Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File:                     9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier:          5nLaUJO/FAZqKUxyyfXGoMp+sWUFaRUYFMy9es3EluY=
Subject key identifier:   8C:3F:9D:BD:66:31:AC:50:A1:C2:1F:B5:36:7A:99:2E:51:58:DB:60
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer:       /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial:       01962DF3F9A65E123084AA1956518C9C4655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number:          0FC1
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: vGDrsfeZSdUQX4NOnkmlVJC6VB5CgiZyC4CFCcYX2NM=)
                          2: xm2GnCrITkLspXymDcS4A7YJbbI.roa (hash: +DAgDZIg9Wj4wTdH4O9JnrjTmjk3rUCiBhMUo5eAXI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:a6:5e:12:30:84:aa:19:56:51:8c:9c:46:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=8c3f9dbd6631ac50a1c21fb5367a992e5158db60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:c6:ce:26:64:3f:04:6d:53:e3:d9:92:77:
                    ce:62:76:71:e7:46:d8:ba:ae:a0:42:5e:ec:04:0f:
                    60:dd:78:3e:25:82:59:43:8e:df:ab:29:21:b6:cc:
                    b3:f5:ee:a6:fb:48:02:4d:b8:e6:db:d4:69:53:83:
                    73:2a:b3:bc:d7:08:50:69:74:a9:53:11:ea:df:ac:
                    e0:f0:cd:3e:49:82:5c:b8:85:6b:34:f3:f4:21:93:
                    28:59:da:82:cb:55:1e:f7:ad:5e:9b:6e:00:89:3d:
                    2d:fe:cd:7c:05:0a:12:83:de:98:a1:24:1c:77:2a:
                    5a:bd:74:62:2f:63:d8:4b:f3:da:33:c9:0e:45:f8:
                    92:2c:f3:b8:06:61:90:67:fb:7e:d2:7f:ca:a2:7c:
                    c5:7f:01:fe:73:35:48:fa:a0:4d:24:05:85:2c:33:
                    29:c4:89:2f:92:a3:9a:42:fe:5d:0e:84:c7:11:4d:
                    b5:e6:ec:2d:7b:b3:22:40:dc:8b:4a:8f:d2:a3:eb:
                    64:59:57:5b:58:28:b2:7a:f0:61:96:9b:a2:bb:11:
                    aa:68:d9:94:53:75:6b:6d:a0:6e:3b:35:84:af:34:
                    5a:1e:c2:2a:84:0b:d5:26:4f:fd:31:90:e7:29:76:
                    0f:3c:99:20:ea:8d:0c:a9:76:80:ea:6e:7e:bc:6b:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3F:9D:BD:66:31:AC:50:A1:C2:1F:B5:36:7A:99:2E:51:58:DB:60
            X509v3 Authority Key Identifier:
                keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:d3:41:45:09:b5:06:2b:10:34:7f:a7:c2:f7:92:c0:d9:
         f3:b1:87:b3:30:0c:2b:9b:22:08:fc:95:93:a6:60:c2:ff:7f:
         1f:76:38:b1:5e:42:3e:6b:ee:3b:a3:88:0b:17:f0:a6:19:87:
         3b:43:fe:f0:64:4f:7f:02:db:39:f3:41:9e:29:ad:42:e6:15:
         9c:39:54:ce:4a:d2:d9:18:48:8f:cc:2c:54:77:96:c7:64:36:
         2b:26:80:20:5b:73:36:a5:8a:b3:43:64:13:ec:78:f1:12:15:
         93:23:22:3c:b3:48:58:18:88:5c:c4:28:bb:5f:fc:a6:4c:d4:
         2f:f0:1d:98:8c:7a:c1:cf:d1:f1:bc:3c:45:58:e6:23:2b:4f:
         61:8d:f9:ef:11:31:ba:db:5e:43:09:58:bb:e7:69:ea:97:b3:
         e5:1c:93:b3:a9:53:95:57:e7:11:8a:72:08:5c:76:eb:b1:19:
         4e:64:a7:84:c1:3b:99:37:f5:66:d7:f0:eb:86:b0:f2:88:01:
         8c:04:0e:dc:2d:96:81:d7:e7:f2:dc:2b:9e:17:ca:21:78:b2:
         96:18:1f:0a:79:10:f1:aa:38:3a:7f:25:20:93:fa:70:3f:80:
         ef:0b:8e:0c:1f:8d:df:d8:95:42:80:96:5e:b0:cf:ed:68:cc:
         f7:0e:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----