Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File:                     lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier:          5uV5MWJKTOGzG412FULO2ObGQp8PR1ulcfSBkBX9hhM=
Subject key identifier:   39:12:3F:4E:D4:1A:CA:28:8A:72:27:2B:78:0A:67:40:81:62:84:1F
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer:       /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial:       01962E998D6078684BB62B9EF2772EC4AB98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number:          02C6
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
                          2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: KeNDIsVDBYgPPmKbNqTl9il2ZHM3FOelIdgI8g1wgRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8d:60:78:68:4b:b6:2b:9e:f2:77:2e:c4:ab:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=39123f4ed41aca288a72272b780a67408162841f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:3b:e2:9f:e0:b3:38:6e:c6:52:60:fb:34:
                    65:ed:a4:75:97:56:8e:fc:f5:41:27:c9:23:8f:cf:
                    88:41:65:19:bd:45:ba:2b:ff:32:11:e8:ba:4c:a5:
                    da:c4:f3:cd:a5:cd:5a:0f:0b:d5:33:ea:5a:0f:2f:
                    db:02:49:77:7c:91:ae:56:0e:30:00:50:84:49:ca:
                    fa:38:b9:bb:4f:f0:7b:e8:61:d8:9c:0c:50:db:6f:
                    5c:e9:91:dd:5c:22:cb:58:e6:79:eb:58:8e:f6:0d:
                    94:ef:ae:a4:c3:03:bf:42:58:dd:b4:69:c5:3e:c6:
                    75:e0:69:6f:9b:57:8e:36:c3:4d:7b:0d:99:d2:1a:
                    6c:b0:f8:d3:52:ac:13:dc:a8:f7:c3:f3:fd:c1:51:
                    ca:ad:1d:a2:d2:3a:1b:d2:c5:11:f7:e0:0f:16:7c:
                    1a:9b:af:8e:92:54:f2:3f:95:5e:be:fa:a0:34:4b:
                    85:d2:cd:22:af:6d:b4:91:c2:6d:2e:1d:91:eb:71:
                    36:b1:8b:11:d6:52:58:80:87:af:15:31:b1:65:cb:
                    ed:16:f3:e2:65:ca:e0:c4:65:76:6f:07:f5:21:7e:
                    ae:97:b1:96:44:ea:20:08:46:87:2a:f8:fb:a9:33:
                    2f:a6:f8:47:3e:1d:31:1e:b9:51:8c:1e:6a:b5:f4:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:12:3F:4E:D4:1A:CA:28:8A:72:27:2B:78:0A:67:40:81:62:84:1F
            X509v3 Authority Key Identifier:
                keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:6f:7e:61:24:38:17:ad:75:d3:b4:6c:50:88:0b:76:2d:
         90:1f:c9:d3:f1:11:db:ec:de:18:4f:69:87:24:2a:ce:a2:3c:
         05:ee:e8:6b:90:ac:ed:bb:e4:89:cd:85:38:4c:e9:20:88:eb:
         9e:ba:8a:9d:a6:19:e7:02:ff:ba:ab:9a:5e:6f:e4:62:73:5f:
         ec:91:25:e5:7f:c3:78:3f:93:26:c2:78:e4:68:e6:54:7a:cf:
         97:98:2e:da:9c:85:7f:75:2a:31:33:00:72:9b:ee:35:d2:ce:
         d3:f3:8f:9c:e1:27:33:21:e8:e0:16:28:b8:6f:7d:54:b9:3c:
         c8:46:3c:02:47:fa:99:d6:52:89:9b:fd:06:ab:3f:fc:c0:1b:
         f4:5f:a1:39:87:0f:33:6c:26:de:96:e2:85:d1:43:a1:ac:db:
         ae:1c:69:1c:93:84:2d:03:ad:65:1f:30:dc:8f:2e:a8:a7:82:
         3a:d8:7d:75:a9:6c:b2:62:1e:da:eb:b2:88:4d:ab:4b:6d:b9:
         46:eb:24:b0:72:91:e3:da:81:9d:55:f4:e4:4f:69:29:09:11:
         87:69:e1:24:35:4e:0c:4a:79:02:26:74:2f:49:3e:04:c5:c8:
         4c:d1:a3:d5:2e:33:5b:77:52:9b:df:a3:24:2e:61:62:55:cd:
         41:23:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----