Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          GgcAmi5b/PHCYQeLwbt8OFoljsD/eDBlbYzR1ftT/uo=
Subject key identifier:   79:4E:CD:57:D5:61:38:F5:5D:AF:EE:D2:F3:A1:74:18:CC:BB:17:75
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       01962E61D93DC4824711610BD1B61D497B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          0D06
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: Ea3NlOzS+VdZMI9BsR8sDEg7DwsD2mtLMQ2A48ggxQw=)
                          2: cHDBlBO6N0ca9YSLdLpALyyHWaI.roa (hash: o2xngpUpZnDRvPeXgXjlZjCICvbC/BE21jFOWmBqYGA=)
                          3: iUk2qAaYanuhC0yHx75ofbbtDfw.roa (hash: 6NTe6e0s9TjAs580GSrWi1bA7imMCeeLHXSr5hAoGzk=)
                          4: mTa0tBmnc-EZQRSpAfUf53n7dTc.roa (hash: 1CRclX1Yx0St5CAEJDWGoq4O3N6WotLgVbncs/lahzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d9:3d:c4:82:47:11:61:0b:d1:b6:1d:49:7b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=794ecd57d56138f55dafeed2f3a17418ccbb1775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:c8:d4:25:ca:0a:bf:c4:0c:fb:eb:81:4f:
                    ff:bd:a7:01:bd:3e:9d:dd:c9:1d:a7:90:75:1b:29:
                    6b:0e:1c:3e:b2:94:d9:6c:a6:8d:06:73:96:e7:30:
                    4a:0f:ca:e4:d9:a2:3a:30:80:2e:18:52:12:ed:7b:
                    9f:69:f4:1a:8a:49:e8:f0:dd:81:e6:4a:80:a7:fc:
                    48:9a:17:85:b7:88:67:d0:e5:5d:99:69:91:0d:d7:
                    d0:11:50:16:6f:ce:2f:7e:fa:87:3e:66:c4:41:23:
                    d9:40:5c:4c:71:6a:bd:fe:e8:ad:03:2f:df:80:43:
                    c7:52:ce:0e:09:4d:bd:ea:a3:7a:7e:f8:db:cc:7e:
                    3f:2f:c7:a5:cd:63:50:61:9a:e4:36:81:41:8d:b4:
                    2d:99:db:c0:42:f5:c8:04:a9:ef:24:22:6e:84:5d:
                    36:3e:9e:c8:f1:06:42:d3:98:ae:e6:20:32:8b:0b:
                    10:7e:18:46:eb:e8:9a:3b:28:30:bc:87:4a:da:07:
                    f8:19:bc:f5:71:5d:63:d2:3c:7a:f3:d0:45:e5:27:
                    75:60:80:9c:f3:71:68:90:a3:23:65:91:04:83:1e:
                    1e:28:48:08:97:e0:29:82:3f:41:02:60:2f:f5:df:
                    82:1e:0f:f7:75:8e:d7:d7:2c:27:74:ae:76:17:33:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:CD:57:D5:61:38:F5:5D:AF:EE:D2:F3:A1:74:18:CC:BB:17:75
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:f0:2c:20:12:84:c7:55:79:e7:0e:23:0c:29:f3:b4:ca:
         82:54:41:8b:19:0e:60:bc:8b:5e:c1:92:2a:14:1d:f3:d6:af:
         4f:31:bd:a2:2e:6e:fe:6e:ef:0b:83:2f:87:93:6c:90:78:81:
         bd:d3:9a:1f:bd:a4:bf:88:42:21:9e:71:3d:64:93:e7:d5:1b:
         c0:2b:4d:94:ee:0e:6c:c1:bc:c0:04:78:cd:ba:97:ed:d8:7a:
         83:49:e8:0d:24:06:1b:cb:0e:bc:4d:1e:5f:d8:43:2d:59:4a:
         cb:92:3d:19:85:45:98:3e:01:3a:85:91:34:b7:6d:0b:c8:eb:
         1b:ac:6b:ec:96:71:e6:9a:cb:7b:e7:22:63:9b:37:73:ef:ec:
         77:bc:ed:b2:1e:b8:ba:85:ec:b7:8e:ac:e7:40:c6:ca:bd:be:
         bd:1d:b7:08:99:5d:74:be:4f:d7:67:e8:2a:84:0a:19:17:41:
         f3:0e:15:66:12:97:43:6a:2b:6b:a8:76:6f:d3:c5:18:4f:72:
         89:f0:95:75:3d:78:ed:78:7b:48:47:c2:f8:1d:f3:a6:37:92:
         d9:db:de:5b:a8:45:d2:20:eb:44:83:e5:36:3d:e0:03:77:ac:
         b5:98:96:e8:f0:3c:7d:5d:ff:15:d2:da:8f:2f:33:f0:e5:d5:
         6e:3b:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----