Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File:                     lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier:          tv0d6GV6YLOG3OKUzWq09MiEsq9UoaUS2YFqvIoXU5A=
Subject key identifier:   99:9B:40:82:EA:36:93:21:39:E5:FB:CA:9D:A5:A2:26:30:90:49:54
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer:       /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial:       01962F3D57418AFAE7932ED1579A54C76FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number:          0BC9
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: kzYVB3gSLFOX7VtiLIF4iUOgz3Gbg9B8oIdhRpkXqpE=)
                          2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:57:41:8a:fa:e7:93:2e:d1:57:9a:54:c7:6f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=999b4082ea36932139e5fbca9da5a22630904954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:5b:95:2d:93:5e:4e:c7:dc:07:94:a4:ce:
                    70:f3:29:45:aa:f9:af:04:c0:e7:24:a7:21:49:c0:
                    c7:0e:1c:29:6b:d4:0b:ac:42:8f:8a:a7:7a:9b:ef:
                    48:e4:3e:b4:f4:ca:c6:5c:e9:e2:55:1e:83:78:15:
                    7b:37:68:49:5f:e3:1c:db:80:8e:61:f8:61:0c:0d:
                    25:45:e9:fe:38:40:d2:85:50:07:58:79:93:5b:92:
                    18:66:4e:dc:51:67:47:07:47:96:d1:ae:7c:55:f2:
                    e5:2e:a5:b2:3f:89:18:cd:bc:39:eb:26:09:67:a2:
                    8b:d6:36:44:9d:5d:aa:49:18:b0:d7:2b:91:a7:b9:
                    99:a9:de:b4:f2:53:77:38:76:d8:84:5c:65:ef:d4:
                    b3:73:b8:6d:23:f3:67:18:c2:8b:95:5e:fb:06:2a:
                    e6:e7:e9:15:44:13:10:53:1d:eb:15:92:5a:0c:3b:
                    12:9c:a2:c8:02:8e:ef:cd:ab:f5:38:f3:75:4a:60:
                    9b:ac:c6:b0:78:eb:29:73:1e:17:ff:1c:c1:1b:2c:
                    3c:af:16:d3:aa:d0:17:2d:5b:ad:7b:24:ed:73:a3:
                    79:54:77:4b:f4:8d:04:87:ee:dc:cb:98:ef:9f:5d:
                    05:29:8e:a9:9c:bc:30:6f:1e:e8:81:b9:ec:54:1a:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:40:82:EA:36:93:21:39:E5:FB:CA:9D:A5:A2:26:30:90:49:54
            X509v3 Authority Key Identifier:
                keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d5:e0:23:87:18:79:0d:9a:24:c9:ce:47:4f:e7:55:46:31:
         c4:74:c6:85:d9:5f:7a:93:2b:11:2e:59:46:96:3e:8f:b5:df:
         ed:d1:0d:8f:b6:da:e0:a6:89:75:10:1b:4e:00:33:32:d6:6e:
         a1:7d:ba:01:be:4a:5d:06:14:24:07:93:a1:07:8b:03:47:46:
         2d:ec:0b:2f:34:b2:9e:36:72:cd:3f:4b:4b:2a:4d:cc:d6:57:
         7b:0b:0f:30:0d:59:48:f5:e7:19:0a:7f:4b:94:cb:0b:c4:52:
         8d:51:87:ec:39:a5:62:12:52:5d:39:06:b1:e2:38:a4:85:b7:
         4a:ed:7e:fd:81:7e:05:44:82:ad:df:85:dd:e3:e0:ae:4e:dd:
         91:80:e3:3d:05:7c:62:54:21:6b:2b:2f:4c:82:98:29:b8:3d:
         49:90:2f:da:de:8a:ac:37:cc:d1:f0:7b:53:60:db:e5:0b:aa:
         ae:f0:d6:15:c0:16:4c:c9:ad:e6:28:ac:c6:79:35:4a:b4:91:
         99:e9:64:7e:7e:be:f1:00:0a:55:d0:6e:57:ee:0e:1f:55:85:
         27:96:e0:55:cb:2c:8a:f1:22:83:06:41:59:43:74:86:5f:51:
         d4:07:a9:73:c3:dc:3b:38:73:5e:c9:bf:83:78:c6:31:7b:d5:
         7a:99:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----