Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          zZ7zfTdlhiUfPLbt/89SIHmHN2H6m/0YvUsh/0AnJkE=
Subject key identifier:   FA:DC:58:0A:32:D8:CC:C9:98:21:27:CA:DE:05:B9:FF:D7:8F:EC:75
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       01962E98EE1B1404E36EC2A44AD7263D0DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=)
                          2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=)
                          3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=)
                          4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: ES81xzEoJORQdUTvOrjTy4xo/yTFaOko+7AWRn0sGco=)
                          5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ee:1b:14:04:e3:6e:c2:a4:4a:d7:26:3d:0d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=fadc580a32d8ccc9982127cade05b9ffd78fec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:e2:0b:5b:34:3e:02:d0:3b:9e:7e:e9:9c:
                    f7:6a:6d:aa:ba:d6:8b:82:c7:db:7a:10:33:38:d6:
                    01:1b:b1:1b:f5:5b:74:ed:44:14:d9:6b:d8:a1:e8:
                    52:5a:9b:cb:16:55:25:8b:e7:db:81:70:8e:d0:84:
                    fa:d4:53:82:13:25:fa:61:15:7d:9e:b7:91:ea:63:
                    fc:51:c0:4a:88:4a:09:86:e3:14:d8:15:7e:ea:88:
                    59:42:30:f1:bc:88:af:95:98:36:f2:be:58:6b:c9:
                    dd:de:9e:61:50:ed:21:e1:d2:dd:8d:dc:da:7d:12:
                    84:c3:88:d0:5d:6f:a1:52:2c:e6:fd:7b:d6:f8:7a:
                    ad:12:ba:f7:01:06:92:ca:3e:14:a8:d0:af:29:c9:
                    e1:ae:28:ac:b3:8d:0a:16:43:50:ab:81:58:be:e2:
                    75:0d:3a:08:83:d8:59:70:ee:a5:0c:45:66:b5:5b:
                    fd:9a:44:77:cb:f6:0b:07:3d:dd:fc:64:74:4d:a8:
                    dc:53:da:ce:f5:74:50:6c:4a:95:11:b9:12:45:c8:
                    bd:ba:59:07:c0:9c:ee:69:38:f0:43:e1:74:71:ec:
                    7c:63:62:46:16:35:3e:df:d5:e5:e4:fc:25:2c:73:
                    92:54:c2:c8:24:e6:f5:8e:f4:31:9b:71:f3:7a:62:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:58:0A:32:D8:CC:C9:98:21:27:CA:DE:05:B9:FF:D7:8F:EC:75
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:93:3b:c4:ce:64:e7:0c:6e:38:6c:2f:7a:3c:1c:26:18:8d:
         c9:26:c7:02:cd:83:d1:f7:6d:57:da:f2:8d:73:81:f9:99:cc:
         0e:2c:d8:e7:8e:88:11:0d:f0:8a:4c:6d:53:2c:c8:70:ee:89:
         37:30:fc:8b:0c:7d:b8:81:f0:0a:7d:d8:6a:8e:7c:99:05:00:
         3a:3d:15:c1:2d:02:c2:bf:f3:65:94:33:03:ff:c8:cc:dc:3a:
         17:44:01:5c:11:f8:9c:1c:3e:d8:7b:40:68:39:5d:d9:84:24:
         98:b7:87:b0:54:ca:62:33:93:c8:28:57:85:e1:f4:da:25:9c:
         51:4a:03:cf:c0:50:d2:02:2e:1a:f7:4f:47:bb:a8:88:e4:a1:
         ba:f0:29:67:5e:23:99:59:ab:03:7d:65:d9:db:97:89:ec:83:
         32:64:83:a4:49:2a:3c:19:f3:35:5c:37:2e:83:79:fa:17:aa:
         0b:7c:a3:4a:3f:ee:e1:21:94:34:d9:6b:69:9b:eb:fe:01:65:
         fe:79:03:3c:50:b7:25:55:41:ad:64:39:93:e3:5f:4c:e5:97:
         83:9a:da:e1:39:e7:d4:eb:2a:18:a6:81:37:8d:77:c8:fd:0e:
         cd:c3:cb:d6:1b:0f:7e:d9:fb:54:ac:39:80:f6:fc:6c:30:2f:
         e8:d7:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----