Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File:                     9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier:          wYJJgjcHflUTl7/Ij32kaj/alsHFYAkLcwwZmhCTsAA=
Subject key identifier:   62:EF:61:D4:E7:57:E9:BB:6A:E9:09:78:77:1F:7C:EA:D3:41:DE:B1
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer:       /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial:       01962F744B5A61D9421C4415600A19B6B365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number:          110C
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: pK40vXd2+r9rbelfY8cneuwUG6R1u37EmCckuXl/RRI=)
                          2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
                          3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4b:5a:61:d9:42:1c:44:15:60:0a:19:b6:b3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=62ef61d4e757e9bb6ae90978771f7cead341deb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:48:33:ac:95:e7:21:06:7e:54:6d:5c:38:
                    e1:32:bb:ff:1d:aa:c1:11:03:be:4d:2c:98:fa:33:
                    a0:54:77:f7:3a:f7:99:b1:be:4e:81:c2:eb:10:d4:
                    c7:c2:26:47:03:46:08:f3:53:3a:32:60:1a:be:f2:
                    4b:a7:38:8f:47:6f:14:05:5f:d2:e5:ae:06:38:e5:
                    74:c0:51:f4:22:3c:4a:f4:5a:76:b5:24:1c:bc:ca:
                    3f:8c:7f:f0:59:7a:b1:c0:25:0f:5c:c7:ab:94:b3:
                    36:bc:c3:27:86:d6:f8:61:88:b0:47:0a:66:24:b8:
                    64:f8:da:64:cb:1c:86:1e:6f:ab:62:36:29:55:af:
                    05:c7:36:8d:db:ae:48:c8:82:44:4b:10:0e:6b:bc:
                    26:22:aa:8a:4d:37:c1:84:cb:b9:24:13:78:90:67:
                    5b:ae:22:bd:7d:f7:6b:74:27:1b:ad:26:9b:a1:11:
                    e7:d8:91:8f:f3:dc:aa:ea:29:24:61:4f:f4:93:dd:
                    ac:54:ec:f8:6d:7d:44:f3:b7:dc:39:17:a7:8a:f2:
                    a7:03:c2:4f:bf:a4:12:e3:d8:d8:ab:d0:5a:8a:5e:
                    44:fd:c2:a7:8e:5b:12:c4:a1:d6:1f:be:7e:a8:8a:
                    c4:ac:92:03:51:dc:42:cd:b0:eb:f7:96:24:67:0b:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:61:D4:E7:57:E9:BB:6A:E9:09:78:77:1F:7C:EA:D3:41:DE:B1
            X509v3 Authority Key Identifier:
                keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:0e:6b:23:c9:e9:e4:ba:3b:96:db:89:d3:2a:3d:4d:2f:
         88:a1:09:01:5c:0d:09:48:71:1c:ea:8c:71:64:bf:78:f4:14:
         3a:41:08:3a:9f:d2:35:35:c3:cd:88:7f:44:f5:92:db:ca:31:
         d5:e4:4a:59:61:96:84:19:61:6c:44:96:c7:8b:4f:0e:41:c9:
         0e:9e:da:5d:bc:db:2d:89:cd:c1:05:c4:f9:dc:e5:07:1b:c1:
         8c:29:d1:6f:67:bd:ae:c9:c2:8c:eb:41:15:e8:88:e9:f2:dd:
         a3:93:5e:06:ee:3a:a5:b0:f9:ce:3e:f9:c4:09:cf:84:be:62:
         17:8c:41:9b:59:6b:61:41:e6:aa:ef:5b:e9:b2:26:7b:a1:1d:
         d1:c9:b6:49:09:8c:21:06:1c:2a:88:39:26:71:85:9a:34:27:
         28:8e:77:63:fd:ba:5c:6b:38:d3:b1:52:cb:ed:b6:a1:13:83:
         d1:a7:d1:b8:ab:49:8a:0f:2c:2b:6f:18:c3:14:91:fd:a6:3e:
         5b:6d:52:bf:ef:b2:c8:92:4e:17:d4:c0:20:99:7a:7a:7c:ab:
         d7:b0:18:b9:8a:72:ea:c1:15:83:31:d8:30:3d:51:f3:18:64:
         21:9d:58:ed:74:50:20:aa:51:10:ac:bb:23:d0:69:38:cb:ea:
         4b:64:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----