Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          rH2zjeMEhuiR6BAFIUTXSE9G6ocfo9Osfxl1ptA82Gw=
Subject key identifier:   51:03:41:20:CC:48:3F:48:03:32:D4:6C:7C:88:DB:8F:46:6F:56:6E
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       01962DF4097D2A4B299B9A1635ED91F931D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: DSYo+l3ioEkVpuwfOwA4hES7fhzjZTFul6kd3EFzOHc=)
                          2: CisyPBICFzRGOCGtK3vxthiuGEs.roa (hash: 23mIhFxKDvJAL2KMAVi2LJugT4q2VWIVs7Cdef8DgOI=)
                          3: FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa (hash: V2QfXGuoABf0nSRm/Oq1C+rnj29jR40BHTTOPTu5Dlw=)
                          4: XT0-w6dqifmy2ffwrG4-p0z6yak.roa (hash: qA90Am+RQnnMQJCKqDmSo8CLarebFr+1kMjhOvQOjTU=)
                          5: qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa (hash: OxgWBiFLszYpiPd1r9svRtI7919M0gEvC+i3wC1jk18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:09:7d:2a:4b:29:9b:9a:16:35:ed:91:f9:31:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=51034120cc483f480332d46c7c88db8f466f566e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:2e:49:17:85:e9:d3:1e:37:1f:46:b7:72:
                    6e:64:ef:00:bd:c6:11:29:7e:42:da:45:80:75:40:
                    d5:42:c6:9d:d3:4a:16:b2:24:e9:5a:9d:5a:e4:24:
                    7a:9e:d8:be:98:1b:8e:62:a9:fa:54:cd:8e:b2:62:
                    fd:4d:09:12:f4:9a:76:02:74:9c:3a:53:0d:1a:8b:
                    ad:7d:b1:c9:ab:8d:91:e1:35:72:3e:76:50:42:0d:
                    bb:fc:25:ab:d7:e5:65:c3:9d:18:3f:c2:cf:1b:0d:
                    d1:a3:f2:cb:ff:98:df:ef:ae:4c:65:28:64:ca:a2:
                    e0:fe:3c:c0:5a:bf:9e:e0:b8:c7:9e:8d:6b:d8:40:
                    a4:31:7c:e0:56:be:3e:4b:06:63:54:9d:24:0e:98:
                    e6:e1:91:e4:e7:16:52:66:d9:3a:4e:f1:ad:f2:ee:
                    3b:6f:76:9c:d7:a7:02:43:8b:fd:85:ae:a8:4e:91:
                    9f:fd:3e:3d:10:ed:20:8f:9b:9d:c3:44:c7:e3:b7:
                    a9:1c:14:43:15:d9:28:ab:21:78:f3:d4:8d:82:f8:
                    3b:57:ab:c5:fb:e2:0f:da:8d:b9:fe:aa:2a:51:7a:
                    0c:ac:ab:1b:c8:d8:0c:5a:ff:66:18:0c:4d:9b:ad:
                    30:31:9a:5e:37:97:16:92:78:cc:29:6f:69:6f:11:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:03:41:20:CC:48:3F:48:03:32:D4:6C:7C:88:DB:8F:46:6F:56:6E
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:09:c3:da:02:49:71:da:bd:3b:f0:c1:eb:9f:66:e7:60:8a:
         35:1c:c9:df:6e:f2:6d:79:94:c0:25:8e:49:d3:2b:32:78:61:
         b0:ab:63:3f:f1:68:db:49:03:12:a8:2f:90:24:29:bd:78:ef:
         a5:8b:02:fc:be:67:ae:b0:6c:6a:77:bd:4c:ac:5f:aa:7f:69:
         d0:63:82:b9:8a:73:6a:20:e1:de:03:51:80:90:f7:0f:b6:f0:
         16:fe:d2:53:c7:3a:1a:86:ea:a2:9a:63:74:62:0e:5c:ed:d5:
         9b:aa:cc:8a:0b:bb:ac:56:cc:9f:9b:fd:ad:fd:11:8e:42:aa:
         7c:39:c7:71:1b:47:c4:e8:ea:cc:c1:3e:2a:c4:31:f0:e8:39:
         f7:72:de:d2:98:42:6f:e2:f9:96:75:a9:00:21:2b:d0:b8:1b:
         b8:8c:c9:b5:f2:59:5c:b5:87:3e:3c:c8:fe:22:64:20:58:88:
         82:9f:55:68:80:ba:d0:da:70:ca:9c:45:dc:9e:83:1e:a8:90:
         bd:12:04:b9:55:dc:72:1d:3a:c0:e7:c5:eb:19:d6:bd:d4:5c:
         c0:78:ce:0c:4d:48:db:d4:ff:9e:29:f7:a4:e9:99:58:fd:07:
         22:64:43:ac:52:d4:f3:33:ce:5d:97:0b:48:5c:25:73:b3:3f:
         f8:a5:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----