Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File:                     9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier:          jYbIGkkEzcLUe9ZD8IVVhdnr9iLSSy8dROPcfrjpmvw=
Subject key identifier:   53:C6:65:16:21:5C:DC:D1:1D:F2:5A:73:CE:0C:0D:FB:C9:47:81:15
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer:       /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial:       01962ECFB6765CB37A58220BE2F2BDB906B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number:          0A06
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: G1kqs0GCJBCavB6vKJKex6ftF958TFR+5nuALhzCssY=)
                          2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
                          3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b6:76:5c:b3:7a:58:22:0b:e2:f2:bd:b9:06:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=53c66516215cdcd11df25a73ce0c0dfbc9478115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:ae:c0:88:2c:3e:96:64:dc:c4:b7:63:b3:
                    80:4d:af:04:93:1a:30:fd:ee:c8:ce:64:c4:63:f9:
                    55:f0:1d:15:b8:7f:c9:11:9a:ef:2f:a6:7c:93:ea:
                    bb:f2:b0:22:25:cc:12:94:21:ce:ae:91:7f:8c:ed:
                    e2:74:f6:63:63:3e:38:89:5e:f0:0e:c4:b3:1e:7a:
                    ce:36:64:05:4e:21:0f:30:6e:d3:4f:00:70:d9:3f:
                    05:52:27:9d:5d:9d:e8:74:46:99:fc:a1:12:a0:16:
                    0d:61:77:63:d8:ec:bb:17:cf:65:2c:98:a8:9d:c2:
                    00:12:d5:6e:cf:ba:22:5a:45:62:d3:e0:71:8d:85:
                    c9:63:90:ab:b7:70:8b:60:40:9e:68:02:01:7b:e1:
                    c1:00:a2:30:78:02:06:2d:f0:ff:74:17:e0:51:36:
                    7d:a5:4d:f9:9c:eb:70:4a:eb:dc:91:f0:d8:da:33:
                    02:64:76:a2:c0:70:7a:59:a7:b0:7f:59:db:a0:3f:
                    28:f8:44:a3:5e:b5:1c:a9:16:d3:41:ce:69:b1:6d:
                    bc:83:02:31:c4:3d:24:01:cf:4d:21:29:e2:94:d0:
                    78:53:6d:c3:34:7d:99:ab:25:a5:7b:79:90:c6:c3:
                    83:64:54:69:70:0c:d3:56:97:ab:aa:2a:3b:4e:d1:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:65:16:21:5C:DC:D1:1D:F2:5A:73:CE:0C:0D:FB:C9:47:81:15
            X509v3 Authority Key Identifier:
                keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:61:09:db:ca:19:b6:7a:4d:ef:ed:b9:58:b5:0e:f0:39:
         81:ca:8a:fe:e8:dc:18:84:f9:01:5f:f9:95:92:e7:e8:56:db:
         ab:f0:af:2c:3e:35:1e:0a:41:cb:b9:0b:0b:8e:d6:1e:d3:98:
         8c:ea:c8:60:86:ed:41:4e:9e:eb:a8:e8:e2:2f:90:e1:d0:c7:
         a0:d9:8d:bc:28:c2:dd:0c:ec:31:23:e7:66:8c:3f:a7:7b:12:
         23:e5:b9:32:54:5f:f1:3a:46:87:58:ac:03:d6:f3:9d:a8:30:
         08:10:ac:12:e4:f1:a3:3f:c8:6c:99:43:32:e4:39:46:6c:ae:
         a9:1d:fc:47:c5:9c:13:5c:f4:cb:56:32:b6:c5:9f:10:70:3c:
         72:0d:49:18:ec:8c:9c:6d:eb:63:76:2d:11:5c:72:57:76:20:
         d1:7d:66:c3:34:f5:f1:c7:f1:29:f3:64:15:86:28:76:ac:2d:
         ea:b7:c6:58:04:06:48:5b:1a:42:f5:c9:27:62:58:60:a0:e7:
         a1:70:70:f7:51:a9:0d:33:d4:21:ff:a9:8a:94:d0:97:b8:9c:
         78:38:a7:52:2a:b5:70:6e:10:47:82:c7:a4:e8:b9:1c:d4:08:
         66:62:1c:1d:f8:9e:ed:c3:f3:89:3a:60:28:5a:f7:b2:ad:ca:
         18:c3:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----