Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File:                     m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier:          hSKbxKSBWLpaF2IUUl+rv+xKpWEEBciidDaIHA6+6e4=
Subject key identifier:   C1:3A:EF:C2:3C:69:2B:7C:B6:F6:AA:D1:DF:AD:0B:79:99:78:D5:57
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer:       /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial:       01962F3DB42AB8AA2D5FFCCE0D7354DB23F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number:          12C5
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
                          2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: I9HADAdQymP3d3KR1kgCyhOn4+tHATaNVl9XEpwQGaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b4:2a:b8:aa:2d:5f:fc:ce:0d:73:54:db:23:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=c13aefc23c692b7cb6f6aad1dfad0b799978d557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:95:43:ae:20:8f:84:4f:91:eb:2b:f2:06:
                    18:51:29:45:7e:49:45:c2:0a:18:73:9b:f9:e0:5d:
                    57:53:97:3b:43:46:bc:e5:0b:4a:2e:c5:21:e8:51:
                    e1:7c:7d:43:a9:d1:26:c4:02:c5:81:c2:c9:97:cf:
                    0f:ad:84:55:93:6a:9b:9b:64:26:c6:d5:99:5b:29:
                    04:9c:01:a3:47:91:ec:75:8a:2c:67:fd:4a:15:c5:
                    19:eb:5a:10:b2:e6:cf:f8:bb:02:4a:d6:63:98:33:
                    99:27:1a:eb:b6:7f:82:0e:4d:05:b7:bd:37:ad:25:
                    a9:a5:3d:ca:e6:95:e6:d2:e5:d4:41:e1:a8:8d:61:
                    a0:a5:b0:b3:f8:3c:12:e4:d5:8d:2e:f6:50:f9:91:
                    b9:4a:c9:1c:22:b5:c3:4f:cd:da:c4:1c:e0:52:b5:
                    1b:4e:3c:44:2d:07:df:a1:e2:83:47:8e:21:21:54:
                    9d:d2:99:73:18:0d:78:01:ed:92:ea:f2:f1:e1:16:
                    e8:d4:dc:7d:8e:89:67:6b:7d:70:41:5c:7d:f2:b9:
                    dc:5e:4a:61:bb:c1:e6:0f:dc:da:b2:a0:57:3b:71:
                    fa:81:b5:70:a0:75:74:50:2f:f6:5b:74:c2:87:14:
                    7d:49:ac:10:1b:82:6a:04:de:4c:5b:23:b1:55:4d:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3A:EF:C2:3C:69:2B:7C:B6:F6:AA:D1:DF:AD:0B:79:99:78:D5:57
            X509v3 Authority Key Identifier:
                keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:b5:e9:7c:47:78:74:75:a9:fe:81:03:ef:26:ab:a5:2e:
         7c:19:50:f8:90:e5:d7:55:eb:6d:ee:ec:6f:ed:27:b0:92:cd:
         83:36:39:6c:2a:45:6f:a8:56:21:ad:4e:cb:6f:38:ef:a9:ba:
         89:25:d3:13:ff:2a:16:d0:9e:18:5a:99:cf:4a:e0:75:5d:f4:
         30:a8:26:9d:d9:6f:58:53:36:a4:15:0b:61:9d:9e:06:c6:68:
         b8:89:a5:d3:ee:9c:12:4f:25:d6:65:fe:78:24:bb:80:5f:cb:
         f6:e8:9d:3d:41:0f:72:40:41:25:e4:f4:67:b2:f2:a7:a2:34:
         52:49:33:d7:5f:6f:10:8c:40:73:3c:a1:48:33:ed:0f:4c:78:
         23:56:bf:e8:c7:36:07:43:0c:b6:4a:b8:f8:9f:69:e8:09:92:
         e1:db:d4:68:da:78:92:bd:bb:4c:77:ae:e7:3b:28:f5:8c:7c:
         2c:fa:5e:9a:db:a3:b8:e3:0e:98:30:b3:56:51:42:3f:1f:3d:
         1b:d7:6e:7b:03:4e:31:9c:c3:48:df:9a:58:fe:4e:21:0a:a5:
         1d:98:cb:63:06:5a:ad:fe:69:d8:50:14:9a:db:99:31:b3:b8:
         c3:2a:13:cf:e0:6c:16:14:0c:54:4c:16:53:9d:17:ac:b8:71:
         0b:4b:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----