Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File:                     f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier:          4xX5YBBV2Pbc5dGJ11TebLO5tdKqpBN6kQBJYOrPKFk=
Subject key identifier:   07:38:E9:5A:0B:70:E8:83:67:3D:D3:06:11:86:09:8C:73:25:79:37
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer:       /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial:       01962FAB6B51BE0F115138CBFFB62B08F894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number:          1072
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
                          2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: 0Lp3ouUP1cQgkKr89YOtJ237RmOJebR97pVEoHGKbx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6b:51:be:0f:11:51:38:cb:ff:b6:2b:08:f8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=0738e95a0b70e883673dd3061186098c73257937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:6e:a3:fe:7d:a2:a1:0c:6c:ef:1b:4d:15:
                    58:a2:01:50:32:e9:31:c9:e8:4e:fd:50:10:06:d3:
                    da:14:07:33:33:18:8c:79:2e:21:11:43:5c:0e:25:
                    d5:96:12:76:5a:4e:b2:31:6f:75:5e:b8:e3:a3:d2:
                    b3:ca:c6:c0:4c:9e:71:c8:d2:9f:e3:df:09:78:1a:
                    db:d4:cf:9e:d3:8d:c5:51:1b:26:59:b3:49:ce:9d:
                    ba:db:c0:3d:a7:92:03:cb:bd:cb:2b:be:dd:b5:01:
                    eb:b8:9e:69:93:fa:0d:a1:8e:5d:04:87:56:53:0a:
                    88:c6:82:d5:99:7f:cc:9b:60:cd:e9:1a:3e:aa:72:
                    69:1c:89:2b:a1:f2:f9:47:e6:f8:e7:74:47:fc:85:
                    b6:42:f6:4f:f8:3e:9e:59:b8:e4:3d:d6:75:64:43:
                    e2:6d:b1:ad:a9:3b:93:71:38:cb:2b:c0:0e:e9:96:
                    aa:0f:69:ca:96:ab:3a:a4:84:30:c1:86:16:c3:ef:
                    37:6c:46:70:e7:c8:db:3e:3f:79:0f:c3:50:19:5c:
                    7a:27:10:bb:ad:d9:92:5d:89:b9:63:65:a2:c2:d4:
                    28:21:bb:20:3a:9d:3d:2c:44:9d:5a:7c:4f:dd:62:
                    94:e2:c4:27:44:c2:d4:cf:03:79:cf:9a:8d:96:fc:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:38:E9:5A:0B:70:E8:83:67:3D:D3:06:11:86:09:8C:73:25:79:37
            X509v3 Authority Key Identifier:
                keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:3f:c0:c5:0e:7b:99:7a:fb:7f:01:3d:30:67:dc:50:8b:
         e1:26:30:b2:85:68:10:51:32:13:ae:63:26:81:e3:13:db:c0:
         4b:31:d7:46:30:ea:b9:ff:bb:39:b9:c4:42:57:5e:3d:f6:ff:
         30:ed:e0:20:ff:df:69:84:20:d4:fd:7b:42:aa:34:73:be:ad:
         b1:9f:6f:41:c3:88:8b:ba:ea:6e:f0:da:89:33:dc:98:76:b9:
         2e:75:28:c6:4e:5c:f1:51:a1:c2:93:c7:88:a9:82:e4:af:08:
         26:16:17:7e:a2:94:76:a2:03:ad:ef:56:f6:0f:cf:90:68:2c:
         ed:80:65:ef:43:17:97:71:56:ce:e3:7c:43:88:e0:0d:fe:08:
         6f:12:57:5a:12:d6:9c:42:d5:ff:84:5a:a5:0f:2f:26:e5:ab:
         04:76:58:22:df:74:9a:fa:34:df:8b:44:e0:8a:9f:fd:99:5b:
         96:29:c8:bd:66:20:46:c2:b7:e8:e3:81:06:c5:05:53:7f:56:
         9e:81:df:fd:6d:21:73:c3:32:9e:6c:e3:76:58:60:1d:73:cd:
         18:78:76:81:b1:55:eb:02:da:79:48:00:50:3e:a5:48:40:59:
         1e:83:1e:5c:57:70:e4:fc:32:6b:32:18:95:f2:52:11:f5:cf:
         c7:47:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----