Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File:                     d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier:          TmV7I8UULw5vJIK9C0ODLiHg/RXNaZGz7YiXXvHAPoc=
Subject key identifier:   4B:BB:FD:84:58:8C:99:E9:7C:78:96:12:7D:DC:3A:97:4A:C4:BE:E1
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer:       /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial:       01962ECFA58BC653656E072F76EE1CD5293B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number:          0C67
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: DaccjHojB95-TCoADZK32YMFyKo.roa (hash: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=)
                          2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: CjniUlKj4wi25tt4r5jatPcNMrgOQXxcB7WP9g1xZ0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a5:8b:c6:53:65:6e:07:2f:76:ee:1c:d5:29:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=4bbbfd84588c99e97c7896127ddc3a974ac4bee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:38:84:12:60:ac:f2:0b:c9:2c:cd:57:c3:
                    72:67:a1:21:7f:56:ed:10:f3:79:5a:de:f8:04:83:
                    58:c3:f6:5f:f1:e8:5d:f5:0f:84:df:70:30:e2:21:
                    2e:69:ba:8e:13:ea:ad:c2:7a:17:d1:fd:c3:8d:65:
                    92:a9:16:cb:e2:da:6a:39:be:78:28:23:f3:5b:52:
                    7d:bb:0c:12:ed:e1:aa:4a:17:15:f1:8f:e4:84:28:
                    bc:db:21:35:c6:b2:b2:fa:77:79:5a:b8:01:07:67:
                    ad:11:cd:4c:d9:30:81:75:35:2b:1f:cc:fc:57:9f:
                    2b:1e:f7:f7:96:79:ad:24:e4:9d:7e:f0:6d:31:42:
                    6c:a5:3d:36:12:ba:f6:0a:67:be:61:f3:3c:0a:c0:
                    34:53:83:a3:87:c2:90:7b:d8:a6:62:09:60:d3:c0:
                    15:1d:68:11:cd:83:eb:97:c8:96:8a:2e:03:c0:19:
                    2b:56:22:a2:b9:17:3f:99:e0:2b:97:8d:89:4b:82:
                    0e:d9:90:f1:11:25:a6:da:17:71:28:64:41:54:84:
                    06:88:a1:f7:0d:1f:44:01:0b:96:cb:87:3d:7d:5d:
                    6a:bb:6c:4d:c3:3a:7f:73:c4:95:53:7b:cf:2f:65:
                    aa:d6:cd:1a:91:eb:e4:4b:ab:cc:36:f8:39:c5:8e:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:FD:84:58:8C:99:E9:7C:78:96:12:7D:DC:3A:97:4A:C4:BE:E1
            X509v3 Authority Key Identifier:
                keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7a:6c:dd:37:bf:01:f9:12:39:40:33:35:c6:c7:23:e4:f6:
         80:a8:be:50:46:fb:4d:8f:e5:70:1d:40:ca:b2:20:7e:40:10:
         57:d3:28:45:14:af:cb:f5:8e:a8:4f:49:6a:83:e5:30:df:d7:
         28:b3:62:4c:0b:68:df:51:10:09:40:7b:ad:cd:af:91:d2:a9:
         51:e0:ee:1b:fb:5f:bf:67:86:a9:3a:b3:63:59:61:02:1d:30:
         f4:ba:da:77:a9:99:c1:cf:ce:fa:27:68:6e:9e:ec:b9:e9:cc:
         4e:02:c9:dc:85:71:2b:91:fc:36:b7:82:19:32:9b:7e:df:49:
         9c:28:5c:5b:af:30:0d:34:e6:2f:d3:34:38:eb:e6:db:1c:bd:
         56:46:ac:d8:4a:17:39:90:f0:69:dc:a8:74:0e:01:74:53:54:
         6c:26:2b:63:a2:64:dd:e1:08:77:a2:f5:67:52:46:55:42:04:
         c9:96:d5:02:59:c7:07:cc:75:c1:f5:82:ca:fd:26:8c:2c:b8:
         8b:83:51:80:49:ac:91:e0:e3:fd:d2:22:03:6b:bd:9b:dd:f3:
         f2:8f:2f:53:a3:69:4f:61:99:25:c5:54:d0:47:ad:c1:f4:05:
         dd:b4:55:9e:f3:c7:68:1c:2a:59:0f:70:8a:4e:f8:bf:58:c6:
         f8:4e:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----