Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File:                     9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier:          LfNBQpvDnXdjIpmLwkTt8LUwKymg3mxndOGUgVtFCrs=
Subject key identifier:   3B:B8:6A:52:29:CC:CD:B1:C3:0C:91:C2:E9:9C:83:09:18:D5:A3:1D
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer:       /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial:       01962F067C4939450DF63DC5EC000B1BF8B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number:          04A1
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
                          2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: 0xcrmnCg76Kv8ihKeEl8xPZvQX4OvcEZVgMHt8BXgIg=)
                          3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7c:49:39:45:0d:f6:3d:c5:ec:00:0b:1b:f8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=3bb86a5229cccdb1c30c91c2e99c830918d5a31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:0e:de:68:6e:a1:88:c2:cf:83:dc:2f:89:
                    20:e1:e7:09:ce:22:f3:87:ac:c7:b2:c3:4f:7c:cc:
                    9e:9b:7a:dc:6c:ab:66:c0:3c:96:c6:c5:39:c4:2a:
                    93:85:bb:0d:94:e4:35:4a:12:96:1c:be:64:ea:b7:
                    0b:f9:4e:c9:f0:42:09:0b:82:b6:b5:82:a7:84:6f:
                    d4:ef:00:39:70:66:af:b6:51:5c:e9:bf:03:b2:85:
                    79:b6:0b:08:e1:09:a1:b0:fb:2c:e2:51:1d:ce:00:
                    8d:fe:ee:8b:0c:cd:17:ae:91:e8:e5:d8:29:56:63:
                    08:c2:65:4d:61:2b:c5:64:96:3f:99:d0:69:2a:f1:
                    35:94:4f:bb:8f:a7:8c:6e:2e:0a:d6:10:53:c7:79:
                    e8:57:a5:0c:c3:e0:3e:89:ae:40:fa:7f:e5:56:9f:
                    25:c9:d5:24:ac:a6:ef:dc:d2:42:e6:c3:1c:d3:35:
                    91:db:77:96:68:75:7b:bc:29:62:5d:51:66:3c:cc:
                    f8:fc:ee:cf:40:b9:64:87:b0:9a:43:eb:2b:0a:9e:
                    5b:f9:20:db:16:8c:30:39:ac:e4:d1:93:53:fc:94:
                    37:e5:2e:f8:32:ee:fb:de:6f:74:2c:1c:0b:97:a3:
                    ce:11:d4:f5:05:a7:a0:5c:30:68:05:f7:4a:bd:ca:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B8:6A:52:29:CC:CD:B1:C3:0C:91:C2:E9:9C:83:09:18:D5:A3:1D
            X509v3 Authority Key Identifier:
                keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1b:4a:f8:42:d9:ca:b7:a1:57:4f:a1:e6:8d:ff:5b:96:34:
         04:5a:c7:0a:0f:4d:b7:58:aa:73:41:b2:52:c9:bf:1e:fb:75:
         19:ec:ca:ff:2a:1b:6d:50:f6:62:4d:1b:8b:e1:45:4e:05:59:
         2d:00:e2:a9:e4:da:4c:a0:06:75:e3:76:de:57:57:a9:15:07:
         e1:55:89:9b:c1:d4:58:90:87:80:af:69:7f:cf:69:1c:e9:e7:
         6f:3f:ad:a7:26:da:88:ae:4a:79:16:f0:d9:97:cc:67:d4:75:
         a7:92:6c:ee:b0:a0:a5:56:f6:bd:42:17:79:ab:11:d1:fb:45:
         0b:62:c0:25:7c:81:15:a0:06:dc:ab:2c:10:af:13:66:bb:86:
         66:3d:66:eb:fb:17:43:ed:2e:72:34:3e:90:3f:f7:63:fa:9f:
         ee:8c:e5:ca:a3:f1:f5:ab:46:d7:21:da:8c:43:19:7a:7e:c7:
         db:01:4a:d3:09:6f:b3:6f:ca:e5:97:cf:53:a1:26:6d:af:31:
         ea:06:ba:de:e7:dd:f1:25:b4:fd:45:38:3f:4f:6f:2c:0b:50:
         23:8a:24:e8:b9:dc:3c:44:b0:e9:d1:52:fe:7b:d3:07:1c:b1:
         38:b4:93:4e:1a:b8:73:20:41:b5:5a:36:e0:3a:31:52:dc:2a:
         4f:8c:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----