Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File:                     H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier:          W9nBzdv+AntOJ17EHWIUA0ZWeEthdu4LhrsaoJIulY4=
Subject key identifier:   BF:AE:C7:E3:62:B4:66:32:3A:BF:8E:9A:FC:F8:07:12:6E:20:82:32
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer:       /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial:       01962E2B0C689406600DFCEEAAFEB0394920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
                          2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: eSoHpmcr45v4+uWPrxIIPvx/7gnuX0g+eBSkbS/GRCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:68:94:06:60:0d:fc:ee:aa:fe:b0:39:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=bfaec7e362b466323abf8e9afcf807126e208232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:1f:8f:68:91:b8:88:af:01:15:79:c3:fd:
                    49:fc:65:a2:77:58:d9:c7:56:4d:75:6b:ce:51:66:
                    d3:23:e0:fc:6b:92:87:1c:42:f8:78:24:25:16:be:
                    30:75:e0:0f:e9:c1:18:38:2c:3c:0b:f4:a4:b1:56:
                    08:42:66:86:8c:3f:ab:63:11:91:11:fc:b9:e6:85:
                    87:ba:fd:2a:9b:4c:38:71:3c:2b:00:54:c0:42:16:
                    59:d2:a6:7d:39:7f:b2:c7:49:f9:52:b8:93:a5:ac:
                    08:de:60:8a:d4:d1:cb:49:6a:78:89:88:e7:16:55:
                    e4:63:14:29:5b:6b:e0:02:72:22:f3:4f:49:53:20:
                    ee:7c:52:c0:95:d3:38:69:8c:6f:be:02:b6:3b:10:
                    b0:c5:26:ad:a4:ca:06:9b:3b:e1:4c:09:0a:45:d9:
                    e2:3a:c3:6b:24:81:e5:2d:29:e8:7f:8a:85:92:91:
                    bc:5a:2f:de:a2:1e:5a:0d:94:09:00:51:25:0e:ef:
                    85:38:38:cc:0f:61:8a:11:87:81:04:16:0c:04:c0:
                    68:82:e4:8e:44:5f:0f:e6:ba:ca:e2:b2:7a:7e:cd:
                    69:7b:0d:e3:15:d0:d0:e8:4c:b7:57:b2:94:35:09:
                    68:0b:f4:a4:a8:4e:e5:3f:94:03:f3:68:f7:ec:75:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AE:C7:E3:62:B4:66:32:3A:BF:8E:9A:FC:F8:07:12:6E:20:82:32
            X509v3 Authority Key Identifier:
                keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:92:60:a6:0a:52:30:ff:56:dd:8b:da:d5:b6:1b:8f:0e:6f:
         90:86:bc:2a:b9:66:f2:4d:02:2a:5f:89:c9:de:5d:71:1c:5e:
         3e:58:86:7e:89:9e:7a:15:0c:72:73:ef:b4:3d:cb:53:4b:1a:
         bf:32:d8:ef:3f:d5:c1:e5:0c:85:ce:07:58:e7:46:1a:65:0f:
         88:30:e1:b1:e1:9d:c5:2b:17:d8:9d:16:c8:20:b1:22:a7:d2:
         28:0e:aa:d7:10:69:bf:a4:ab:46:30:a2:0d:e2:2c:b2:60:6b:
         ff:58:39:84:12:33:cf:86:3a:0b:ad:90:5c:6d:f1:b4:6d:71:
         a1:6f:a6:7d:f6:3e:f5:02:c8:14:45:ca:c1:a9:13:eb:d1:6b:
         04:c2:56:46:ea:d4:89:cd:f9:b2:4a:60:9c:fa:d6:9f:93:c1:
         cc:76:23:99:47:21:3f:12:9f:2e:bd:ba:23:05:ad:96:77:11:
         dc:6c:ca:f5:74:38:c4:e2:54:88:fb:55:5f:5d:4e:55:8d:52:
         85:65:7f:c9:2f:81:c7:d6:92:a9:94:06:26:f1:55:57:c5:fd:
         74:d9:73:ac:dc:3b:66:dc:79:4d:8d:2d:5e:da:b3:3c:97:86:
         93:c6:b4:40:33:4a:5c:f8:b9:46:80:56:f9:ce:36:29:7d:53:
         89:31:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----