Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File:                     mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier:          y6OM/XOaZS/PVSheawH6UtaTD9NAqJbY13KMTS8aqS4=
Subject key identifier:   24:E4:4E:22:4C:47:41:1B:ED:C7:9C:64:62:F1:98:A4:3F:A9:14:70
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer:       /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial:       01962DF41017C07660259BF2D9538699A56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number:          0B17
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
                          2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: gfCk0zD3dAZFPJcIxqU5faxjlHx6CjctKaz+fRsnteM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:17:c0:76:60:25:9b:f2:d9:53:86:99:a5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=24e44e224c47411bedc79c6462f198a43fa91470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:ce:46:d2:ce:c5:00:35:1c:84:91:8b:c8:
                    8e:4d:bc:af:13:2e:ac:7b:10:ab:2c:6b:db:32:a2:
                    07:f2:b4:d0:48:5a:69:b4:99:d8:91:65:91:8f:aa:
                    ff:b4:f8:d9:1c:2e:d3:ba:9b:20:9e:f8:97:14:af:
                    90:38:a2:f6:d2:05:8c:67:d0:f8:7c:75:46:8e:15:
                    80:a5:1f:d6:a2:33:bb:3a:a2:cd:98:8c:81:d2:fc:
                    a5:5a:49:0d:31:0f:3f:83:37:a7:16:20:0c:0a:a9:
                    2b:9b:87:39:31:5a:68:1e:db:03:c2:5d:a7:0f:db:
                    8b:ac:c4:5b:d7:4c:af:74:f5:3c:c6:06:71:4a:e6:
                    9c:41:bb:01:69:6c:f4:36:b2:2c:c1:29:dc:7f:31:
                    2d:a5:8e:29:89:1b:94:d6:0c:ec:9a:c7:7a:ab:90:
                    f3:8a:67:bf:48:5c:6c:25:c8:86:8b:7c:0e:97:9f:
                    0e:27:b2:ea:9f:86:fc:50:79:96:90:d5:d4:b4:58:
                    cf:54:1a:8b:e3:b6:eb:95:cc:f9:39:df:63:f4:90:
                    a9:5d:9f:e6:1e:ad:29:79:2e:0e:ab:aa:3c:a6:80:
                    f0:a6:d3:d4:4d:21:12:5d:03:d0:e2:cc:7b:c2:6c:
                    6d:4d:2d:3d:38:75:8a:ef:a4:1a:7d:23:bb:3a:f3:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E4:4E:22:4C:47:41:1B:ED:C7:9C:64:62:F1:98:A4:3F:A9:14:70
            X509v3 Authority Key Identifier:
                keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a6:d8:8b:eb:7d:d1:75:4c:f4:de:f2:5c:c7:33:17:1d:59:
         7f:59:b3:1a:08:e0:d8:56:9b:36:9f:17:79:0b:0c:f9:ad:63:
         15:19:4c:59:63:c0:48:16:36:42:cc:c1:43:45:e8:b4:92:9b:
         c5:64:ae:a7:e9:88:a7:ca:23:3a:33:8d:5e:8d:ff:ae:18:3c:
         c5:74:8a:8f:d8:f3:21:16:63:45:22:36:bb:be:6c:98:e8:9c:
         1f:38:b8:b1:fd:20:7c:96:b9:fc:70:66:7a:ac:d6:a7:a7:c0:
         9e:ea:e0:98:4d:c0:3a:b2:53:5e:ef:26:ab:b9:9a:44:26:90:
         18:a2:ac:29:e0:36:0e:73:ce:f7:a6:ed:da:e3:12:4c:fc:11:
         26:a5:ba:08:54:ab:54:b6:62:e8:52:03:58:f6:f9:06:c3:40:
         16:b2:1a:75:cd:0f:7f:a4:bf:c0:77:69:6e:c7:87:d0:a2:fa:
         f1:d1:a3:0b:18:38:f6:3a:58:9b:9b:4d:b2:37:4d:42:5b:2b:
         bb:6a:31:b6:1f:f2:27:74:bd:6a:df:7f:9a:cf:66:8f:8c:d9:
         ca:fa:aa:6e:96:5d:26:0a:48:63:ea:48:cf:c4:9a:e9:da:30:
         2f:8f:26:1d:74:a3:c5:d0:e7:1b:84:e5:f7:dd:ca:5b:bb:76:
         10:c9:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----