Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File:                     P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier:          qKzqe4b74icC/BgVZQgHPJJ+vPfie9Sw3uwg/qXo7SQ=
Subject key identifier:   4F:06:27:85:0C:DB:A3:09:D6:26:8B:F7:14:DA:A1:F8:41:EC:24:61
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer:       /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial:       01962E61EAF2B60563F786876C377A4E2B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number:          D9
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
                          2: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: WnXUqVtisMt4QoD3VgN/Eczdih8w5EkEz5uzEZShikM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ea:f2:b6:05:63:f7:86:87:6c:37:7a:4e:2b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=4f0627850cdba309d6268bf714daa1f841ec2461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:92:73:13:15:8a:65:e3:11:08:d8:63:58:
                    78:6f:f4:28:b8:e8:77:78:9d:0d:81:36:e4:c2:42:
                    16:61:c8:43:93:35:60:02:5b:b3:f1:93:3f:52:87:
                    c9:2e:39:da:bc:5c:95:4b:f0:f1:7c:4b:42:cc:01:
                    2d:c6:6e:c7:2b:8c:05:33:fd:f3:2f:f1:e4:98:fd:
                    69:4b:82:e9:b8:29:d9:34:5f:57:6b:03:56:68:0c:
                    0b:36:8e:a2:bf:cc:02:f9:8c:e2:eb:67:c7:07:d3:
                    ae:32:5f:11:d2:44:b0:3c:6b:42:c1:24:36:07:52:
                    f2:38:52:cb:5c:85:ed:4b:18:3c:fd:48:ec:df:53:
                    37:93:62:38:5a:0e:cb:ea:c1:ca:87:2b:82:fc:43:
                    85:86:c8:b5:d0:89:7a:64:77:da:ab:6f:6b:37:a1:
                    5e:55:33:f0:c7:0a:b3:40:a0:21:48:a0:72:18:49:
                    17:85:2c:4a:fe:b7:49:49:dc:4a:39:df:55:37:d7:
                    6a:0d:58:49:27:6c:0e:ac:1d:6e:76:56:57:b3:7a:
                    7c:77:90:87:f2:88:67:08:52:7a:0f:6f:9a:55:35:
                    66:61:cd:d7:fa:b9:67:d7:b0:8c:e5:16:86:7f:ab:
                    cc:a5:46:ce:fa:97:4e:4d:cc:31:25:78:e7:24:72:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:06:27:85:0C:DB:A3:09:D6:26:8B:F7:14:DA:A1:F8:41:EC:24:61
            X509v3 Authority Key Identifier:
                keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:72:a1:f6:2f:c8:23:77:23:d3:18:be:7e:50:f3:71:54:ea:
         ff:8f:30:ea:7e:1b:28:70:29:ff:9e:88:37:8c:1d:12:eb:98:
         c5:73:fe:40:3c:31:42:08:c5:d1:fa:f9:23:e0:44:82:b5:b0:
         97:4d:bc:1f:a7:14:01:24:6b:35:5a:a8:04:ee:a5:7d:1b:cb:
         28:2a:fc:ae:cf:b2:32:91:4d:e0:43:c9:1e:f5:d1:e1:05:cf:
         bb:02:c0:c4:3e:99:79:e3:39:3a:9b:e1:3b:fb:e7:0d:ff:e6:
         e0:f6:b0:fe:af:3a:7b:d1:af:62:ce:d6:2e:dc:74:c8:44:87:
         d6:6a:00:01:d1:0c:29:46:51:1d:9b:51:5c:03:63:f7:4d:ca:
         b8:29:8a:aa:82:4f:e0:b7:5f:bf:39:5b:0a:f9:f7:b9:28:1a:
         a2:05:08:34:6e:97:c0:5c:78:dd:1d:08:cc:46:a0:3c:c6:e5:
         bf:c3:74:cf:f9:4e:8c:3c:cf:a7:af:6b:52:6f:5c:5a:1b:38:
         04:ef:90:55:d2:a1:8f:d0:af:f2:fd:79:ad:ab:67:07:72:41:
         2a:d5:1b:02:5d:4c:a2:72:b8:84:41:e5:6d:ad:cd:b4:ee:db:
         40:bc:56:da:be:d4:08:52:9a:6b:b6:61:fd:95:57:d1:7e:ac:
         c4:35:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----