Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          AqEv+46FlIOHNBp5eBmyocJ4dQHRoxXGlFcbJHsL2Co=
Subject key identifier:   E2:1B:FA:05:7D:09:FA:50:B0:58:9B:8A:CD:0E:CD:B9:CC:70:2B:66
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       01962F06B039CBEE49BEC2D70CB43F3A1347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          03D5
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: oJMpVjFIhCuUnffVyIBzbB2VeDE4lcVPgNK+D32SoRc=)
                          2: tjboCeupGoWMhzNMAbe1acyZSfo.roa (hash: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b0:39:cb:ee:49:be:c2:d7:0c:b4:3f:3a:13:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=e21bfa057d09fa50b0589b8acd0ecdb9cc702b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:a9:26:17:db:11:f9:74:60:30:45:7a:bc:
                    aa:2a:34:7e:c5:8f:90:a7:e4:71:cd:5d:61:b2:40:
                    98:66:08:f0:95:ef:b6:fe:77:ff:42:a5:00:93:e6:
                    39:17:e5:7b:9d:ec:3f:97:84:63:8f:95:20:6e:82:
                    1d:1a:e8:79:01:9e:10:ad:6d:30:b9:15:2e:a0:8f:
                    cd:bf:b3:e2:40:7f:96:7f:51:59:82:04:d5:15:be:
                    cb:a9:63:5a:35:76:38:b7:df:04:2e:17:7e:a2:f8:
                    f0:ae:99:39:21:ae:02:48:90:a5:e6:60:8c:ff:69:
                    2c:2d:fe:b0:0c:0e:2d:79:ed:12:e3:25:fa:03:41:
                    61:cb:a3:33:12:68:56:6c:fe:1b:0d:8d:a8:48:76:
                    fe:14:5d:56:0a:8f:28:33:94:5a:57:7b:fb:0b:85:
                    00:80:56:d1:d4:4f:45:ac:d3:cb:7e:12:9c:5d:af:
                    dc:e8:1b:10:e0:64:29:16:d1:27:57:76:c9:e9:98:
                    7e:aa:f0:de:44:a0:2d:eb:4f:61:b7:3b:24:51:a1:
                    f8:6d:21:fb:93:89:e2:7e:4e:c0:30:1e:24:b5:96:
                    ef:c5:9b:ac:ed:04:93:e9:86:7f:c9:ed:45:ce:61:
                    99:53:43:a1:15:fc:90:95:75:b8:68:28:38:7f:15:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:FA:05:7D:09:FA:50:B0:58:9B:8A:CD:0E:CD:B9:CC:70:2B:66
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:24:01:71:ea:d4:c6:d8:a0:d7:db:ec:8c:6d:d8:ed:61:
         67:9e:6d:62:0a:8a:8e:1e:b1:4e:a0:e8:f5:16:b8:35:9c:d8:
         f7:93:c0:59:58:fc:f8:40:f1:e6:54:0f:a6:70:4d:a6:f2:ed:
         ae:61:0b:b7:d1:d0:3a:d4:c8:76:c7:44:6a:8c:5d:44:49:64:
         8b:35:d6:9e:2e:87:42:7a:4d:07:6e:3e:c8:60:39:e0:1f:08:
         05:1b:2e:55:11:a8:d6:36:eb:f2:a5:6b:8a:a8:b4:1a:06:11:
         9f:83:20:1e:5e:6f:53:13:65:0a:16:42:b4:1d:bb:42:18:56:
         dd:21:1d:32:d7:d2:fc:8a:58:e2:90:21:d5:e1:5e:d6:a5:74:
         bc:6d:84:59:58:74:5f:8c:b9:ca:a3:81:87:ec:df:e8:b3:c2:
         b0:6b:38:f6:a1:89:cd:dc:8c:c8:59:38:b7:8e:98:c3:09:a0:
         dd:4b:46:de:f1:70:63:af:f7:2b:2d:de:d9:18:71:99:e9:48:
         66:34:90:d6:20:cd:2e:83:ad:df:37:c6:bc:25:76:47:a5:2e:
         82:fc:ef:df:43:64:df:9b:74:23:c1:fc:7a:4a:47:47:04:8d:
         2b:28:44:fe:c5:76:e4:8d:e0:24:f3:21:26:f9:17:6d:c5:87:
         a8:ff:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----