Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File:                     9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier:          cRCLVBLAv6eWVGN76nC9PfoD38Q5xa6HBil7I4XX2gs=
Subject key identifier:   BE:0A:CC:9C:CD:E0:15:E7:35:AE:6B:55:93:0D:68:E3:63:58:16:13
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer:       /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial:       01962F74602411DDECC8F38498A297FAF903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number:          0E4E
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: RA+xpC9RG1YAc5XKAwSa9EM3bb4PiUIdoZfjC6KSxQU=)
                          2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:24:11:dd:ec:c8:f3:84:98:a2:97:fa:f9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=be0acc9ccde015e735ae6b55930d68e363581613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:6a:37:48:be:7b:b0:6f:2f:53:14:4d:8d:
                    f2:73:bc:f3:17:63:59:04:c9:2b:77:1e:b3:7c:49:
                    2a:aa:3a:e8:71:4b:35:46:de:c0:ea:36:bb:eb:e3:
                    2d:9c:92:d6:4c:51:d5:2e:42:4a:f1:a4:5a:08:f4:
                    97:ff:57:fe:99:c3:1b:73:2b:8b:d2:eb:f5:3a:fa:
                    5a:2e:90:dd:41:7b:10:76:f6:57:6b:d0:d1:1b:17:
                    9f:23:8b:06:56:61:eb:da:d9:92:4d:c2:6d:37:e2:
                    96:b4:1b:e2:f4:e0:6a:e9:91:9f:68:7a:f1:0c:9b:
                    79:61:45:16:9e:32:de:46:51:52:37:85:d6:bc:dd:
                    4e:5e:25:07:1a:e8:ef:4d:95:ab:38:cc:5c:81:61:
                    70:e4:e2:8e:57:3d:bd:7a:57:09:d9:d4:cd:56:ab:
                    6d:61:06:4f:bb:d6:12:7d:19:11:f3:8e:15:63:8c:
                    4d:7a:2d:9f:7f:4a:a8:4d:4c:33:ff:19:a9:3e:02:
                    a5:d3:17:84:9c:db:79:e3:f6:b9:bc:9c:8a:e6:42:
                    03:e3:4b:6d:19:be:d8:c4:51:d0:e8:e4:e6:13:91:
                    0b:47:ac:4e:b0:43:a2:b7:c5:3d:9d:08:7c:08:ea:
                    33:a5:57:50:62:32:0c:58:b4:0d:75:f3:bc:42:02:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0A:CC:9C:CD:E0:15:E7:35:AE:6B:55:93:0D:68:E3:63:58:16:13
            X509v3 Authority Key Identifier:
                keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:46:7c:20:ac:6b:55:5e:a0:c0:3a:ca:da:83:ed:ca:56:8d:
         30:b5:b9:f8:8e:7c:94:5e:03:79:36:03:c8:4c:a7:5b:d6:16:
         ba:cc:da:32:21:ae:40:9b:d7:32:f3:94:b8:56:d4:4e:59:25:
         05:2f:bf:2f:ea:c5:01:43:27:c1:95:dd:3c:1d:95:94:5f:6d:
         ee:ee:d5:02:a6:e1:47:b4:eb:32:de:96:67:6d:a4:13:67:28:
         9c:1b:ff:f9:c7:fc:fd:f3:52:24:59:fe:f7:75:1d:38:12:7a:
         77:9b:06:20:32:e0:8e:24:19:21:1a:21:9e:fc:a2:b6:f5:1b:
         d6:14:0c:a5:36:96:fe:fc:38:af:7d:07:a4:aa:42:e1:88:e9:
         b6:19:3f:6b:47:4a:49:5c:94:20:3d:11:cf:1b:fb:a8:b9:31:
         76:d8:38:49:a9:41:64:38:4a:28:aa:fe:ee:9e:6f:01:12:9f:
         55:c5:86:4f:2d:38:86:2d:d6:a5:a8:e5:b1:5c:df:c4:5e:29:
         da:81:5e:d8:81:cf:2c:9c:63:bf:bb:ba:4c:dc:00:d9:21:50:
         ef:75:00:ac:bf:f2:e8:af:b2:1c:d0:07:0f:76:68:5e:ed:19:
         bc:60:0c:2c:e4:b5:6e:a6:ad:ec:40:33:50:37:3e:62:96:f1:
         b1:6f:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----