Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File:                     9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier:          aVhO5N6SqGBV7tH/j8a1gMI/tDCnKkI59AFNKDMU4gM=
Subject key identifier:   B4:04:76:C9:F9:80:D0:DB:C9:60:3C:E8:43:5C:54:65:5C:68:26:79
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer:       /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial:       01962FAB7500BF2B786A6DD11C78093AB132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number:          07B5
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
                          2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: 7r3Q6lj1u8fnqD5Am1dI6TCt+vDaYAOaNqZPlLWjf3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:75:00:bf:2b:78:6a:6d:d1:1c:78:09:3a:b1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=b40476c9f980d0dbc9603ce8435c54655c682679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:af:39:44:de:2d:fe:49:4c:85:e3:f3:62:
                    43:91:de:0f:f4:e9:db:f1:46:13:0a:f2:35:a8:0c:
                    c9:b8:30:6a:c2:ad:5f:9c:fa:1e:da:17:86:db:10:
                    ac:3a:95:1f:e5:ff:37:9f:59:0d:b4:64:06:a5:17:
                    50:01:42:c8:a4:8f:4a:bd:f2:72:d9:ff:aa:e6:20:
                    47:89:b2:38:9f:18:dc:35:00:49:e0:7c:af:c3:e6:
                    8b:83:e8:0a:6f:12:df:be:28:ef:b4:a2:92:63:97:
                    31:01:7f:cc:81:4e:ae:22:85:0f:58:5a:da:4d:68:
                    0a:ed:71:07:8a:b9:87:01:37:92:12:e9:3f:24:1c:
                    21:42:f0:26:72:69:34:a9:6d:32:76:93:2a:79:8e:
                    c8:1c:32:a1:5c:63:aa:8c:1f:a4:73:21:15:5d:47:
                    8e:79:03:91:f5:7d:a2:56:7b:73:52:7f:bb:9e:18:
                    dc:8c:a4:42:61:20:d8:f8:3e:8a:b7:7d:c7:ce:8e:
                    88:6a:af:23:22:81:11:2d:a8:54:6e:1d:60:d6:f7:
                    2f:ef:d0:ae:5e:e8:94:00:ab:63:44:2a:22:ee:c2:
                    48:e3:23:48:27:e9:50:d0:25:f8:a2:c7:02:3a:8a:
                    79:42:d3:79:fc:6b:49:db:07:ad:6a:0d:d8:a4:09:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:04:76:C9:F9:80:D0:DB:C9:60:3C:E8:43:5C:54:65:5C:68:26:79
            X509v3 Authority Key Identifier:
                keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:43:fb:00:18:80:d4:a6:06:01:9a:c7:c4:fd:0a:09:a7:
         ad:d6:2d:f2:02:5e:a5:10:4b:93:80:24:9d:67:52:a2:3b:50:
         02:e0:d4:0d:b8:e7:cb:c1:fd:58:cf:57:d2:c8:71:06:f3:94:
         5a:19:51:98:69:14:47:6d:33:0a:b1:e9:b0:41:67:ab:3d:e1:
         19:bc:a5:7b:86:e9:1a:1d:b2:7d:ae:ff:8a:c0:d2:a1:85:77:
         ac:c9:1c:f7:29:a8:d9:f9:93:8f:d8:57:f1:dc:1f:8e:37:07:
         2d:27:c9:49:92:db:68:fe:e2:6f:74:02:eb:11:58:99:2b:f2:
         ad:bb:ef:bd:bc:8f:f6:cc:2b:bd:83:ad:4d:8c:ef:60:d7:c4:
         7e:9e:79:ae:21:87:6b:d6:dd:b8:e6:46:0e:5e:f4:f1:51:92:
         4a:4b:f0:f2:48:b7:df:ea:71:89:98:2b:1a:8f:60:e2:a1:71:
         df:1a:62:b1:a7:5a:84:c0:84:b9:4e:8d:a3:49:24:7f:d7:86:
         e5:4b:f0:54:3f:88:04:19:ab:2a:32:7a:54:81:0c:04:47:0a:
         b0:83:3e:22:70:65:10:2a:c4:ed:a0:5a:b7:d5:d3:10:fb:86:
         3d:c7:91:9b:46:72:c5:cd:55:4c:a4:b3:da:e5:c8:2a:53:11:
         fe:ae:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----