Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File:                     9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier:          o9qRHeGzoksnxZ5JSM+zl+y8xdACvrNJoEn1hzCXQA4=
Subject key identifier:   71:BE:8C:D8:59:BA:4F:29:FE:8E:34:44:97:4F:4C:3C:5A:88:7A:22
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer:       /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial:       01962ECF88414EC62AE96BA2ED35E05FF38D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number:          1174
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 8AIFGKciFanVAzz2ffCjgurgKok.roa (hash: ENHuCpEeFyA8Ue2RXX/1jBC56W6LtF659OqDyGOAcn0=)
                          2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: QldqXwinRO3mNWDPuQsRUJ79PGPFIPOtotp8IzeSQrE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:88:41:4e:c6:2a:e9:6b:a2:ed:35:e0:5f:f3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=71be8cd859ba4f29fe8e3444974f4c3c5a887a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:8a:bf:ee:ff:ef:fa:9f:c0:78:c4:bd:19:
                    77:75:40:9d:4d:af:bb:9c:d5:30:76:cd:70:70:17:
                    d8:43:a3:a7:16:59:e8:d6:6a:17:df:c7:24:e5:21:
                    ac:b0:11:b6:8b:8e:ed:9d:1b:70:8d:67:cc:1b:bb:
                    c2:41:dd:29:43:c5:77:9b:38:6c:92:dd:07:2b:2b:
                    5b:e2:89:e2:45:80:4b:d6:03:ec:1a:55:ee:ed:0e:
                    73:73:db:68:4c:83:85:9c:94:c2:1c:98:0a:ae:3d:
                    d0:e0:df:66:38:30:23:da:0e:b7:07:7e:5d:fb:77:
                    84:ef:73:ac:f3:ab:3f:2d:15:ee:fc:af:7d:27:bc:
                    8a:81:f6:dd:0c:50:06:67:85:c6:79:ef:26:d6:20:
                    0e:bc:55:3d:d5:12:5c:44:dc:d9:5f:aa:cc:78:ac:
                    b7:9f:84:02:c7:2c:09:82:14:76:f4:7e:85:6b:e4:
                    f2:f4:eb:80:e9:73:04:c0:9e:4a:a2:7f:53:ee:f9:
                    06:70:02:82:d9:c0:e8:8a:9e:9c:a8:0c:01:0c:9d:
                    90:29:78:df:3c:56:51:dc:f9:6c:2c:a9:d4:95:93:
                    c7:9b:39:f7:c0:51:4d:7b:25:d4:d6:6b:bd:e5:a2:
                    20:1e:64:ad:fb:d3:b4:ce:12:b5:be:4e:54:1b:56:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BE:8C:D8:59:BA:4F:29:FE:8E:34:44:97:4F:4C:3C:5A:88:7A:22
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:36:0e:ec:9e:b7:ca:5c:04:05:72:6f:c5:37:7f:6f:70:41:
         d8:7f:c5:8b:38:1f:67:33:7c:8b:06:50:98:44:b2:41:7f:96:
         f6:a9:29:dc:b5:6d:ee:b4:da:0a:b6:7d:2c:7d:98:da:13:a8:
         9a:1b:93:8c:18:b4:e6:01:5a:89:a9:fc:66:25:84:4b:07:61:
         b2:e8:ec:54:a5:e0:a8:3c:c9:b4:ab:74:0b:9d:05:b3:58:45:
         01:b5:5b:8a:49:66:01:62:3e:0b:19:6c:1b:19:ca:2b:47:93:
         8b:3d:e9:a6:07:ce:38:64:90:4c:f3:7f:0a:7e:cb:66:d5:27:
         ec:19:b1:11:1a:14:1a:5e:38:52:1d:c8:37:97:f4:8d:c7:08:
         40:9b:bc:b4:3f:9d:15:30:13:ec:10:07:ef:d7:b2:65:8f:85:
         1e:97:bb:77:4c:ed:a3:35:52:35:5c:95:ca:f6:de:89:b5:91:
         c0:6e:b1:ac:fd:ae:2a:2f:f2:4e:f2:19:ff:3a:d1:ae:21:c8:
         22:be:93:c4:1c:80:3c:0e:02:98:71:f8:66:38:8a:2a:c6:b0:
         53:1b:5e:c0:25:84:fd:79:03:2d:fb:b6:33:c9:28:98:70:f2:
         a7:94:20:bc:9e:30:d4:c8:5d:ae:b9:74:1e:57:e4:8b:32:3d:
         6f:33:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----