Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File:                     m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier:          J8ZTk9ScBNt2d5Wyqc2K6YSuFvfU/CrQVOeBXcaAXYk=
Subject key identifier:   B5:9B:DE:64:1D:EA:49:9B:10:72:DB:D8:8D:DA:A8:8C:A4:B0:7D:70
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer:       /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial:       01962E98CC6D8E4A00BEFBE578C63691C6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
                          2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: sLDrvvsN+pNdL8FDzgVw0wo8FSSdGBcdV7yKPD6yd70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cc:6d:8e:4a:00:be:fb:e5:78:c6:36:91:c6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=b59bde641dea499b1072dbd88ddaa88ca4b07d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fe:56:b2:74:bf:95:bc:ea:a5:40:8b:e5:a5:
                    5f:88:d1:54:b3:29:e8:32:df:3c:b8:a2:b0:a5:c0:
                    22:dc:fd:89:67:84:58:eb:ad:7d:57:1e:07:7a:8a:
                    0c:7a:c2:f1:6d:12:de:05:02:79:9b:8c:b0:16:19:
                    ae:e3:2c:9e:73:28:e5:fe:fd:8c:e8:9a:97:50:be:
                    7a:03:21:5f:43:54:ef:ed:5a:66:7c:16:43:25:80:
                    e1:59:4c:84:fe:ee:e1:c7:24:3a:b5:67:9e:0e:9e:
                    99:5e:dd:c6:26:ed:45:49:72:79:f0:5e:c6:a3:47:
                    5d:d4:52:e1:60:03:20:aa:ab:c7:a6:da:4d:0a:89:
                    17:07:b8:75:57:b0:42:2b:1c:dd:7f:66:ba:f2:21:
                    24:71:5c:56:b7:e5:e3:a6:1b:5d:8e:1e:71:0d:91:
                    3e:49:53:55:3c:f8:af:92:f1:3c:95:56:22:10:f3:
                    7a:f3:15:04:85:c9:a0:1a:d3:c7:c3:c1:a4:33:5b:
                    63:f9:56:66:b6:da:4a:75:bc:9e:9e:cd:ae:17:1e:
                    0a:ef:3f:74:53:15:07:9f:86:ee:71:b6:e9:b1:8e:
                    2b:84:d2:ac:fc:8a:42:e4:45:f9:65:a7:cd:ac:83:
                    c1:68:3c:59:72:e7:90:f2:b6:39:c6:02:ea:19:c3:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:DE:64:1D:EA:49:9B:10:72:DB:D8:8D:DA:A8:8C:A4:B0:7D:70
            X509v3 Authority Key Identifier:
                keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6b:8c:6b:fa:09:68:db:2d:63:1a:54:1a:f2:18:07:97:dc:
         45:17:9a:64:00:ee:a6:c8:7b:56:29:c3:58:16:e8:9d:9f:c6:
         f8:31:a2:51:fb:17:bb:26:f0:bc:37:40:8e:6a:c9:d5:e6:82:
         1d:28:33:97:8c:bc:27:a7:01:cc:fe:06:00:39:a6:07:7e:6e:
         51:22:1d:88:ec:57:85:5a:be:37:1e:f5:7c:97:f6:64:d3:a5:
         80:08:56:a9:33:ff:97:f0:f6:4f:5c:c9:11:71:17:f1:85:02:
         58:4e:11:d7:31:a9:9f:2d:3c:24:98:48:bd:12:4f:da:e7:42:
         cb:9c:61:b9:6b:b2:72:3e:22:87:33:1f:0e:9b:e6:d4:af:38:
         15:6d:15:21:5d:26:f7:94:91:54:2d:a6:cf:f5:b2:36:b1:52:
         aa:c1:a6:8f:50:d1:ce:24:f8:c7:1d:78:b7:c0:ff:47:e9:a4:
         b2:e5:0e:cc:1e:2c:9d:a6:49:c4:11:19:b5:c5:a8:ed:ee:d3:
         89:20:b9:60:a8:15:9b:64:dd:d7:0f:a4:e4:5c:61:16:d6:21:
         61:83:22:eb:bb:3c:22:82:26:18:45:19:2d:46:97:0f:1a:f7:
         2e:9b:41:8a:13:47:f6:e1:03:f8:f2:1c:dc:99:92:62:9a:72:
         7b:f1:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----