Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
File:                     9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft (raw, json)
Hash identifier:          KLKuZknMM+UadI3R/1VovnY03gzh3I09Xlz4DZwcQZs=
Subject key identifier:   EE:B4:FF:00:1C:01:04:DC:16:73:80:C4:87:13:3C:06:8E:95:C5:6C
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Certificate issuer:       /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial:       01962F7439C02BDC2FD19921D27313ACEC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
Manifest number:          0A66
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 1UQBMdlNIZpuxIjnKkgzjfvJqNM.roa (hash: UTR1XEenqcPOEfPniiaYd7rNcv8miNRFy/ZF8QAlsyg=)
                          2: 7CQK4uvhSVq6o2wWxOh9gTQ5PNA.roa (hash: DkMR/Y4unY7wIHXEWKNCRJfO23Nc5dcWAz953GA+1qE=)
                          3: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl (hash: cC4k1yTUs9bX6oZE4mENlffws5eKS0Crfak1PFonyaM=)
                          4: WeTCj5MkYCzvVik2-EKKBNmp8H4.roa (hash: PNmIO1vYOijeHMCQXtkzfyn0VP6CUVr/x//KeB07G6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:c0:2b:dc:2f:d1:99:21:d2:73:13:ac:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=eeb4ff001c0104dc167380c487133c068e95c56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:21:d9:36:51:bf:cd:d4:12:08:e3:09:c9:
                    5e:75:d1:ad:e7:59:d8:2e:92:64:68:6f:c2:eb:b6:
                    6a:5d:a6:b4:a9:01:ea:3c:e5:40:2b:4c:3a:38:84:
                    9d:18:89:5d:0c:3d:a1:b9:01:10:01:cd:0f:5b:85:
                    11:04:a5:fa:8b:15:ed:ed:fb:3b:af:14:6d:e6:05:
                    6d:19:c4:6b:df:77:07:76:99:bc:5c:d1:08:7c:93:
                    82:66:2b:84:13:3b:c2:69:c6:c5:e4:43:d9:5b:e9:
                    64:f4:98:64:90:32:65:6b:f1:58:64:57:f8:5a:09:
                    ac:b9:e7:03:42:7b:3c:e8:60:d0:6e:ce:c1:7d:51:
                    32:e8:1d:ac:ca:e2:49:b7:61:87:98:e1:4c:3e:0c:
                    23:8c:7e:32:89:09:1b:18:21:93:92:2c:fe:47:89:
                    c0:81:68:16:0f:f6:c4:16:13:9c:18:a8:14:fd:5e:
                    8d:60:05:ab:7e:de:8d:0a:8f:a3:1d:b0:3b:e1:57:
                    1c:14:8b:01:be:f3:b5:07:1d:82:97:39:7e:17:a5:
                    07:b5:85:72:d7:6d:c9:3d:99:be:37:a9:8f:85:f4:
                    bb:78:93:d4:3e:5d:51:0c:ea:12:f7:2d:f2:92:8b:
                    9a:4e:59:db:ec:2b:d3:67:e5:2e:fe:07:bc:fb:38:
                    79:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B4:FF:00:1C:01:04:DC:16:73:80:C4:87:13:3C:06:8E:95:C5:6C
            X509v3 Authority Key Identifier:
                keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:05:40:f3:8f:cb:e8:f8:da:65:d0:58:23:19:ef:38:2c:7f:
         26:72:16:ac:fd:1b:28:e5:9d:81:93:cb:14:ff:99:61:82:c3:
         03:c6:a9:77:b9:10:bd:d7:4e:b6:29:5f:98:e9:8f:8f:f0:8f:
         03:b7:f4:ba:8b:9e:61:f1:48:80:90:39:ea:c4:56:08:29:a1:
         ac:79:92:9d:a0:d5:97:4b:7c:74:5e:4b:ed:3d:ab:8d:35:a4:
         4a:ea:55:b6:27:86:47:19:56:3d:36:cb:ad:e5:c8:da:c9:f5:
         c3:6e:0a:11:8b:66:a5:d4:49:87:e3:35:2c:8f:91:46:2f:c7:
         68:91:c0:69:48:69:cb:66:53:fe:d8:de:eb:e5:e5:a3:47:26:
         1c:5f:4c:71:77:9c:b3:5f:bb:99:c8:b0:e4:2e:a7:09:85:e4:
         b8:a4:1d:7d:23:1c:ac:ff:fa:e9:17:f5:3a:d2:ea:32:40:87:
         e0:f0:3f:eb:97:59:ae:d1:d4:70:9d:90:cc:cb:bb:4d:92:21:
         03:15:25:69:e8:b4:96:e3:e5:3a:01:f4:3e:2d:fe:53:2e:15:
         7a:43:ec:fb:f0:f9:81:07:28:41:81:00:13:67:55:a9:6a:9b:
         ca:95:79:20:cf:81:5f:b3:f1:29:0d:bb:4c:50:75:56:e0:e4:
         a7:a6:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----