Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File:                     _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier:          Nq5zED13S500dAE3PC+JE1R3hhtvXWhiXHVXsbmce7I=
Subject key identifier:   79:A2:0C:04:37:D5:3A:76:94:E0:96:43:A6:5C:A5:E4:F8:01:87:C4
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer:       /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial:       01962E61CF209B4A2B9459E0E37BB218195B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number:          1009
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
                          2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: did2neKZ/PzhEiux0sAHk0lFv5Yy5fvXniw/6yZ4D2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:20:9b:4a:2b:94:59:e0:e3:7b:b2:18:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=79a20c0437d53a7694e09643a65ca5e4f80187c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:a0:10:2b:1e:ba:3e:ef:c4:ec:fa:c9:ce:
                    1d:3b:16:dd:bf:fd:bf:1d:35:e1:3d:0c:f1:8c:6f:
                    bb:82:06:ac:1e:87:69:70:71:fc:26:2b:76:b0:c0:
                    47:b7:17:db:28:d8:9b:f1:14:40:ff:ff:d8:88:33:
                    90:22:1d:b0:c7:13:99:a4:46:e8:e3:e7:e2:3a:84:
                    1d:e3:b6:91:7f:6d:51:17:31:a5:24:38:d9:99:e1:
                    0e:c0:9c:88:76:23:cf:47:87:c4:dc:00:03:62:8a:
                    8c:93:a7:fa:78:da:37:8e:61:75:b0:27:b2:6e:4b:
                    c2:28:a6:65:34:86:25:ae:50:e4:1a:23:11:fa:46:
                    08:ac:27:0c:40:82:63:3e:4a:54:58:8f:32:b7:a2:
                    f8:75:97:93:d4:f4:63:18:8e:01:0b:32:56:12:f5:
                    fa:8a:cc:88:5d:dd:c3:93:6b:4f:01:58:ff:7f:e5:
                    43:29:b9:8b:36:d5:bd:8d:68:4a:9e:b4:d6:08:ea:
                    f8:87:24:7b:38:fa:ed:9f:b4:41:c2:4b:45:21:93:
                    e5:53:f0:77:24:7d:13:ba:c9:95:0c:50:8e:df:c7:
                    79:20:d2:57:59:be:99:4a:1d:62:5f:43:d7:fd:c9:
                    92:76:fa:39:8d:1f:94:16:3a:0f:60:fd:5f:03:49:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:0C:04:37:D5:3A:76:94:E0:96:43:A6:5C:A5:E4:F8:01:87:C4
            X509v3 Authority Key Identifier:
                keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:d2:65:15:bc:ef:e8:7d:47:03:58:5c:83:cb:9e:ba:28:
         17:f0:4b:89:a6:73:98:7e:42:e1:f0:c4:df:19:32:af:dc:dc:
         0e:e9:48:dd:60:ae:8e:f1:07:4a:4e:66:52:ac:3a:86:19:34:
         8c:8a:1a:06:1c:23:fb:18:9e:fb:f9:b3:da:47:0d:88:b3:ad:
         a7:0a:63:e0:46:9d:fa:8a:91:37:0d:2a:f5:f9:52:e7:e5:f9:
         d1:d7:7c:6d:7a:e5:db:0e:95:90:33:a9:d9:94:7c:90:5d:eb:
         df:28:7a:93:e3:4d:cc:1f:41:32:d8:bd:15:99:77:b5:e3:3d:
         d7:4e:1a:b6:15:d7:b2:b9:e8:80:1f:ab:83:ca:1b:da:a2:4b:
         7c:6e:3f:c3:b0:a2:7a:0b:9f:b9:4e:11:3f:90:42:d8:8d:2b:
         01:e0:64:4d:2e:02:6a:cd:cc:3e:f8:be:b9:30:b1:4a:1c:09:
         ff:9a:aa:22:48:b7:38:24:01:f2:6d:73:5b:78:4a:50:fd:f6:
         3e:1d:d6:d5:50:35:b9:ed:9e:9a:7f:f6:bc:35:9b:5f:e0:a0:
         19:7c:61:e1:08:aa:0c:03:b2:51:78:20:21:c7:fb:2c:48:bf:
         80:13:e1:7f:27:d8:bb:f3:5f:d9:88:89:98:bd:a4:45:4c:01:
         53:e7:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----