Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File:                     S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier:          9WdJDOoK7r0dQti/uUaVSu0UU1vLnpD8thZGKnisNM4=
Subject key identifier:   F1:47:FE:08:B3:03:68:90:33:FC:CF:C7:07:0D:CE:07:6A:90:A0:E7
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer:       /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial:       01962E999400EF78F614C7AFC201FD1FAD69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number:          0CDF
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: 0o9BSbH/CVDd84waFaS2kIBWfv76R7jeIlzivCIiTJg=)
                          2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
                          3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:94:00:ef:78:f6:14:c7:af:c2:01:fd:1f:ad:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=f147fe08b303689033fccfc7070dce076a90a0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:06:be:2c:e8:3f:39:90:cf:e7:ad:ff:05:
                    95:d2:19:2a:2d:e7:13:1b:f6:68:25:46:eb:93:03:
                    e7:4d:71:2c:98:90:de:b0:7a:e3:58:7f:22:4e:83:
                    1f:5f:b2:5f:fb:46:38:c9:0d:dd:4a:99:ed:ae:d2:
                    9e:24:ca:75:cb:70:95:8e:60:d1:48:05:54:61:ba:
                    3c:74:46:5a:fb:63:9c:0a:f7:9b:6d:d5:ab:37:59:
                    4c:42:be:b3:e9:12:a4:59:aa:1e:00:77:2a:1f:5e:
                    f3:92:75:ae:d1:79:e3:18:18:07:fd:4c:c2:3f:2b:
                    26:14:c1:94:45:c3:2c:b9:8f:38:1c:ce:93:12:0b:
                    62:ce:33:96:2e:9e:18:7a:5a:0a:9a:8d:be:37:67:
                    d5:e8:d1:99:56:80:d9:60:91:01:eb:9a:f3:89:c3:
                    7b:4c:38:17:0e:d6:3d:5e:d9:5b:d9:b1:28:d2:16:
                    e3:7c:1d:ac:39:f9:8b:ca:64:09:e7:68:22:42:f6:
                    e5:fb:a6:ec:2c:30:3a:80:5a:ed:ae:8e:ad:a8:f2:
                    11:86:86:c0:90:48:1c:12:cf:e1:fc:4d:ea:f1:d8:
                    f3:06:23:eb:8e:1b:39:ad:26:63:f7:ef:f9:cf:b8:
                    01:e3:e4:20:ea:fa:d3:bc:95:ab:1e:0b:42:c1:5c:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:FE:08:B3:03:68:90:33:FC:CF:C7:07:0D:CE:07:6A:90:A0:E7
            X509v3 Authority Key Identifier:
                keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:6c:e5:4b:15:0f:5d:c6:16:3d:92:bd:b1:31:0c:4e:dd:
         cb:32:86:15:d9:41:85:c0:66:d8:fd:f4:37:a1:6f:81:42:22:
         7a:fe:82:e1:b4:a3:bc:92:09:76:a4:83:44:32:50:78:8c:c6:
         61:b4:c3:8b:d1:06:8b:12:64:74:94:a3:ea:40:30:c5:35:a2:
         14:fd:ce:04:32:b5:14:e5:66:2d:30:dc:f1:81:fd:34:bf:1b:
         1a:8f:99:76:19:e0:84:47:db:5d:70:80:58:82:58:d3:fe:04:
         9d:ef:af:96:03:f5:8d:4a:dd:d0:df:13:1f:22:90:7a:71:26:
         e4:d7:26:dd:a1:c6:44:2d:5a:09:dc:45:0a:0a:81:d6:fe:57:
         88:55:5d:69:c5:94:d0:43:52:d4:6c:0a:46:73:fe:d6:d9:1f:
         10:8d:b8:91:47:96:d7:3f:c0:16:89:9e:96:92:e0:22:35:95:
         9a:1d:e2:6d:fa:c9:7e:bb:de:00:42:02:da:a4:c2:3c:c0:9b:
         9e:04:74:bd:07:1e:2d:5d:aa:2c:52:a8:1a:08:a4:14:24:f3:
         7d:0b:0f:ac:4d:37:fb:14:7f:f5:1e:cd:2a:d9:94:de:d1:d5:
         bf:33:0d:5b:b3:96:9e:55:80:66:78:f5:cb:45:91:6c:e1:fd:
         b4:cb:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----