Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File:                     9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier:          MooHdlDxvuL70md2ArFKQaQPeAkP4zXIdy4nalT3ZKM=
Subject key identifier:   A1:3F:81:38:E0:E7:82:3B:88:B0:68:78:8E:15:E1:67:1C:2F:D8:98
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer:       /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial:       01962F7491492535A4602C1618C79C460BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number:          90
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: T4FZ5Qg1ZUtSWhZJVGMBD0K6rZpiE0kw2+psYCBkESY=)
                          2: n8NfpgAijMpzCpX65rpklB3Tlmg.roa (hash: tLj+vrFwuOUlrlwjfJTF2xymSSPYF1wq3UkCF0leCFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:91:49:25:35:a4:60:2c:16:18:c7:9c:46:0b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=a13f8138e0e7823b88b068788e15e1671c2fd898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:30:11:51:65:58:9f:7a:65:73:aa:d6:30:
                    37:dc:5f:25:7c:a9:70:2f:a9:c8:24:df:37:4f:95:
                    2c:c0:02:c9:05:18:6a:1b:fa:ae:e8:8f:df:3c:ad:
                    d9:8e:66:55:a4:d6:aa:61:17:61:43:9a:3e:ed:9b:
                    cb:da:fd:3b:5e:08:fc:2c:e8:f9:0a:a8:41:c9:af:
                    27:5c:0e:53:99:d7:4a:1e:1e:c7:44:9c:7f:44:22:
                    f1:7d:d6:1c:96:48:5e:cd:3e:32:0e:df:97:05:f8:
                    ee:cb:ff:80:be:00:84:ee:49:5d:bf:c7:73:f7:91:
                    c7:af:9d:35:a1:e8:90:a6:71:3f:67:8e:a7:c0:66:
                    3d:58:e5:1f:76:2c:b9:08:ca:70:04:6f:70:2a:8e:
                    97:8e:dd:1c:07:a8:90:6e:34:1a:10:ae:46:19:55:
                    5c:a1:18:ae:6d:b1:3f:60:ff:15:40:d5:5b:c6:d2:
                    b9:44:be:ad:5c:69:74:f8:c8:59:cc:a2:b8:63:27:
                    9a:bf:a6:69:f6:b6:df:cd:11:31:69:e1:82:cb:e7:
                    87:34:fc:1f:01:36:ec:31:4d:0c:d2:6e:71:cd:67:
                    fd:69:92:3a:9a:f5:ad:68:3b:a6:fd:8f:33:94:b9:
                    f1:74:40:b8:63:4f:f2:28:cb:e4:99:a8:81:b8:6f:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3F:81:38:E0:E7:82:3B:88:B0:68:78:8E:15:E1:67:1C:2F:D8:98
            X509v3 Authority Key Identifier:
                keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:de:80:99:b9:22:9b:46:c6:3c:50:14:7e:1f:07:a2:db:
         26:f5:97:88:6f:e1:82:9d:3f:00:a1:6a:ab:03:79:ab:b8:89:
         b6:ab:e5:69:9f:f0:a7:53:d3:6c:ea:c0:3b:87:f7:c7:28:10:
         c5:ee:a7:01:cb:ea:47:55:8c:77:50:44:cd:3b:eb:a3:dd:fd:
         6a:43:85:12:f2:ce:76:3b:1c:fa:e2:d2:20:90:b9:38:9f:cc:
         9e:e1:98:3c:d0:a3:80:13:55:3a:3e:92:a6:86:90:df:1c:ac:
         23:10:bb:0d:59:72:13:61:4f:c8:2d:bf:a3:ff:8a:54:bf:ce:
         44:7c:24:89:c1:84:43:f1:52:50:08:33:67:64:4f:2d:af:43:
         a0:4e:1c:04:ba:65:3d:39:0b:76:13:1f:b7:ab:78:97:a0:fd:
         6a:46:ea:56:b7:79:71:37:79:5f:84:cc:20:67:c7:26:6a:f7:
         ad:45:fb:40:48:10:2f:a1:03:30:cc:df:96:80:96:bd:4c:67:
         c4:99:6b:a6:24:8e:67:57:b5:56:00:48:c4:bc:ad:49:20:06:
         47:87:04:4a:5c:f2:bb:23:59:a7:e5:55:0f:59:31:d7:6c:37:
         f2:d2:48:6f:89:c3:9f:81:46:11:d8:b1:e1:c2:12:bf:12:b4:
         96:89:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----