Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
File:                     2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json)
Hash identifier:          YxygQ8gf04QVbeI5YJz7Z/VHBfjbRLYvlhafJhlrJHs=
Subject key identifier:   F4:FE:45:49:E2:E2:B0:64:14:6A:2E:85:9E:06:24:C6:78:42:2A:9C
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Certificate issuer:       /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial:       01962FAB282213A020A7355C5AD9982FBE61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
Manifest number:          0AB9
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: S+LMUeNR+7lhahLRcj/NvmvTVYV80o975duGI+XoNSo=)
                          2: nyss7FejNtDGTUXRBz8EpK-bUtQ.roa (hash: 1YbJTbv2jhWedSFo8tfV4w9Efzyk/as9DY0FQwn+kas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:28:22:13:a0:20:a7:35:5c:5a:d9:98:2f:be:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=f4fe4549e2e2b064146a2e859e0624c678422a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:1b:4c:10:f6:df:97:c8:2a:2b:89:0e:1c:
                    7f:4d:16:bd:82:80:9a:1b:cb:f0:88:62:8f:4d:cc:
                    ef:51:b0:93:b1:0a:be:35:22:a6:fb:b2:77:b4:60:
                    5f:94:02:85:c4:c6:31:0e:5c:be:71:96:7e:aa:bd:
                    a9:f9:f8:9d:d1:76:75:f8:2b:a9:0a:e1:e5:a7:80:
                    94:f7:10:31:0f:0d:98:fa:41:c1:75:33:e1:2a:d6:
                    a4:d1:6b:a0:2a:63:f6:3b:e1:86:56:b1:22:8a:15:
                    eb:8c:a2:2f:21:7d:23:93:d6:25:35:39:33:ce:91:
                    1b:b5:fd:cf:94:c9:19:63:d3:69:7a:1a:fd:9a:83:
                    a2:1e:3d:c5:dc:bb:4b:37:25:29:e0:8f:0d:b7:36:
                    86:f2:35:a0:f0:91:e9:7b:cf:7d:b0:68:3a:7f:4a:
                    e9:25:46:a2:48:3e:93:21:62:53:25:6b:ef:7e:33:
                    d5:6d:b0:a4:54:8e:ed:ff:70:42:ef:27:67:59:e8:
                    f6:e1:7d:40:78:b1:da:88:58:d0:62:f4:ba:86:1f:
                    3b:d9:2c:d3:ab:97:a1:5c:55:12:0a:19:ec:17:ac:
                    33:ad:53:6c:42:6b:cc:6c:92:97:74:c7:d6:b3:ec:
                    13:ef:d6:9c:57:c5:0f:aa:98:e3:cf:3b:91:b1:bd:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FE:45:49:E2:E2:B0:64:14:6A:2E:85:9E:06:24:C6:78:42:2A:9C
            X509v3 Authority Key Identifier:
                keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:43:b3:48:d8:de:bc:d8:77:26:5d:d8:0e:78:0b:1a:3e:ed:
         30:44:ac:af:31:b6:5c:01:d3:0c:e5:d8:d2:95:5d:b4:a1:47:
         5c:46:76:01:7e:3e:ef:76:6a:b5:aa:50:c8:a2:5d:1e:4e:dc:
         b7:49:5b:f6:44:c0:b7:58:b3:df:ae:bd:9c:ee:ac:36:42:05:
         07:5b:d1:a7:f5:a7:87:bf:8b:71:ec:1d:5c:4c:fa:de:f0:8f:
         80:2b:fe:ce:6b:f1:92:b7:14:7d:b7:77:d0:6a:a5:7a:c1:05:
         b1:39:1a:4c:71:42:04:d1:03:e6:0b:03:ef:3c:84:b9:2c:43:
         33:46:3f:6d:8c:89:27:5f:56:d3:68:b6:d9:56:f6:f4:f9:e3:
         a0:d9:0c:53:8b:a8:9c:d2:8e:3a:3d:d4:1a:40:06:03:e3:4c:
         cd:a7:b3:a9:ff:dd:32:c3:f7:68:4b:19:96:10:98:de:6c:39:
         7a:78:ec:83:fe:39:33:56:87:f9:90:b8:7d:7b:b7:67:f0:4b:
         23:9b:cf:be:75:90:5a:5e:49:18:13:28:ec:47:a4:7e:69:3f:
         5c:79:f5:85:60:78:62:be:00:ec:ac:af:4f:d1:c5:9d:12:93:
         0b:cf:5f:fa:64:e6:f1:5f:a4:e6:09:99:fd:51:af:1a:fb:3f:
         cb:78:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----