Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File:                     9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier:          Vscpoc+Xf7w6zvrSjBx1EteV6wLPk7MGJsiClXdFNxo=
Subject key identifier:   3E:8E:F9:63:8D:9E:A5:62:28:36:42:E2:A5:EA:96:C1:7F:23:B1:03
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer:       /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial:       01962F3D2D6EC376227D4D610150D3FE6DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number:          07E1
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
                          2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: aR1pykjB050Lyy/onuq4GYh9S5R9oiLKc6zRHT4N+zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2d:6e:c3:76:22:7d:4d:61:01:50:d3:fe:6d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=3e8ef9638d9ea562283642e2a5ea96c17f23b103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:14:26:50:44:a2:ee:f2:a8:6c:2c:60:c9:
                    5e:7b:81:79:60:1d:c5:84:df:52:61:d3:5e:54:fe:
                    cb:27:dd:33:97:17:f0:d6:fe:7d:0e:00:98:df:29:
                    4f:d9:93:16:1a:63:20:1c:81:c5:3b:ce:3b:89:57:
                    83:b9:cb:5e:68:75:98:41:41:d0:0f:19:a9:c4:e0:
                    45:90:f3:07:fb:76:5b:96:15:01:2b:fd:6d:db:4c:
                    e5:78:e2:8f:c8:c1:68:ff:f2:9e:80:f3:22:72:08:
                    00:c2:fc:9c:fc:74:f7:16:9e:0d:22:b8:91:e8:9a:
                    40:bc:49:f8:11:e1:7e:62:0d:3c:79:18:f5:9c:87:
                    d0:6a:3e:aa:6f:9a:f6:51:4e:7b:e0:4b:97:fb:6f:
                    87:66:29:a9:e1:a1:6c:f8:cf:33:b8:9a:a0:24:14:
                    e2:81:14:37:d6:76:2e:a5:d6:6c:40:e0:aa:d3:9c:
                    85:f9:29:ff:34:08:45:3b:9a:93:95:aa:0e:85:6d:
                    3b:c7:b6:01:60:c1:c2:c0:e7:97:b3:43:5b:be:69:
                    74:b7:32:5a:61:9a:47:f3:a6:bb:4e:73:7f:d4:d1:
                    36:88:87:e3:7f:8f:78:47:ab:c1:98:7a:d2:21:42:
                    16:3f:42:3d:89:1d:bd:86:d8:07:d1:61:39:aa:e5:
                    ff:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8E:F9:63:8D:9E:A5:62:28:36:42:E2:A5:EA:96:C1:7F:23:B1:03
            X509v3 Authority Key Identifier:
                keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:f9:76:51:e8:7b:48:cf:9d:dd:a8:25:0d:6e:9c:ac:a4:
         6f:15:f3:bf:dd:77:34:37:2f:66:55:a7:f4:cf:c2:15:4b:a4:
         e9:70:b5:84:e0:f8:20:32:f4:2a:49:bc:b3:36:77:41:b5:3d:
         69:1b:e4:54:e0:fa:67:30:33:10:8b:e2:7f:85:96:48:9c:8f:
         6e:f3:2e:d2:57:52:e2:b8:d4:87:0f:90:20:43:45:36:70:98:
         e9:ef:7a:00:a1:70:a0:fd:31:85:6b:06:0e:eb:e5:b7:60:71:
         cd:4c:f7:61:d1:26:c5:fb:4e:63:91:17:ad:f7:7f:e4:50:51:
         05:59:9d:5a:8d:ca:e8:70:d7:1c:a0:64:75:6c:63:f1:d0:fd:
         e7:de:34:ee:11:34:b7:b1:4c:36:bd:1b:78:81:9c:a9:7f:15:
         c4:d7:14:61:dc:ca:a5:05:d3:69:a5:85:87:1f:24:a3:fe:00:
         37:fd:ec:d9:2d:3b:dd:c7:99:2f:16:ac:ad:c7:92:f0:4d:21:
         af:fc:10:93:74:93:71:d0:91:68:8c:8c:0b:41:a2:34:f2:40:
         80:c5:42:7b:70:4c:08:5e:90:04:f3:67:2f:fc:cd:82:fb:7e:
         a4:9b:86:22:d4:2f:bd:52:06:08:73:9c:1e:c5:91:22:be:3e:
         76:14:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----