Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File:                     9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier:          l9MF3dovRKnSoc2j2Sza/U/TuJ9pg94hpdk4OTiKY7c=
Subject key identifier:   9E:4E:3E:6E:67:ED:C3:CE:AF:F6:16:15:61:72:49:11:63:D6:56:98
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer:       /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial:       01962F06F571648D93B6B46503BF421B0CD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: LuwlXbyTZXrhINe5B/VsvVUJcv5H8u/e7KtrpKER+ds=)
                          2: AMZNY2ioL1FdTxYpQ_5_vn5xae4.roa (hash: FA95yICxP5LnzLz5ZPaXdyIPM3T30+TR7VWXzTyf+X0=)
                          3: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f5:71:64:8d:93:b6:b4:65:03:bf:42:1b:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=9e4e3e6e67edc3ceaff616156172491163d65698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:06:46:d4:d5:65:24:62:35:1a:51:05:70:
                    52:b2:80:c2:23:df:7a:01:b2:2e:f3:c0:31:35:49:
                    15:51:da:cd:88:24:06:24:47:24:67:6b:d5:53:ba:
                    39:bd:1d:fe:69:5a:da:ad:f0:5a:b4:9b:71:bb:86:
                    d7:4f:9e:71:82:5c:f7:92:e9:64:8e:82:d8:33:cb:
                    7a:e7:57:3e:15:10:b4:9e:89:3c:5e:21:42:01:e5:
                    d1:65:eb:2c:1a:2b:eb:65:11:85:3b:ae:18:29:24:
                    6e:6f:71:60:b3:2c:42:eb:79:25:32:9d:f7:d7:21:
                    ec:77:2f:5e:6b:65:5b:19:8a:ce:68:dd:e0:cb:3d:
                    5e:bb:6a:5a:b8:0e:60:11:3d:b8:5d:e2:5d:55:31:
                    df:04:79:5c:16:d4:28:ed:84:a7:1f:82:4f:38:02:
                    48:86:ee:cb:5a:b1:09:d6:48:b0:f2:17:65:18:c5:
                    07:35:61:1f:55:c9:55:ed:34:0a:bd:93:75:5e:91:
                    a4:33:f2:1b:66:d0:50:6e:74:2c:ce:b6:26:35:56:
                    01:28:72:6a:b0:c1:3b:16:74:55:f5:d2:70:14:6f:
                    0f:ee:c7:96:6d:b8:47:f5:71:8e:5c:e4:66:0b:b4:
                    a9:03:df:42:5a:e3:54:9e:82:9d:12:c3:7f:25:48:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4E:3E:6E:67:ED:C3:CE:AF:F6:16:15:61:72:49:11:63:D6:56:98
            X509v3 Authority Key Identifier:
                keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:22:10:e6:2c:07:f3:87:cd:14:ab:25:d3:68:41:2d:9c:5e:
         28:c5:75:8e:4f:ea:4d:5a:dc:b4:34:b3:3d:9a:b6:54:aa:f3:
         1b:ad:26:9a:53:27:d5:c6:e2:3a:87:ab:20:1e:34:50:4f:25:
         48:40:67:a5:6a:c3:d4:b2:4b:fa:66:5b:f5:95:b4:63:6a:3f:
         fa:e9:68:88:df:c8:7f:9e:12:e7:df:f7:86:4c:65:29:f6:75:
         80:15:f5:ea:da:d5:10:36:79:95:4d:38:45:fe:d9:9b:a6:21:
         f7:d4:96:e8:eb:d1:f4:d6:60:43:12:3b:64:65:a9:44:92:9f:
         33:b6:35:ce:52:e1:ad:f3:c6:fd:fb:30:a4:3f:73:8e:d1:7f:
         35:1e:9d:c7:30:2b:5b:a5:70:37:2c:ce:4b:fc:f1:1c:21:7a:
         84:42:62:cc:c2:f3:35:6c:20:a9:33:a2:5a:3b:b1:2a:68:f6:
         9a:76:07:01:42:30:a0:04:d3:b5:cc:1e:68:8b:ec:3f:4d:fe:
         fa:54:6f:6f:3a:67:5c:21:75:c3:51:cf:21:8b:80:cb:16:95:
         87:9e:ca:39:89:e2:67:bc:5b:37:b0:37:ea:83:59:93:72:f6:
         1e:e6:fe:f0:82:0b:1d:0d:a8:c8:ca:3b:19:f1:ad:b4:7d:55:
         55:26:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----