Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File:                     9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier:          PpkMjkno/Q3TucMfyqkS4uvl5gCTf3kt8mYs1OscXCc=
Subject key identifier:   E5:4C:2D:72:60:DD:D2:FC:B0:8E:EB:EB:F0:54:84:51:D7:E5:A5:1A
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer:       /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial:       01962F072C461DA1EC32359F3AC8C24C945D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number:          073D
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
                          2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: RDupl1hYh8cZgMTNCrQo/tRdfHVrnNvr3ZbeEOeT4xA=)
                          3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2c:46:1d:a1:ec:32:35:9f:3a:c8:c2:4c:94:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=e54c2d7260ddd2fcb08eebebf0548451d7e5a51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:ea:91:48:f4:38:11:e1:76:36:8a:fd:6c:
                    3f:97:72:df:7b:17:08:51:bc:57:14:17:59:6a:b2:
                    c4:e6:4b:0b:4c:fc:f4:45:e6:09:b1:df:87:0d:4f:
                    95:f7:4c:29:27:0f:78:97:3f:ba:da:56:de:2b:7e:
                    1b:f4:bc:bd:68:5d:c5:9a:a6:2d:8e:b8:5d:1d:0f:
                    a1:d7:53:69:6f:fa:e1:79:84:de:4d:5d:68:ad:35:
                    1b:77:33:61:dc:56:f4:36:e6:d1:20:a9:60:42:48:
                    95:e5:5d:c1:f1:45:80:79:ef:4f:dc:6d:83:67:cf:
                    75:3c:51:27:56:8e:c8:fb:2b:30:b3:26:2f:44:f6:
                    4e:ba:77:75:72:bb:93:6b:29:bd:4e:e1:b1:20:fa:
                    c9:3f:b4:e2:36:c3:56:b0:17:22:ee:db:78:00:52:
                    6b:20:e7:3f:5d:5a:5c:1b:51:6c:17:c8:e0:51:d7:
                    b2:dc:ed:f8:a6:7e:d4:8f:6d:40:0c:44:80:8e:cc:
                    e5:29:73:91:4c:bd:f7:1f:db:82:a7:19:0a:13:50:
                    01:67:d5:d0:66:5e:8a:78:13:d5:7c:cd:ca:78:7f:
                    0f:d9:4d:fa:8f:a4:38:19:0c:46:3f:42:d4:b0:4a:
                    cc:84:d5:f2:11:a4:74:20:63:f1:0d:b8:e4:17:e2:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4C:2D:72:60:DD:D2:FC:B0:8E:EB:EB:F0:54:84:51:D7:E5:A5:1A
            X509v3 Authority Key Identifier:
                keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:54:c4:b1:0b:c3:52:e0:82:9d:1e:87:94:8e:99:f4:d4:
         55:35:73:97:41:73:1c:60:47:39:04:e9:fa:fd:82:60:f5:74:
         29:5c:3b:c1:b0:fd:81:b2:d6:39:3a:85:3b:de:10:c2:3f:c3:
         97:02:e5:07:d6:79:6c:f6:6f:f4:b8:7d:eb:f4:45:79:19:7c:
         7c:cf:e0:f9:2b:27:76:db:a2:e6:14:59:f9:47:a1:ce:2f:c3:
         7f:b4:2c:ac:e4:38:6f:47:32:ce:0b:2a:f0:0c:2f:bd:1e:31:
         24:a3:4e:af:58:7b:9a:47:66:18:83:67:50:ef:36:13:d6:51:
         50:6a:18:98:d4:9b:2b:d3:e7:4d:0e:4e:11:89:0d:0f:f4:79:
         70:ec:a5:27:00:a5:2e:ee:dc:13:f9:97:df:06:80:30:16:ce:
         70:fa:9d:a7:d7:f9:cf:cb:ab:ad:8d:9d:4b:9a:d5:e8:db:2e:
         6e:0e:48:09:32:77:79:b4:53:17:4b:8c:c5:7c:8b:21:b4:6f:
         c5:3b:e1:83:b1:c2:64:48:9b:4a:56:41:9e:61:f2:65:40:7c:
         37:0e:93:d7:50:30:94:c8:db:1e:9a:6c:cc:bf:53:35:09:08:
         82:bf:70:89:50:26:35:5b:ce:9e:43:92:a1:e0:fe:4c:3f:66:
         fc:41:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----