Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File:                     9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier:          0KV+DXPn3gtsSkOA1LiRrtvL/Kcn25gGfSPwblE6OYw=
Subject key identifier:   26:4D:35:24:66:67:C2:EC:75:8B:AE:97:9F:02:F4:C1:5A:79:B0:EF
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer:       /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial:       01962F06F79AD9524A81F3EA5D9193081235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number:          0853
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: /HwNcE11PR2fkZlnNE41I9ruyOzlEdnj/1Hppg6wlqY=)
                          2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f7:9a:d9:52:4a:81:f3:ea:5d:91:93:08:12:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=264d35246667c2ec758bae979f02f4c15a79b0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:26:dd:1c:f4:4a:8c:fe:87:42:6c:b2:b6:
                    d9:0a:78:54:c1:04:90:ff:65:3f:17:14:31:31:f8:
                    e4:83:00:df:20:2e:0c:d9:72:32:83:ba:36:8e:16:
                    4e:58:10:26:9f:4e:83:65:cb:a4:b5:b4:8b:51:cb:
                    9d:85:f7:8a:47:3d:ff:1d:60:94:74:eb:58:ae:b4:
                    39:6b:ad:72:69:b4:07:5c:3d:2f:16:cf:a3:58:13:
                    0e:33:bf:ee:7d:0e:5b:22:ca:98:58:85:5e:53:2a:
                    96:c3:03:6b:ca:9b:71:57:d4:84:44:f1:18:8c:69:
                    b1:17:f6:28:94:89:b8:4e:64:0d:17:7d:4b:d8:5e:
                    a0:a7:f8:53:48:55:12:0f:43:c8:0c:eb:ec:91:16:
                    5f:f3:89:38:50:a6:75:e1:cc:7d:8e:6f:c8:55:1e:
                    18:f2:8a:b0:97:32:38:5f:a8:0d:19:af:78:52:eb:
                    bc:14:0f:4f:fb:e4:83:d5:2e:fc:7b:30:3c:80:ff:
                    f2:34:07:cc:ac:4c:cd:94:e6:5d:d3:b4:a5:60:cf:
                    34:1f:a1:35:b4:cb:6f:bd:1b:cb:fb:ef:af:4a:68:
                    2a:d9:b2:9c:1f:d7:a2:c5:50:9f:7f:3f:cc:9f:b8:
                    fe:dd:85:f6:4f:04:76:9b:15:00:ca:3a:23:f6:64:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:35:24:66:67:C2:EC:75:8B:AE:97:9F:02:F4:C1:5A:79:B0:EF
            X509v3 Authority Key Identifier:
                keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e8:30:13:c8:83:e3:88:a4:07:fb:6b:d4:8d:87:89:7b:1c:
         1f:ba:ad:d2:23:5d:b1:ad:c1:ab:d8:cc:d6:55:0f:1c:5d:b2:
         c7:9b:44:0f:9e:6f:23:71:0a:45:4a:bc:0f:08:3c:e5:60:73:
         6b:13:13:67:6b:42:64:1e:90:af:36:d4:58:98:d5:86:b3:c0:
         5d:4f:98:a5:ad:5b:39:81:5c:16:cf:72:d5:66:13:26:55:d9:
         7d:06:25:06:d2:a4:44:1f:ce:37:8f:c7:99:52:bb:85:a5:45:
         bb:3b:c0:ea:5c:2f:1d:9d:94:cb:e8:59:ea:7f:14:89:3a:7f:
         16:6d:4c:64:f2:82:26:63:19:aa:83:05:73:53:b9:b2:fb:72:
         70:82:59:d0:39:34:20:4e:a1:71:75:d4:d3:ad:f7:37:65:48:
         5e:2f:db:34:e4:a8:ae:5f:76:aa:c6:ba:fe:95:b3:f6:0a:41:
         41:23:13:24:da:27:52:ee:ed:51:02:7e:df:b4:a4:76:cf:7b:
         86:c4:e4:99:c5:3f:e4:cd:dd:75:b1:09:d0:81:0b:49:40:ef:
         c4:0a:e8:3d:51:3e:d0:1e:a6:f5:e4:d1:46:81:fd:e3:26:fa:
         ee:10:f5:e0:70:8c:dd:a6:87:b9:11:75:41:86:25:c5:e2:a2:
         b5:c9:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----