Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File:                     p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier:          JWiAzLUA+n8m60Wh4oJttAzYqxa76F0YudiKXnxqLqE=
Subject key identifier:   02:BF:E7:F5:F4:70:C1:3D:1F:CD:94:0E:78:7D:73:CA:20:99:7C:05
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer:       /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial:       01962F748B199FCD22E2D9420BC81158E15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number:          0CC3
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
                          2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: MYyOBkzAe0LBfebBOnlLlMHABkMZIq+imHJmlbVXCh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:19:9f:cd:22:e2:d9:42:0b:c8:11:58:e1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=02bfe7f5f470c13d1fcd940e787d73ca20997c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:8c:97:2c:cc:45:3c:ab:54:bc:d8:7e:e6:
                    3f:84:3b:13:3f:f0:0b:89:a3:55:1a:c6:70:42:8a:
                    ee:c5:b3:bb:ca:2f:da:b5:98:0b:74:b5:65:db:a8:
                    d3:ae:98:a1:78:ce:f7:27:cd:ea:c8:14:e2:fd:e4:
                    6c:bb:45:e7:26:bb:6a:31:e3:70:db:7a:e1:b5:4a:
                    b1:49:8e:0e:61:53:69:f5:07:29:1d:53:28:12:1d:
                    32:0d:05:f8:b9:ba:5f:18:09:cf:bd:9f:1a:b4:1e:
                    e8:43:06:f4:d2:4a:35:24:9c:85:d0:db:73:26:3d:
                    d1:a3:4f:bb:fe:46:bb:2e:85:f0:2d:62:4f:4e:b2:
                    bf:c2:03:d7:ab:08:45:f2:09:8f:74:87:f4:b9:74:
                    59:cd:88:98:b3:59:2a:6a:3c:28:85:42:0b:14:69:
                    32:9c:84:98:15:28:3a:82:ef:25:5d:ae:01:67:fb:
                    fd:6b:8d:eb:28:60:ca:c3:71:c5:61:1e:a2:f7:bd:
                    18:7e:da:48:1e:a8:b1:cb:df:b7:d2:81:bc:c5:1d:
                    84:3c:6c:bf:ae:bd:40:f3:a6:a4:51:eb:a9:04:bc:
                    ed:cc:79:1c:13:8a:39:ba:22:f3:77:e3:f3:f5:2d:
                    c4:2a:d9:5c:d7:d4:f3:e2:ea:8c:48:2b:fb:29:c8:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BF:E7:F5:F4:70:C1:3D:1F:CD:94:0E:78:7D:73:CA:20:99:7C:05
            X509v3 Authority Key Identifier:
                keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:2b:a2:13:90:64:09:70:1c:aa:37:51:03:25:78:6e:8b:
         c6:0a:53:d6:f6:ee:c9:3d:45:6c:da:9e:d3:cb:39:a5:a3:d1:
         69:7f:ee:ab:ef:ad:0f:db:7e:b2:71:71:c2:2c:68:f3:40:4e:
         ab:c1:6c:ae:82:ef:ba:fe:b2:1f:e1:0e:9b:d8:67:37:b6:20:
         db:36:51:49:13:06:92:2d:6a:c1:bf:39:68:4e:1b:5a:b9:ed:
         7e:be:08:e2:04:e5:64:0e:97:2a:71:0e:d4:a3:09:a3:38:59:
         1b:16:bf:8a:6c:2e:28:78:6c:74:08:64:7e:e3:ba:b9:9b:80:
         94:b1:e0:e6:6b:0c:13:1e:5e:e7:54:b8:18:4a:bb:5a:ac:37:
         17:7d:07:ee:ab:90:c0:b5:c5:1b:a3:d7:68:25:38:6e:b0:e6:
         5c:5b:af:2b:21:07:29:9b:7c:93:13:a1:a1:d8:85:11:06:37:
         2d:a8:b9:98:86:8b:58:e8:d0:11:b3:75:5b:77:19:33:78:8e:
         2e:c3:13:19:f4:4b:e5:da:44:13:52:6b:05:78:40:30:26:ad:
         de:f2:48:2f:e1:dd:54:c4:35:b9:2f:2f:e8:a4:5a:15:eb:9b:
         cb:e2:4f:5c:dc:47:d5:2c:79:7c:7e:51:c3:7e:44:7b:f3:4d:
         fe:06:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----