Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File:                     _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier:          6CVdDzLylYeQJT0YT2MN0OmmzzOAzJyWOYT/DrwG8UQ=
Subject key identifier:   7F:46:B0:E0:75:83:1C:0F:C8:91:F1:C1:10:08:EF:20:6E:8A:85:62
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer:       /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial:       01962ECF77D0A06816707134C6EDBA778D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: VsDYaLkcuAiqbYnOzNQqjSk2Oi0Fsb2VkWElnyvmv7A=)
                          2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:77:d0:a0:68:16:70:71:34:c6:ed:ba:77:8d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=7f46b0e075831c0fc891f1c11008ef206e8a8562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:f1:d7:6d:b8:e9:5f:d7:f8:22:ce:5c:f5:
                    6a:81:d5:4c:8c:57:a3:1b:99:e3:47:43:ba:27:f6:
                    60:8d:b0:05:a3:83:40:69:55:ea:77:ea:53:65:7a:
                    c4:70:c7:43:9c:dc:47:20:2c:08:b5:8a:74:88:60:
                    2e:df:12:ed:a2:1f:3d:4e:fb:40:b9:ec:84:fa:ba:
                    a7:96:f7:dd:5d:7a:46:13:a3:0e:56:39:81:fa:04:
                    83:87:f1:80:30:6d:af:70:bf:84:05:cb:88:85:c2:
                    fe:5b:93:b4:2d:ee:bb:d2:41:84:6a:3d:1c:12:ef:
                    9e:2b:ae:27:a5:87:90:5f:62:41:0f:75:49:29:cc:
                    39:bb:7a:82:d7:88:d6:4c:ee:94:f9:41:9c:87:7b:
                    51:cb:f4:60:a3:f6:1a:44:b2:33:ee:a4:7b:8a:99:
                    1b:e4:6c:55:4b:6f:6d:03:bf:89:d1:30:52:19:18:
                    81:7f:7a:42:6c:e5:e7:e1:8a:b9:37:1d:91:8a:01:
                    15:70:54:86:6f:b4:8d:39:1d:e3:ae:45:53:56:f0:
                    d4:38:10:a2:7f:f3:de:9d:21:8c:ef:02:19:d0:3d:
                    32:1d:5a:b3:99:26:4c:f9:a7:96:fd:a8:66:1b:cc:
                    fa:a0:0a:5e:03:52:f5:aa:ee:08:0c:9d:14:a6:75:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:46:B0:E0:75:83:1C:0F:C8:91:F1:C1:10:08:EF:20:6E:8A:85:62
            X509v3 Authority Key Identifier:
                keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:50:d0:30:ec:bf:41:fc:e6:70:14:80:44:fd:00:a1:12:d3:
         ff:bc:00:b8:ea:e0:29:66:2c:f0:55:1e:f1:34:aa:b6:77:08:
         ad:7a:54:a0:ad:a6:0c:b3:4a:6d:66:b3:f5:c0:25:35:23:c3:
         95:cb:fb:ba:1c:9e:df:7c:bc:92:19:bb:23:d7:34:ce:21:16:
         8b:f7:20:32:cd:0c:ff:91:0e:15:ae:7b:ae:88:03:f5:e5:b3:
         8f:43:15:53:89:73:1f:81:d0:3e:b4:b3:89:fe:ee:db:73:0c:
         41:54:d9:ef:4f:89:c8:5d:03:b2:b8:6e:67:a6:26:81:47:af:
         46:90:5f:4c:6b:0a:25:b6:25:95:3e:d7:cf:e9:1b:62:b0:95:
         0c:73:a3:60:da:3a:59:6e:7f:8d:39:0c:91:d0:1e:dd:aa:fc:
         10:79:c7:24:10:10:08:eb:44:d1:80:49:a2:ba:e6:36:54:ed:
         09:d0:5c:25:ab:ad:a3:9f:17:33:25:b6:9c:c7:70:ad:59:55:
         c8:20:8b:40:71:51:4f:31:73:bd:7f:7d:c4:1a:be:38:73:58:
         ac:4f:32:75:13:47:39:e6:3e:af:4c:dc:54:33:d8:15:6c:13:
         6b:10:c2:1b:77:46:7c:ac:7e:70:95:37:72:4a:5a:0d:f0:fb:
         78:64:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----