Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File:                     9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier:          JAy3kvzIEzARLVwZh5xFbHF30T/mNZTO6Eieugo8U84=
Subject key identifier:   B1:EC:3F:B8:8C:D7:39:1B:FF:9C:41:3A:47:55:FD:22:F7:39:81:34
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer:       /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial:       01962E61D7E63BC16FFAC5FEA0EBEB7BE61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number:          0B05
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
                          2: 3RdZANpVovPRB4zCH-Lkf3Prtaw.roa (hash: l5w5cnd2tEXGGJFzz40s0YV//kdA+ReRwmR0KmdVVDU=)
                          3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: XbBn2o5/WuPLUmz6s4KkcEKzKH9MST8NO3Zz6XVDzrg=)
                          4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=)
                          5: H6_j121nwrBmCty1wbdXDXgyav8.roa (hash: vaRQnvr04lMFV87aznhgmJYTb/5VAEUEaBeFpioyQ+k=)
                          6: PpuH6UZdHiPbsmr0e060Bitru2g.roa (hash: S+KU/xPGIUttnT6f0HUq3beFm6aOsdHTB3Cjru0v55o=)
                          7: QzeYJ0KS9RnXOpGwg30dLB7QNtM.roa (hash: GvxqUqeToEyuHItwEPwmlJxDN8bC2ihCXeSL11W/nwA=)
                          8: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=)
                          9: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:e6:3b:c1:6f:fa:c5:fe:a0:eb:eb:7b:e6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=b1ec3fb88cd7391bff9c413a4755fd22f7398134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:40:23:76:36:b0:e0:69:c9:3c:0f:b4:6f:
                    8c:74:ff:d4:26:89:27:54:5e:10:eb:cb:a3:5d:db:
                    53:84:10:22:ce:70:ce:f9:f7:2e:7e:1d:b6:a9:1b:
                    f8:ab:0b:35:87:5d:d9:4a:b4:90:4d:97:df:0f:f3:
                    c5:e6:52:65:07:4a:79:b4:2a:cc:e1:aa:ae:96:15:
                    08:a0:d7:87:cc:19:1f:11:ea:94:99:a6:91:7d:07:
                    b8:7d:6b:a7:8e:0b:ed:8e:36:1c:f4:2f:5d:55:42:
                    50:07:51:c2:9e:a7:0d:b3:8c:14:2b:22:84:72:52:
                    ae:4b:bc:3c:3f:33:fa:c4:a2:67:d8:24:c6:0a:18:
                    2f:4f:58:05:87:c7:8c:68:19:0f:71:e4:95:ab:a6:
                    f2:97:41:54:16:ba:f5:bc:b0:94:87:89:61:c1:e4:
                    ba:cf:81:0b:83:2d:22:ad:6a:b1:f4:e7:00:a4:54:
                    e8:af:90:17:53:ba:09:99:43:d6:48:c7:a9:87:36:
                    a4:21:fb:fc:ec:67:66:5d:58:73:f1:67:94:6a:00:
                    f7:40:3a:dc:a2:a3:8e:8d:41:46:fa:5b:48:93:5a:
                    47:8a:d5:7d:b0:f2:65:b7:e6:d2:c1:a8:b2:18:4e:
                    08:37:a1:1b:91:ea:bb:4e:c0:ab:cd:08:67:a7:72:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:3F:B8:8C:D7:39:1B:FF:9C:41:3A:47:55:FD:22:F7:39:81:34
            X509v3 Authority Key Identifier:
                keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:07:37:28:78:6d:cf:66:20:0d:09:00:a2:f8:49:8a:ca:d2:
         49:d0:12:fc:38:1a:ae:50:a2:63:25:89:dc:f3:7f:c3:c3:6d:
         93:81:70:85:b7:84:6e:d0:61:95:46:46:a5:03:6f:15:60:02:
         48:ec:18:72:a4:b2:15:79:8e:86:08:78:81:32:a9:b4:69:6b:
         c0:d6:23:86:f3:8b:8d:51:2c:cc:67:2d:2c:33:9f:9d:19:57:
         e1:3a:e7:ce:29:2e:3f:8c:17:1e:25:74:2f:cd:ce:f2:ee:52:
         39:fe:9f:28:89:d5:81:59:1c:6f:dc:41:a7:cf:6d:51:bd:6d:
         a0:b2:6a:a0:6f:bc:1b:20:a1:6b:f7:9e:08:58:b2:df:30:d4:
         90:67:39:12:22:b4:fd:62:28:ea:29:26:17:3c:91:cc:c3:f2:
         56:ad:6e:2c:05:7b:29:ca:83:d4:32:c9:66:1c:67:ce:a8:f3:
         0a:33:a2:5c:92:4b:a0:e2:df:16:57:61:70:06:e5:1d:8a:92:
         1c:97:1e:01:f2:fb:1c:a6:9e:13:e2:4a:18:47:77:59:64:e9:
         41:65:43:55:ff:4c:8a:18:4a:08:e1:e8:1d:26:a0:cf:f0:ad:
         64:f9:3a:67:00:56:04:29:ca:ee:1b:a2:21:9b:c4:d8:b3:f2:
         ae:16:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----