Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File:                     _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier:          5f82xL+DxyWuZRYh0Qr6VvzKbkKErIEiQ11tobZeYzY=
Subject key identifier:   9D:5B:B5:48:61:71:95:FE:1A:42:A2:C5:93:3F:9C:81:31:3D:BA:B3
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer:       /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial:       01962FAB75AA6A7A85D36DB481ABAB640830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number:          04B8
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (hash: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=)
                          2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: QiIk15G//w+RcckMSn9aU8vw/MWrrztFj5OP1vmCWO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:75:aa:6a:7a:85:d3:6d:b4:81:ab:ab:64:08:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=9d5bb548617195fe1a42a2c5933f9c81313dbab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:31:9b:a1:ff:bb:9e:a7:8b:57:89:e9:55:
                    54:8b:ce:01:94:c3:34:da:d1:15:18:1b:45:9d:a2:
                    98:4d:f9:37:a4:f8:95:e4:3b:d7:d1:5d:0f:70:34:
                    9b:36:6a:36:10:68:37:c3:25:85:94:b0:43:b6:20:
                    48:9f:20:68:b2:b8:69:b6:29:2d:e7:15:09:cf:3d:
                    49:1c:5d:1c:fe:46:c4:8f:57:8a:16:c6:ec:37:b4:
                    b1:06:a4:af:b1:3e:c7:24:a8:3c:ec:4a:44:5a:73:
                    7d:28:38:8a:cd:20:9c:04:7f:c4:49:29:81:50:fe:
                    79:1a:7a:ea:32:23:a3:f4:89:fe:8b:e0:f2:0f:a8:
                    b1:09:87:76:2e:d6:d1:33:ed:c8:11:cf:36:6a:6b:
                    7c:2e:e1:ba:b8:06:67:d9:a6:9a:af:5f:4a:4f:ed:
                    26:a3:51:b9:6f:6d:c1:69:d8:a0:e9:3e:7b:bd:63:
                    9e:75:f8:2e:4c:92:1e:54:d8:de:96:11:80:c8:8a:
                    43:4a:bd:da:d0:d2:81:8a:ac:8f:ab:72:64:5e:9b:
                    24:51:e6:bf:eb:17:6c:a8:1e:dc:80:e9:04:20:66:
                    20:50:1f:98:3c:b9:ea:b1:4a:65:db:d1:d9:26:32:
                    39:34:d0:fe:24:bb:67:12:93:43:0f:b5:b1:fa:cb:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5B:B5:48:61:71:95:FE:1A:42:A2:C5:93:3F:9C:81:31:3D:BA:B3
            X509v3 Authority Key Identifier:
                keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:70:7a:16:ee:b2:0e:3a:91:55:f0:44:43:cb:8e:47:6d:b1:
         5c:28:22:34:82:43:1f:50:eb:db:de:f7:83:a9:b1:95:2b:3c:
         8c:e9:a7:1b:5d:a8:aa:d7:e8:2f:f7:be:cb:39:ed:fc:74:27:
         fc:c3:a4:5c:d0:62:55:0d:65:82:e4:6b:81:77:d5:46:ae:90:
         ef:66:6c:0c:f4:de:09:38:77:d7:cc:9c:cb:e5:6c:72:e5:31:
         fd:fe:e4:8f:3a:b2:d7:38:20:a2:42:c3:85:8b:33:64:c3:de:
         83:5a:d3:e7:f3:3b:d2:4e:4b:7b:63:ca:d0:43:4a:10:73:b2:
         b1:ce:f8:71:f7:cb:e5:1e:2b:ec:2d:cf:ab:51:22:f5:75:32:
         07:e6:5c:b3:83:21:ea:07:52:b7:bf:cd:a8:3c:b2:3c:84:d8:
         e2:64:b8:d9:de:91:d5:f6:70:d4:06:0d:62:f2:fb:f4:89:40:
         3a:df:42:a0:a4:2e:34:5f:c0:51:67:8d:c3:78:5a:5a:6a:83:
         3d:2e:a6:42:12:4d:1d:14:c8:93:b5:c8:a6:f6:44:5c:41:30:
         c5:f2:34:4c:91:fd:33:19:c9:59:75:dc:2e:72:3f:e7:f9:f7:
         17:0f:15:c3:ce:ab:94:f1:4d:f7:25:eb:8f:dc:64:1b:39:2b:
         39:c4:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----