Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File:                     ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier:          X9QHwE3/Z/6InhoGUI2oY7w/L3kReoeQlF3ZPaoqh24=
Subject key identifier:   55:CA:93:6F:61:4B:37:99:5E:23:80:21:A4:D1:C4:B7:88:96:AD:3A
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer:       /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial:       01962DF406890379FECFF056E26AB1FB771F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
                          2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
                          3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: KyDOTADOHBXkt1IhEj0qH8E8ICATPn7PlEYQmKdSXmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:06:89:03:79:fe:cf:f0:56:e2:6a:b1:fb:77:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=55ca936f614b37995e238021a4d1c4b78896ad3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:ff:1f:86:ab:77:f6:02:be:e4:80:31:bc:
                    00:b5:d1:13:f1:60:40:10:84:ae:28:a7:aa:28:b4:
                    82:0b:b9:7f:97:ec:41:5a:b0:78:f3:ab:79:30:5c:
                    30:c4:8e:70:cb:37:a3:c6:dc:99:55:1e:da:b7:6f:
                    89:b5:15:1e:1a:8a:0d:39:bb:d7:74:78:78:3d:92:
                    cf:20:6f:8b:f6:6b:13:d4:70:79:df:7d:49:b3:2a:
                    a8:eb:76:ad:0f:0e:8f:d0:d6:f1:0b:74:0a:29:c3:
                    fa:76:2b:05:0c:3e:b3:a4:a5:13:51:91:8d:3d:cf:
                    43:bb:8e:9e:d9:79:55:61:43:23:e7:4b:7e:13:d9:
                    bb:6f:b0:0f:a5:eb:e8:23:9a:8a:d7:9d:3a:c3:ce:
                    f4:07:a8:c7:42:5f:9e:d7:ad:6b:71:f1:b5:72:8b:
                    e7:cd:30:ca:f8:a6:5f:ec:18:8c:e4:fd:54:ba:1f:
                    14:13:ce:a4:63:cd:74:2e:0f:71:1b:62:4a:2f:4b:
                    e6:21:cc:fe:eb:3f:e5:68:9a:b2:f1:c9:dd:b9:40:
                    7c:30:b4:bf:cf:17:cc:36:03:4f:aa:38:af:37:f9:
                    fb:38:b6:d8:e1:7c:4a:8a:b9:4a:02:a5:c2:72:d6:
                    91:ee:66:fa:8a:14:ae:fa:27:2d:df:b1:39:a5:b0:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CA:93:6F:61:4B:37:99:5E:23:80:21:A4:D1:C4:B7:88:96:AD:3A
            X509v3 Authority Key Identifier:
                keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:33:e6:86:47:4c:c1:7b:2e:a4:02:95:74:e9:0c:83:3d:3b:
         ab:d1:8f:48:26:ee:7d:32:7b:a8:3b:9c:e5:88:b1:b2:22:57:
         a0:e0:15:b4:a9:14:38:5c:b7:45:fb:d3:a6:bd:1c:2f:51:de:
         67:ac:c9:d5:30:13:a6:9b:ac:ab:3c:77:d4:5d:eb:9a:78:45:
         c4:2c:37:07:03:fa:23:a5:cc:b8:a5:16:7e:2b:ab:56:1c:fc:
         1f:8f:36:ed:bf:a3:00:ce:d6:1d:ec:62:f9:a0:b7:eb:e1:e3:
         18:6b:e6:be:92:3d:ea:66:79:05:d0:bf:46:b7:65:a1:fd:51:
         d4:0c:b1:b5:88:ac:20:0e:08:a6:95:ba:7f:eb:db:e4:23:bb:
         e3:e4:ed:10:56:8b:9f:81:50:05:f0:df:5f:82:c1:40:11:e3:
         c2:5b:cf:bf:41:b1:93:21:98:b2:42:45:cc:20:17:0e:97:c5:
         c6:63:f3:64:62:b3:a8:55:a3:aa:13:ca:85:51:b6:7d:41:cf:
         10:d5:86:9d:00:93:9f:bb:42:a0:69:3a:55:5d:42:34:49:cd:
         44:c5:97:9e:af:cf:99:ad:04:a6:3c:c1:f0:61:76:27:24:d8:
         3a:f1:21:6d:af:bc:9e:1a:2a:b8:89:54:46:6d:45:c4:62:1c:
         fc:bd:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----