Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          2By5Wm3urmUaZklXTljedwXZaJKPkB6MQiH/ltipz8E=
Subject key identifier:   DA:1C:DF:05:44:15:D3:CF:F5:67:A4:DB:20:83:F6:EA:75:88:82:BF
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       01962F06D583515632D4834578B7C19D42E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: K-sDSYwSfmtvdGGKmz0K_s1-fbk.roa (hash: nTXDVmXDwxaVenEMyiJUZtNKTRSoq/vUuS1ln5SDlUo=)
                          2: MobINerBVuQmP-SIz5bmUV8BPPo.roa (hash: 6a2BmmDaX86zgOFsxT/j31kuD+dJU0v6H6ycoDKtjU0=)
                          3: UShqGyi6RZRV0Ph4_yVYYleIO40.roa (hash: ugrz3hjzhhiYzWWbWxwCGvT2Anh3/HoqFXI/J0yrilg=)
                          4: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
                          5: jfhQ8qxqYX2y_c95n4BoqN_WfWo.roa (hash: zTJaslFTlA280BuQpjcGlBIpfzZ8r2vvsWV2BclBmps=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: MsAqhh8kLKYuMaDe8slKylM20JCnhame5V5muqsNj5k=)
                          7: yJhIC_8JjNW0W6ROa-IL4XOkSek.roa (hash: iFeNdkxy875ayHL7GIsn4nPYfS0obttarf5urh9pLUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d5:83:51:56:32:d4:83:45:78:b7:c1:9d:42:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=da1cdf054415d3cff567a4db2083f6ea758882bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:be:93:28:fe:69:3b:cc:44:32:16:39:51:
                    7c:61:52:6e:26:c0:11:85:f0:f4:8f:6a:64:f8:86:
                    45:8e:be:d9:d5:e6:89:a9:1e:1b:9a:ff:03:75:20:
                    89:7d:a0:19:dd:4a:7e:5e:69:07:80:7b:6d:c3:27:
                    03:d1:eb:50:b4:58:4e:33:e3:85:f2:52:a1:de:6b:
                    4c:70:15:18:f0:44:c0:31:54:c8:8e:a4:2e:52:b7:
                    ac:a1:92:94:04:35:56:33:87:c4:69:3d:54:e6:ee:
                    ef:49:43:e5:27:62:c3:ee:9b:21:28:2b:2c:36:27:
                    bd:19:63:63:63:ca:f1:5f:72:fc:0f:b6:26:03:d9:
                    4f:92:ee:ea:1d:37:6e:ed:80:aa:bc:3c:af:c1:e8:
                    0e:b9:ba:75:cb:ee:ee:bf:d3:4d:40:bc:18:e0:97:
                    85:54:36:13:0c:d0:5d:20:f5:1f:4c:7e:d7:60:c9:
                    8e:60:82:23:94:99:1c:68:34:69:4c:0b:00:20:f5:
                    8c:1f:b5:9a:db:ad:81:3a:22:1e:3e:61:c7:a5:e2:
                    3e:15:42:6b:c1:20:b9:ca:ff:37:2a:88:a6:30:ad:
                    56:e8:c0:55:3b:a9:f7:93:52:4d:b2:56:fc:dd:d6:
                    b6:76:5f:9d:49:19:28:64:08:71:8a:a8:90:61:01:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:DF:05:44:15:D3:CF:F5:67:A4:DB:20:83:F6:EA:75:88:82:BF
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:6d:7e:19:7c:a1:25:c1:b6:ab:b1:3c:89:e6:d5:9f:7a:
         12:05:7b:6c:90:86:0c:a6:d9:39:22:bd:da:6d:37:4d:50:9b:
         fe:ba:b1:56:00:2c:c1:c9:e3:ad:0e:f5:2e:a1:2e:ce:6d:ef:
         66:87:b4:b3:49:85:dc:24:d0:7c:a4:ed:ee:7a:3f:80:94:76:
         4e:e0:40:47:82:be:cb:cd:24:a4:f6:ad:01:00:b6:56:ee:ed:
         f1:66:e5:7b:d8:f0:e2:81:2e:4f:43:ed:c2:aa:cd:ab:73:5e:
         37:37:42:6e:bc:32:e8:e7:60:6c:27:20:c8:e3:59:ca:87:63:
         97:c3:e7:03:a0:dd:5a:11:56:13:60:b0:46:a8:3e:3f:d9:18:
         2b:70:68:83:80:e3:8b:6a:1e:5c:97:5f:6f:ff:75:ad:07:90:
         e2:0b:5e:ac:a8:3e:50:1c:58:bc:8e:f6:14:37:fa:4a:28:bc:
         17:ed:6c:a0:72:78:4d:d4:5a:a5:49:7d:fa:db:1e:c1:5d:46:
         2d:ce:77:c0:ab:5c:42:b5:24:9e:17:97:eb:d0:9b:d9:bf:c3:
         65:dc:2f:87:86:71:48:fb:65:14:d2:41:4b:b9:e9:e2:9c:11:
         9a:e5:d5:6a:1a:2f:f9:90:cb:ee:8b:f9:00:21:21:b0:9e:53:
         36:e6:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----