Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File:                     1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier:          pv1ePM23uvenSE0liFtHSTPtenmOayJUwy0Meu5GFtk=
Subject key identifier:   9B:96:9C:82:77:17:36:BF:33:E2:93:3D:40:13:E3:81:E5:03:11:0F
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer:       /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial:       01962ECF8DA98EBB63CDB62874AEC20C9A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: y9DWPeYBHC9Vl2m9ZxJTWEGoT1tDogOta68v5yA/dzw=)
                          2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8d:a9:8e:bb:63:cd:b6:28:74:ae:c2:0c:9a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=9b969c82771736bf33e2933d4013e381e503110f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:11:5f:e4:06:c3:3c:e5:04:94:23:cc:d8:
                    6a:0e:ae:00:03:8f:33:74:8d:28:c1:80:35:2c:10:
                    6f:c4:30:ba:64:1f:cd:e4:c2:9f:4d:f0:cc:7c:d9:
                    65:a6:b3:51:74:ce:ef:78:eb:82:1b:56:ab:4c:f3:
                    89:03:12:cd:02:10:5f:f5:21:b9:b9:42:b0:d2:2c:
                    16:01:0f:d2:22:81:6f:9d:21:bc:db:d6:f7:59:98:
                    d3:45:34:f7:56:30:7b:31:dd:23:fd:48:2a:ae:49:
                    ff:97:33:07:af:f7:52:36:ff:8f:71:6b:f8:12:d6:
                    0a:76:d7:55:05:69:17:2f:d5:a4:19:50:5c:b8:6d:
                    01:6d:2f:b6:53:0e:33:45:b0:8a:73:d3:8d:ef:35:
                    1a:0c:13:94:de:72:b6:05:de:e3:bd:ec:f0:5f:af:
                    b0:23:8e:70:21:64:2c:a0:4f:91:1b:27:89:9f:f1:
                    4a:fa:7d:8e:3c:25:8c:8c:dc:66:bd:c6:7a:7a:c0:
                    65:37:30:4d:74:1c:ca:15:b1:e5:3b:18:fa:f2:62:
                    3b:2c:54:d4:d5:91:12:53:cd:dc:6d:db:35:c9:a8:
                    5b:4a:39:37:51:dc:ab:12:b5:27:c7:a5:1b:22:0b:
                    fd:e3:11:e7:6b:29:aa:64:bd:f2:0c:01:2b:8c:94:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:9C:82:77:17:36:BF:33:E2:93:3D:40:13:E3:81:E5:03:11:0F
            X509v3 Authority Key Identifier:
                keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:56:f9:ad:a5:c7:f9:f4:8c:60:10:6a:96:d5:78:b0:7d:ed:
         e7:6b:ab:92:ab:2c:20:88:25:63:7e:c9:5f:3c:07:44:29:85:
         07:37:0f:b1:39:26:fb:d1:05:df:6e:07:9f:f4:d0:c7:71:96:
         e0:97:d3:08:7d:83:4d:04:16:b0:0a:0d:f7:bf:e7:fc:0b:71:
         3e:b4:32:48:ec:ac:16:63:1b:80:78:96:f4:21:7f:96:f5:59:
         39:45:cc:6b:f1:68:23:bd:ae:e6:e6:79:1f:b1:ec:e8:c3:46:
         df:38:77:fe:5f:a2:67:72:14:94:16:93:85:0c:8b:8e:c0:01:
         3d:4d:1e:f8:7f:42:78:6c:d9:17:32:11:3c:29:c3:91:f0:a6:
         8a:bc:45:4e:16:44:4d:09:31:1c:86:ca:04:9f:0e:b9:f2:f0:
         3c:9c:32:f2:81:9f:72:db:04:14:fb:e5:63:88:b6:ae:aa:43:
         0c:2f:31:82:18:9b:39:ee:f1:cd:7a:ac:9c:4e:30:3a:2a:44:
         4e:c5:57:fb:ca:99:34:db:e5:81:76:0f:0d:1d:2c:2b:14:23:
         47:ab:52:4a:74:dc:18:c7:50:a2:d9:70:60:9a:58:71:aa:a3:
         37:5e:92:0e:1b:fd:74:26:82:96:ce:a7:ab:af:ac:e9:1e:5c:
         1a:7c:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----