Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File:                     F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier:          8vyb3vtHcIf9A1l4085zHUIZLvWpTIk06eY8ECJ7s/k=
Subject key identifier:   54:A5:D4:18:1A:B9:FC:81:58:F8:3B:5E:E8:97:3F:90:C2:2F:1F:D5
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer:       /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial:       01962F0699B7868B0EC6AA805415CBBE6A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number:          0400
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: nM5UIilmoBiWI9qLbfrkq/UK2sqL5SvYGxttTWFu5mc=)
                          2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:99:b7:86:8b:0e:c6:aa:80:54:15:cb:be:6a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=54a5d4181ab9fc8158f83b5ee8973f90c22f1fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:97:65:09:77:57:b4:d8:e0:ac:86:9d:39:
                    d0:86:be:07:be:6b:6a:e9:73:df:90:d2:20:44:ae:
                    3a:cd:ca:51:fe:15:5d:7c:93:07:9c:23:e9:88:b8:
                    94:c2:2d:1f:0c:51:d2:1d:70:54:9f:49:e7:21:c3:
                    a0:8c:0d:55:ec:1e:2a:1c:88:2a:7f:09:ca:44:89:
                    79:9e:6e:f6:de:0f:43:f2:1e:ad:26:56:e2:7a:bf:
                    f1:b5:8a:71:9c:58:3b:03:3c:7f:4a:60:5a:8a:b2:
                    a6:14:a7:d7:9a:32:ca:0f:6b:5b:15:fb:9f:1f:4c:
                    0a:28:98:54:c7:b5:64:72:56:a4:d4:19:2e:d9:2e:
                    8a:85:50:c4:10:49:0e:ce:8d:6d:e3:e1:de:9d:92:
                    8e:94:d1:b7:51:a6:f9:26:76:76:f3:4c:6c:d8:95:
                    4c:fd:8b:2b:6e:00:24:b2:e9:2e:57:e3:df:f4:d7:
                    b0:d1:e8:e0:79:17:72:e3:64:c1:26:3c:3c:58:4b:
                    c6:ac:6c:a2:25:90:87:9f:90:c1:bd:cf:ea:ce:31:
                    90:29:75:53:9a:16:f8:39:07:a8:b2:d9:b8:09:cb:
                    a5:9b:9b:84:27:57:02:ba:b6:9f:97:f2:fb:c3:34:
                    89:22:86:d7:8f:19:89:17:95:b1:04:6f:55:bb:fc:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:D4:18:1A:B9:FC:81:58:F8:3B:5E:E8:97:3F:90:C2:2F:1F:D5
            X509v3 Authority Key Identifier:
                keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:20:e1:40:f5:51:98:83:09:03:33:32:82:6a:37:77:ca:
         a7:85:f1:1c:0d:f5:a3:e4:71:bf:8c:6e:21:5d:7c:34:9f:22:
         4c:dc:ec:da:31:ee:5a:39:53:4c:e5:79:c1:b1:51:c3:65:ff:
         24:b4:46:02:6a:31:75:0f:6a:54:3b:59:13:b0:bb:d6:cf:1a:
         81:ec:b9:9e:ce:b3:3a:b2:72:36:ec:47:c9:ad:89:33:a7:14:
         54:0c:a9:91:ae:30:89:a2:04:36:f2:a3:0e:b0:aa:3f:2e:94:
         c7:24:38:66:cf:7f:8d:b8:0b:6e:a4:1e:f5:ed:57:2c:34:2b:
         34:5e:07:cc:a4:27:a9:fe:f0:ed:ac:9e:23:6c:ef:6f:d3:7e:
         05:11:39:09:c6:23:58:6f:53:f6:62:4e:20:9f:92:77:01:24:
         67:88:a3:1e:eb:8f:74:fe:32:c0:2d:14:5e:79:88:d7:37:56:
         b9:56:87:c5:52:a5:8c:d9:f1:86:2b:e4:cf:fa:4e:9a:e4:dd:
         b4:e9:e7:63:69:5d:2b:7f:a9:9b:73:3c:38:f8:e8:6a:11:47:
         c2:3b:29:41:8a:b7:06:f4:0d:82:79:21:22:e5:60:21:c4:fa:
         0c:c0:d9:22:c4:25:b3:7e:63:af:35:ea:3a:85:ee:f0:9a:0a:
         b5:00:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----