Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File:                     n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier:          /Efi35I5s4jn1FXrJh/ARP0XEvROro97UbhPsl0kIYI=
Subject key identifier:   0A:DA:65:A6:47:91:6F:45:04:40:F8:77:96:4B:E8:06:61:F3:33:B6
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer:       /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial:       01962F74EFE3878F1B31AAF18AF1085A7F08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number:          0D97
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
                          2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: mZ8/TaJdmtrn263NubVzbu+o0JMKD66Uy8pOSLkLBGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ef:e3:87:8f:1b:31:aa:f1:8a:f1:08:5a:7f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=0ada65a647916f450440f877964be80661f333b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:c8:30:c5:51:6b:d1:c9:2e:67:b2:d0:fe:
                    1b:39:a4:3d:78:20:c7:55:d0:0b:3d:40:21:09:46:
                    82:42:e6:b7:0f:96:84:de:18:69:d1:36:da:b3:a6:
                    63:eb:ff:a0:39:84:27:3c:78:7d:09:b1:f6:68:be:
                    e4:7d:d2:64:53:98:4c:8f:84:92:fa:49:44:d4:26:
                    94:7a:f5:ed:c2:3a:8f:1e:1a:c6:28:08:ef:ee:cd:
                    12:b9:24:a7:f1:42:db:de:98:7e:33:7a:63:74:10:
                    f4:24:a5:63:d1:cf:9a:5e:4d:04:93:95:19:50:74:
                    a9:75:31:b4:36:d4:20:be:65:90:10:1e:7e:a2:0f:
                    63:f6:78:fe:51:40:6a:1d:9a:95:13:fa:3e:f7:33:
                    9f:27:ee:35:62:88:03:30:9f:0f:bf:a3:82:64:ef:
                    37:e4:d9:e6:60:1e:e0:21:a6:74:ae:52:c9:f7:82:
                    4c:50:a6:d4:90:78:3d:b9:c6:55:65:55:1f:de:ec:
                    6c:45:97:8e:aa:29:a0:c1:f5:86:f4:dc:67:22:da:
                    d9:36:0b:24:d3:17:d2:e0:08:36:03:43:cd:e4:b4:
                    f8:6a:92:6f:88:b4:6a:da:e4:fa:ff:63:b8:de:0e:
                    a9:e5:93:11:c1:49:46:25:d5:05:7c:e3:93:c4:9b:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DA:65:A6:47:91:6F:45:04:40:F8:77:96:4B:E8:06:61:F3:33:B6
            X509v3 Authority Key Identifier:
                keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:24:67:42:44:03:56:7b:a5:c9:93:a0:77:ad:d4:60:5b:c5:
         2b:36:ed:6f:17:0a:1e:e1:77:07:a7:fa:51:70:b8:eb:ec:73:
         5b:0d:ef:b9:00:fd:e4:0e:f9:15:50:36:31:39:71:e5:08:b5:
         7d:9f:7b:cb:15:26:3b:c9:4d:d8:d1:3c:3e:2e:55:34:ec:af:
         95:09:a6:28:82:4f:41:58:07:24:0d:c6:74:62:92:d7:9f:b8:
         61:76:9b:b1:a0:fe:24:65:49:08:55:db:db:67:ee:fc:28:9d:
         7a:a1:58:13:52:49:24:5b:73:84:f1:24:14:31:85:08:61:52:
         65:4c:e1:44:85:5a:e9:2c:9f:81:4e:c7:18:a5:dd:d0:aa:a7:
         9b:c7:1c:9d:cb:06:2b:ad:74:17:1e:97:00:62:a2:f4:21:f4:
         63:07:e9:e5:40:83:24:d4:8d:4d:62:ab:c7:08:ca:16:93:d8:
         d0:8d:32:d3:7d:6a:90:05:7b:df:6a:4c:e8:2d:1e:bd:8c:dd:
         58:76:b4:18:89:7f:3a:d5:70:b6:cd:23:e4:26:bf:22:49:68:
         37:46:79:79:4c:32:3e:83:3f:10:d3:fd:e3:d3:98:d9:88:0a:
         19:89:cf:ee:ae:09:97:fe:cf:4d:12:72:a9:a5:ed:08:59:33:
         0c:c0:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----