Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File:                     S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier:          rXVOyJsT5WU8EeP3Leb/QwNGFXBQTZt9cw0NkY1NLso=
Subject key identifier:   AA:FF:70:53:11:E8:2E:D9:CF:1E:D1:7B:94:A9:28:FC:59:74:49:65
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer:       /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial:       01962E9866559F037535A8A8E4648C3B3976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number:          11D7
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: X+4Wvh71jC7wQG5TjwC5JMgfmKdNtU+ygW8FuBq4Un0=)
                          2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:66:55:9f:03:75:35:a8:a8:e4:64:8c:3b:39:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=aaff705311e82ed9cf1ed17b94a928fc59744965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:1c:71:0b:60:a9:c5:d1:6a:35:0c:ef:66:
                    60:e1:90:a6:d1:2f:d3:6d:35:37:5e:d0:ee:01:a9:
                    1c:fa:f7:b8:75:7c:74:61:3c:fc:0d:5b:e6:37:dc:
                    14:58:98:2e:0b:14:36:91:6b:9f:58:2c:db:c1:c6:
                    2b:cb:47:f2:80:49:9c:d4:b0:90:d7:61:4e:26:9f:
                    f7:f1:ed:05:92:f7:bb:79:d2:bc:01:ca:11:c8:b0:
                    e0:d8:c4:85:77:3e:4c:d2:1f:5a:f8:24:d9:81:16:
                    f1:2a:29:05:e3:50:19:8e:24:22:d1:c4:f9:d1:78:
                    d7:c3:28:c1:f4:1a:3b:47:dd:b9:3a:26:da:3a:fc:
                    21:0b:19:08:ba:88:7c:63:9a:f3:a5:0f:0d:36:ee:
                    ea:b7:01:c7:a8:23:dd:3f:cc:ff:d6:21:ea:67:3f:
                    c9:fc:62:84:c6:f1:21:2f:3d:aa:2f:34:da:3c:22:
                    4e:68:17:f2:f4:56:02:9c:74:6b:85:d5:21:59:9f:
                    48:43:98:f3:05:2a:2b:5d:87:5c:f8:cc:ad:3b:87:
                    f7:3d:59:e9:14:ac:0e:65:a7:7f:47:39:9f:34:cc:
                    a6:90:39:cc:b9:d8:8f:57:dd:27:bc:85:b3:ba:69:
                    92:84:3f:62:4d:f8:f6:7d:cb:d2:b5:a4:9d:e7:bf:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FF:70:53:11:E8:2E:D9:CF:1E:D1:7B:94:A9:28:FC:59:74:49:65
            X509v3 Authority Key Identifier:
                keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:67:8b:65:5b:02:87:fe:51:f5:8a:5d:4f:42:62:d2:46:
         19:93:db:c1:19:43:ac:9d:33:1d:3c:f9:ad:95:24:be:98:ba:
         a8:00:74:99:04:6a:90:ae:9d:95:64:8e:e1:e6:15:20:bf:bd:
         43:4f:5e:df:87:7e:2d:ca:c6:c5:22:2f:b0:cf:ad:24:48:fb:
         21:b6:14:1d:33:dc:a6:1f:0e:01:3f:69:8d:f2:dc:33:3f:36:
         c5:bb:01:4e:40:38:52:39:03:87:a8:0a:f8:a6:4a:c5:b0:13:
         1c:90:4c:11:07:30:04:c8:dd:53:b1:d2:11:43:f8:5c:86:09:
         f9:c5:cb:eb:b2:ed:f9:6b:bc:91:18:51:31:e7:cf:e0:1e:91:
         8f:91:e4:62:91:ad:f8:46:c6:c3:7e:ae:83:7d:28:92:9c:53:
         48:d2:31:94:d4:75:13:f3:9e:13:f3:94:e4:c2:88:7c:2a:29:
         96:9d:44:7e:0e:31:cd:0a:6e:2e:7c:8b:ca:90:07:2a:c8:a1:
         50:34:b2:3c:16:92:8f:61:25:be:35:45:19:25:1d:b3:48:94:
         f2:78:ad:e6:31:5e:b1:86:ce:44:8c:ad:77:77:9e:c3:c3:66:
         50:9a:7d:18:bd:16:b0:2c:ca:c7:f3:de:7b:50:a0:1e:bf:67:
         5f:55:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----