Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File:                     9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier:          ZqaHQG7FP7yxJDdDe+lXvoV65Rv0QuZWDsmsNxdcRMc=
Subject key identifier:   51:D2:A3:DD:17:21:81:11:CB:26:FA:51:AF:E0:92:17:24:9F:42:06
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer:       /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial:       01962E99186B74A961A1BE906FC69B451A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number:          01E8
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: BU9GkVBy9q4l8dfslwOPSBGHoEAcWcaVvU2v2jR3/lE=)
                          2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
                          3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:6b:74:a9:61:a1:be:90:6f:c6:9b:45:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=51d2a3dd17218111cb26fa51afe09217249f4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:a2:75:91:cc:54:ec:ce:1e:68:41:d7:c1:
                    97:a6:0f:df:6f:b2:cc:d1:43:12:f9:81:ce:0e:da:
                    0c:58:5a:49:3a:ff:32:2e:3a:94:e1:56:ce:07:a9:
                    8e:f6:eb:48:d7:fc:6f:ab:f2:1b:9e:71:4e:c1:6a:
                    fe:0d:9e:2e:c8:c0:e5:f7:91:cd:31:d2:b8:5a:64:
                    49:cd:76:90:b6:38:75:75:6f:ea:7d:e8:a4:c2:de:
                    85:8d:dc:cc:17:40:7a:83:ba:c5:1e:db:e6:6e:d9:
                    50:7a:b2:0e:4d:43:33:9b:b5:78:8a:bc:ed:e2:7e:
                    ff:8f:0b:1d:2e:5b:07:8d:71:75:c0:c8:72:01:db:
                    82:62:62:5e:45:0b:b0:0b:e9:da:21:87:2f:95:4e:
                    c0:e9:94:ec:ce:a6:5c:c1:bb:46:73:78:48:c2:38:
                    ca:2b:e3:68:83:fc:66:7a:ad:cb:c7:d8:ff:85:7b:
                    dc:8a:2b:d6:e8:97:3f:77:8f:b8:8b:06:85:fb:f0:
                    3a:cf:b3:7b:5c:b8:35:8e:73:b5:3b:8a:56:ab:10:
                    9b:b0:cb:4d:59:c4:f0:4e:b5:50:01:6e:7c:c7:2b:
                    7d:3d:c0:3b:76:ca:d7:48:de:d9:8e:43:a6:4c:c7:
                    c1:00:c2:28:76:a1:ae:00:9a:2e:e7:90:1d:6b:2c:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D2:A3:DD:17:21:81:11:CB:26:FA:51:AF:E0:92:17:24:9F:42:06
            X509v3 Authority Key Identifier:
                keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2f:24:6b:b8:8f:6f:73:aa:d2:e4:48:52:2f:7b:1c:e6:67:
         7b:53:32:49:9f:c3:9e:94:03:b8:56:e5:44:d0:e0:29:76:b7:
         4f:b0:2c:45:cb:f1:41:83:40:5f:3a:0d:84:1b:7e:37:d4:c8:
         22:02:87:d0:07:6e:96:a9:03:02:26:6e:03:cc:26:5e:15:4b:
         1a:a7:89:27:99:d1:82:ad:8a:b6:8a:cb:ff:e0:9e:ed:ed:f6:
         d5:6d:13:8d:18:38:d3:87:6e:be:97:89:2c:42:00:18:87:55:
         1e:6b:89:06:4f:a6:58:7c:29:9c:dc:e7:ec:3d:7f:1e:41:43:
         9b:9d:6f:ce:ff:22:ba:53:e5:ba:ca:e9:d6:ce:0a:ef:f4:38:
         9e:72:bc:0d:c4:13:53:7e:ef:21:8a:cf:f2:8e:62:5b:41:e5:
         b6:78:d7:d4:17:4c:d4:40:40:a0:4a:33:7e:a6:82:75:e3:86:
         88:a5:2d:be:ed:64:62:02:03:d5:33:d3:87:23:f9:57:20:5d:
         86:ba:19:04:46:a8:80:0d:11:fa:4c:c4:2b:0d:5a:74:dc:31:
         8c:1e:7d:24:cb:6d:c6:0e:9f:cd:d3:1f:98:39:68:f0:b6:ba:
         dc:83:ce:0a:9d:ca:49:24:0a:32:fe:2a:a5:64:6c:2c:78:94:
         1e:b1:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----