Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File:                     9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier:          O9KmjqjEgoswlYnYyYENNWCX91fN8Wiw2bR/2l3kkT0=
Subject key identifier:   BF:8B:78:AA:08:44:85:30:BA:B8:84:4A:68:65:D2:A7:06:1F:D7:EE
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer:       /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial:       01962FAB2FB3B533E1DA6024BE1CBD81FA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number:          1501
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: 1-21lRC_0vk3qiMhLRa6iL3z9lcQ.roa (hash: EqiJMfRpzYmTa6+jDwmddKlaDWXOt7MVyVuKUe1MFuk=)
                          2: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: zQzpDT/wTkrsf7agYlokQ9XVEhXahquiURuxR7/s54g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2f:b3:b5:33:e1:da:60:24:be:1c:bd:81:fa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=bf8b78aa08448530bab8844a6865d2a7061fd7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:61:7d:a9:da:ae:0c:e2:21:d8:9a:e7:7e:
                    fe:a2:9b:28:32:47:55:5f:ba:e0:1e:8e:37:5f:d2:
                    a8:81:c3:0c:ad:db:3b:a7:e5:49:7d:a5:e1:5e:f7:
                    6d:cf:09:ae:c6:c2:c5:fc:89:17:f7:f5:b6:c1:ee:
                    5d:7c:d0:2d:fa:7f:a6:f5:a1:cf:36:ef:b7:13:3c:
                    db:b5:0b:a3:c8:82:3f:f6:ed:f9:ba:83:ac:a5:5b:
                    70:5c:d9:87:09:b0:7f:21:61:f9:4a:18:e8:9e:7c:
                    b8:c4:2d:19:5c:9a:69:cf:41:0c:a4:00:b5:85:45:
                    88:6c:1a:12:cb:18:82:91:ec:d8:fe:5f:60:84:f0:
                    4a:9b:dc:e0:cd:f2:8d:b1:e1:45:36:0a:cb:7c:30:
                    32:3c:af:7c:5c:a3:8a:64:48:98:83:2c:e3:5c:64:
                    e1:cb:e5:b2:b0:db:63:3a:53:58:f6:8a:7e:3a:3b:
                    00:8e:97:d7:a1:5c:b3:fc:42:3c:7a:36:b5:45:fa:
                    75:8e:26:a9:08:0b:2e:8e:34:06:23:8d:e4:cd:9b:
                    03:ff:f3:a5:f9:dc:9f:f6:87:b1:14:b0:9f:47:2c:
                    01:fd:d9:25:3e:4f:41:a4:7a:ee:6a:bd:d6:ce:b1:
                    9b:1e:38:5a:73:82:78:ae:6a:f9:94:95:a7:0e:fd:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:78:AA:08:44:85:30:BA:B8:84:4A:68:65:D2:A7:06:1F:D7:EE
            X509v3 Authority Key Identifier:
                keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:4d:9f:f9:bd:38:66:d1:82:b2:f2:a9:03:29:22:81:92:e4:
         e7:80:a0:1f:f0:ea:4e:74:bc:ce:f5:bb:7e:ac:40:b2:45:fd:
         c4:73:f2:d3:88:a2:f3:ed:e7:e3:e2:ce:d2:62:5b:ff:e7:eb:
         8e:69:85:97:1e:b1:33:a5:b9:41:39:4c:3a:eb:42:7c:25:0c:
         3b:5c:52:ea:08:97:22:40:8c:48:1c:5b:5a:ac:70:93:20:5f:
         0f:78:8d:80:f2:54:e0:95:81:52:a3:7a:a3:ce:cd:2c:58:39:
         27:1d:82:c1:02:29:0d:5f:52:91:8d:3d:9d:0b:07:85:3d:67:
         63:61:b5:64:1d:e9:85:b7:ab:14:23:ab:a6:eb:50:72:14:db:
         87:1d:f9:2d:51:d1:02:e9:a1:21:68:10:dc:85:3f:db:88:8c:
         b4:47:d0:a6:be:b3:a7:79:aa:0e:33:d2:58:4c:f6:dd:3a:3e:
         39:f9:88:d7:39:33:3d:55:3f:63:a1:db:ff:16:f0:53:ce:5e:
         80:50:43:dd:fe:f1:72:71:39:3e:2e:76:2d:f5:be:75:6a:73:
         c9:6e:e0:53:5a:98:36:b9:6e:83:54:5b:4b:e5:5c:db:5d:3b:
         0f:a3:88:c2:4a:73:5d:6e:85:00:fa:9d:c7:a2:62:2c:dc:50:
         22:d0:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----