Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File:                     d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier:          2Q9WDOc/bA0cD/54hjnQKyiRbl/HWMXcmTKjlewWLgU=
Subject key identifier:   9F:06:0B:16:71:BA:4C:9D:CE:2E:24:2B:3B:A8:71:0E:C1:FC:9B:1C
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer:       /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial:       01962F3DBDD5545639E19A087E1FD509AD76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=)
                          2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: x7aOIUtX5BGn4/ykbX+iO+1w+Swint157e7gp4qjG84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bd:d5:54:56:39:e1:9a:08:7e:1f:d5:09:ad:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=9f060b1671ba4c9dce2e242b3ba8710ec1fc9b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:70:6b:7c:38:7d:af:97:fe:6d:b5:a8:df:
                    61:e2:8f:71:77:a4:a4:03:69:0c:f5:ce:77:1b:04:
                    8a:a4:33:cb:97:c3:f7:a1:74:36:a6:7b:97:2c:24:
                    c6:08:96:7b:c0:32:f8:dd:ab:e1:34:37:55:9f:d2:
                    2b:8e:4f:33:5e:be:18:dc:67:fe:07:f5:88:a0:c8:
                    d4:c9:7b:1f:b8:30:ef:7b:a3:00:08:e6:c6:35:3a:
                    ec:77:54:da:dd:be:85:90:68:4c:5b:f7:11:92:8f:
                    6f:8a:6f:66:95:df:e3:f5:3a:07:65:5f:2f:82:9c:
                    ed:97:58:5a:6b:00:a0:13:fd:ed:11:8f:a8:eb:0f:
                    a1:e7:fe:61:7e:83:f0:d5:e7:2c:0a:1e:46:b8:d0:
                    e6:59:b3:e6:11:55:9a:d5:5d:d0:5e:9a:e1:33:80:
                    fa:d4:37:85:d6:d0:bb:c1:42:51:2b:a9:27:e2:d8:
                    a9:24:95:01:4e:1f:81:2d:d7:f8:d5:a2:e2:db:b6:
                    e8:17:fe:44:43:9a:f5:ba:c2:e8:81:bc:44:d6:e1:
                    ec:f7:73:fc:31:46:17:c8:a3:c3:a3:27:08:05:88:
                    ed:78:c2:a9:af:9e:57:a1:87:48:c7:c0:55:9e:8e:
                    a3:8d:55:99:0a:8b:f5:57:0f:f1:7f:0e:24:a8:f0:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:0B:16:71:BA:4C:9D:CE:2E:24:2B:3B:A8:71:0E:C1:FC:9B:1C
            X509v3 Authority Key Identifier:
                keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:18:1e:db:83:bc:70:9c:3d:47:ba:30:f5:6c:ce:d7:fa:22:
         5f:5e:f0:66:83:7c:ba:73:64:9a:4e:96:c9:74:b4:84:d4:b9:
         d4:e9:ed:b1:88:a8:77:f5:bc:a2:c0:26:6e:9e:35:41:b8:d6:
         ee:2b:f1:ac:74:31:89:df:b8:e2:2b:2e:3c:e0:1e:4b:ec:42:
         2a:4f:6f:12:9e:06:00:a2:ff:de:97:2a:6e:97:76:b7:13:08:
         27:09:5e:cf:61:26:f8:55:7f:10:67:8e:b1:42:26:9b:42:c7:
         4e:b4:e0:c7:ee:d4:8a:f0:5f:e2:63:cb:21:6f:2d:ba:9f:8a:
         36:d1:82:fb:a1:f6:a7:f4:72:95:53:6f:e9:77:cd:13:fa:57:
         71:40:d6:98:ce:40:d5:59:1b:67:29:3e:11:4d:b3:09:6d:bf:
         c6:70:5f:48:9e:1a:7b:38:4d:3e:2d:cf:37:97:d2:64:b0:f6:
         41:8b:7c:95:6f:c1:11:f3:59:a2:7a:2c:e4:7a:92:d1:44:d4:
         07:5e:28:ee:66:9f:5a:8f:71:e0:7d:08:c7:ce:71:7d:96:fa:
         c4:59:15:d2:3e:c2:78:38:c5:65:8b:cf:30:eb:13:05:6c:ad:
         25:46:59:3e:e7:15:dc:14:df:ce:dd:1d:06:c0:3f:15:26:d2:
         ab:7a:30:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----