Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File:                     moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier:          ak16h8hEjQX+7Acp7RCwwpbeBuYglKkEKfR+d52vXNo=
Subject key identifier:   B7:5B:43:A2:F3:84:8A:F5:06:BE:F6:16:80:8F:79:4A:7E:9F:08:4B
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer:       /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial:       01962E61E4D2E0FD591337990425B5E23FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number:          0F75
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
                          2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: WQq56iT3LRtuWYj5LVj0YXguMPJWVZ+oLbvRdjYTjW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:d2:e0:fd:59:13:37:99:04:25:b5:e2:3f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=b75b43a2f3848af506bef616808f794a7e9f084b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:da:a2:8e:ff:66:35:22:f2:6c:68:23:14:
                    01:53:b8:78:5e:08:a7:a5:6f:f4:18:d7:ac:cf:a2:
                    19:3b:0e:43:0a:36:b2:71:48:06:21:2d:8c:95:a8:
                    5e:ff:fb:55:cc:c8:9d:de:99:7e:27:28:f1:b5:3f:
                    2b:1f:60:14:cc:5b:dd:38:99:80:57:54:d4:d2:f1:
                    d9:c4:6f:4f:b0:09:d0:21:29:e6:ab:75:41:bb:8a:
                    c9:0f:ee:96:86:d1:b8:70:90:82:d2:08:ee:e7:62:
                    1d:ee:c1:c8:83:89:38:fd:c9:17:2a:28:86:c8:60:
                    aa:3d:37:b9:ab:38:14:8a:a7:f8:8f:c9:16:7b:85:
                    d0:96:d5:4e:d1:a9:1e:a0:e8:4c:19:4d:08:be:71:
                    8c:4c:ad:32:ea:59:a8:16:91:56:af:41:9f:19:12:
                    68:e8:fe:69:db:5e:be:93:e4:e6:77:4a:eb:2b:bb:
                    40:15:bb:4b:d5:5e:ec:ef:db:b9:68:48:38:58:17:
                    a2:f1:29:64:ad:a8:6b:52:6f:20:60:b1:bb:90:a0:
                    26:08:a1:b7:78:99:47:dd:6f:59:99:12:2c:97:7e:
                    8a:46:90:19:6a:6d:2d:08:9f:52:ef:63:70:e9:b1:
                    d3:ef:45:1b:71:7c:61:d3:a0:15:5a:2f:5c:16:7b:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:43:A2:F3:84:8A:F5:06:BE:F6:16:80:8F:79:4A:7E:9F:08:4B
            X509v3 Authority Key Identifier:
                keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:33:f6:38:2a:4e:dd:fe:a8:e1:34:71:20:c6:4f:d0:7e:c0:
         d2:ac:3d:7c:3c:38:9e:fb:bd:f9:92:b6:f3:62:06:df:0c:7b:
         bb:29:a0:91:a5:33:37:6a:5f:90:f9:3e:44:26:48:71:41:8e:
         a6:4f:4b:33:38:80:85:5b:e4:28:02:23:6d:b4:76:d4:9d:96:
         72:48:4b:54:f6:4a:e0:8c:2a:c4:59:ec:49:17:5e:d8:ca:5e:
         3f:c9:08:42:61:0d:0d:ce:81:b6:db:2e:fd:31:ae:dd:84:a9:
         b6:3a:05:a7:13:4b:1f:4d:ee:97:70:91:6f:9b:1a:bc:cf:28:
         36:6a:44:60:a4:49:2a:e4:85:ee:4c:9a:a3:97:32:2c:b4:76:
         b3:2a:54:02:99:dd:55:22:7e:f1:06:d6:85:ea:5d:1b:e1:68:
         dc:b2:18:43:68:29:31:d4:e7:7d:7c:4d:86:93:ba:f0:a6:ce:
         6a:80:31:d5:25:64:88:78:ce:3c:8b:bc:3b:ff:a5:12:5b:6e:
         3c:1d:b1:98:62:76:57:4b:19:a3:87:f7:5a:b4:4f:83:eb:32:
         fa:f8:d8:5e:c9:7e:be:70:ce:e8:e1:e4:c2:1f:f3:f2:16:71:
         7c:11:29:17:03:69:2e:33:73:25:a6:8a:b1:12:bf:d9:74:0f:
         52:9c:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----