Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File:                     lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier:          0C127T4dXUGVVV0Uj0xsWW3XJUTmZBff0g2nw70gp3w=
Subject key identifier:   91:F8:42:BC:64:BE:21:FE:F7:AE:DC:59:CA:13:26:B1:A0:33:89:1F
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer:       /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial:       01962F742F260465D3A29B574382FAB05F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
                          2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: p8v+MGCdJvBO6UmkVqzoBgFAn5AoS/ry4HUVRUwNgzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2f:26:04:65:d3:a2:9b:57:43:82:fa:b0:5f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=91f842bc64be21fef7aedc59ca1326b1a033891f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:f9:7b:59:33:af:26:4e:41:78:b2:b4:67:
                    1f:93:82:aa:36:51:61:8f:5f:0d:15:b7:b5:f6:7e:
                    db:55:3d:b4:34:a5:44:11:9d:0d:bc:e6:e0:7a:de:
                    f8:69:e3:18:89:13:64:10:45:2a:97:47:4e:d8:e0:
                    d5:bd:8a:59:57:5e:b1:9b:43:08:3e:84:a2:cb:5c:
                    27:8f:d6:52:f7:64:c1:b7:12:d7:db:91:e7:f8:14:
                    5a:09:60:72:bf:6a:32:82:20:41:a5:fe:8a:f8:56:
                    0c:cf:dd:b7:44:6e:6c:57:5d:08:97:1e:34:48:e8:
                    46:3a:44:c0:62:c4:2e:cb:1a:a7:53:3a:3c:74:6b:
                    f8:bc:60:1c:0d:28:da:39:13:ab:04:36:11:57:84:
                    9d:5e:77:3f:59:ed:ef:4d:1b:fc:2a:e1:fb:66:78:
                    6c:b0:cc:35:1d:53:d7:8a:24:a8:3c:23:53:23:43:
                    a7:a0:ad:e0:54:07:4e:25:ec:ce:7f:6d:0c:9f:94:
                    71:95:12:fc:00:e2:13:18:e9:c5:de:c7:2a:6f:6b:
                    49:ed:ef:2d:f6:4b:22:8e:9e:2f:34:da:c6:c2:d2:
                    30:73:e2:ad:8a:86:53:5c:2e:eb:74:50:58:90:97:
                    bd:d1:3f:09:f8:b9:a2:44:53:a7:e8:29:90:e0:44:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F8:42:BC:64:BE:21:FE:F7:AE:DC:59:CA:13:26:B1:A0:33:89:1F
            X509v3 Authority Key Identifier:
                keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:aa:3a:57:95:ab:20:b6:87:bc:f7:e4:bc:e4:e3:5f:a0:
         3f:2a:31:8f:5f:e9:84:46:64:a0:23:9e:fd:87:b6:3f:70:8b:
         3e:3c:3a:97:51:6c:d5:1b:32:26:e4:60:51:49:b2:14:f0:d0:
         42:b6:7c:fc:82:89:dc:1b:5b:08:6a:4b:98:98:7f:88:02:07:
         66:c9:98:1d:34:fb:f0:33:3a:b4:ca:c9:41:4e:34:5c:11:26:
         65:72:d1:b6:17:75:99:a9:f3:e1:37:3c:22:69:a1:12:a0:4d:
         e6:7e:87:c3:a3:aa:c6:6a:af:12:ca:ea:e3:c2:77:e4:df:38:
         fb:7a:e2:4e:78:2d:18:a0:83:3c:23:2b:a0:d6:d5:55:42:3c:
         10:00:a8:fd:c6:4a:fe:1b:8b:74:10:a4:12:bf:31:3a:d1:45:
         9b:13:ed:61:33:1c:6b:b6:14:b3:5b:f8:44:f4:fa:ac:bd:5d:
         b0:85:13:06:bd:e5:b8:43:8b:de:12:67:78:2c:b5:dc:19:c5:
         87:0a:a4:58:91:88:3a:a5:13:b2:c9:94:cd:42:ee:b9:19:40:
         35:8a:4a:97:e3:33:5b:bc:a6:41:d4:3c:9d:6b:4d:f2:b2:f8:
         92:46:5a:5a:1f:58:ed:09:4a:29:20:75:e8:e2:fc:17:75:9d:
         91:4e:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----