5:4d:ee:e7:8c:ec:7b:2b:d2:34:13:
                    1c:b5:18:0f:83:01:c8:87:94:12:75:c1:37:c8:9a:
                    fd:0c:b8:40:a7:63:f6:f6:d7:8b:1c:cc:35:68:7a:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:54:BE:7E:EB:39:62:FE:3E:BB:75:69:5A:5C:49:80:C5:57:0E:4E
            X509v3 Authority Key Identifier:
                keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:e9:19:26:40:23:ce:4a:42:42:53:11:41:5e:dc:bf:ed:
         f1:f9:54:f8:f6:ec:ed:c1:b4:78:1f:dc:33:1a:6a:0a:42:ad:
         d6:35:46:72:37:83:47:11:8d:96:41:61:ef:61:29:e7:81:9d:
         67:b6:da:0a:bd:19:55:c0:52:58:6c:b4:19:f8:f1:85:a1:41:
         71:5d:14:38:4f:8e:b5:16:de:9f:27:e8:59:7b:6d:01:3d:cb:
         78:70:2d:8d:49:c4:4b:42:60:84:a6:bc:c4:06:d1:db:7f:05:
         30:d1:26:87:44:8a:9a:30:45:87:7c:76:76:69:37:ed:5b:35:
         ab:46:dc:17:25:6a:11:ca:ca:eb:a3:2b:82:a4:a3:11:7b:fb:
         b2:99:49:77:a0:7b:1c:70:80:bb:29:24:3b:c4:ab:68:3c:60:
         2b:5b:f4:d8:29:28:3d:e1:63:04:e9:8c:a0:81:18:80:93:c8:
         bb:95:39:57:1a:fc:45:73:fa:da:56:80:00:46:fb:1d:4c:52:
         84:ff:2b:ea:72:09:04:42:f3:3c:30:6e:01:2d:61:b7:a7:41:
         83:80:7e:d2:bd:da:2e:97:41:26:99:33:d7:e6:76:66:8a:a1:
         02:0a:a5:4a:74:85:d8:4a:7e:d1:83:06:9b:d8:07:a0:b8:bd:
         c6:f0:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----