Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File:                     Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier:          MKvynsG5exNWMubZacO4eh7c55zJWAwT+7neRhQhAZo=
Subject key identifier:   F0:D5:5D:3A:62:CA:0B:E3:73:B2:C0:B5:19:52:C4:8C:04:2B:31:C5
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer:       /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial:       01962F3DBB3F5C03BF099D67350D8A942DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number:          04AD
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: BkDrM4-atcp10Br--qbvg_yK1zg.roa (hash: OQTXLqdYWvwdj8zXSXiFu8x5dJlCSPxgy4/Qhi1Yohc=)
                          2: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: W9a2G9DhiAaLPtGKSP3coL8TrM7jmtCTgTDvm6XvzqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:3f:5c:03:bf:09:9d:67:35:0d:8a:94:2d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=f0d55d3a62ca0be373b2c0b51952c48c042b31c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:6d:7f:ad:a9:2d:44:13:d6:d8:f0:3f:43:
                    2b:27:e7:38:c6:2a:7b:ec:95:4a:d7:16:30:cc:50:
                    a3:80:a8:7b:5e:80:b4:01:d7:6d:b3:4e:24:d4:fd:
                    e7:43:ee:25:fd:6a:7f:ff:16:f5:19:ec:03:0d:70:
                    16:44:a9:20:e7:36:77:ac:64:c8:ab:ed:84:9d:a0:
                    15:40:63:d4:1f:98:bc:ea:29:65:c4:03:27:79:2b:
                    e2:3c:6b:e2:2b:78:1f:bf:35:bd:c1:a6:a5:94:30:
                    68:aa:c6:61:85:a2:93:c2:73:ef:89:87:0b:5a:c8:
                    bb:5d:02:bc:55:7b:ea:fc:68:2a:27:ce:f9:ad:2d:
                    e8:bc:07:9a:b4:cf:9a:f8:9c:96:49:c0:01:b8:e8:
                    51:2c:4a:b6:78:d2:52:97:e7:c4:44:b1:15:68:c5:
                    b5:ef:d7:54:0f:b2:d8:06:e1:bd:9f:11:c7:3f:8d:
                    56:3c:5b:08:04:5a:a9:aa:9a:a0:97:f2:8d:4a:3f:
                    9a:46:28:10:d7:30:ca:19:2f:55:0a:6e:7f:41:ad:
                    bc:c3:2b:92:10:6e:84:c5:35:f0:33:c4:0e:08:c4:
                    df:7f:33:d6:99:9a:42:51:d8:76:01:c0:45:0b:09:
                    65:69:18:7a:5e:e3:39:ae:32:bf:79:0f:77:8a:2c:
                    f3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:5D:3A:62:CA:0B:E3:73:B2:C0:B5:19:52:C4:8C:04:2B:31:C5
            X509v3 Authority Key Identifier:
                keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:20:49:9e:39:d3:29:ab:df:d1:c0:8c:17:59:c9:a5:5f:99:
         cf:d9:42:0d:91:f3:b3:86:78:4a:52:c7:27:6e:12:a2:0f:cc:
         47:7f:00:04:4b:c1:66:72:e9:5b:2d:30:8c:05:d2:f1:fa:a0:
         0f:5b:e8:09:a9:55:8e:a0:17:57:9f:01:50:00:b1:17:db:ce:
         15:df:7d:c2:bd:7f:28:9d:80:2a:38:4d:c9:12:e1:c3:d4:47:
         c1:75:c8:c9:1b:07:86:ba:41:9f:4b:63:04:41:2b:77:fa:35:
         48:a5:fe:ab:37:4f:1b:ca:97:a4:b8:2d:a0:37:51:8e:18:2e:
         ea:ac:41:34:3b:26:0e:ee:30:eb:e5:f2:59:13:4d:20:41:68:
         dd:23:26:16:a7:88:a0:21:2b:7d:5b:47:da:3e:26:88:2a:08:
         12:69:2c:a3:4b:47:d3:ca:95:8e:f1:f6:76:8c:53:57:1a:3e:
         d4:e8:51:80:30:62:fb:6b:d4:cb:5b:ae:9c:7a:70:2c:44:e3:
         f0:15:4e:3c:cf:e2:a9:ff:86:a5:29:51:58:83:8e:e4:08:3c:
         c7:bb:19:96:4e:5c:9c:5a:3c:b0:99:dd:31:20:38:85:0c:c3:
         3b:0b:b3:7f:1b:e4:71:f6:6e:98:c2:16:66:e8:ee:57:76:6d:
         4d:8e:da:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----