Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File:                     m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier:          UAGw1fzH2EXDbfMASzNknOIaSDtjywwY+T5FQVWs9Tw=
Subject key identifier:   F3:F8:F8:04:61:D8:EE:1D:7F:73:82:CE:65:65:F6:56:B7:B6:F9:59
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer:       /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial:       01962FAB966BCA6EA12B14F322D0879675D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: W2N06bo8iEVj3MND-0JAHiLxvxg.roa (hash: IfUBswKG3p9cJ5exxnjeIuTVTsjdF6z/UKkR7O3Lfdw=)
                          2: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: YgaGqsckELj+Pk8Jv0WnElrg80FJeVvRzAL8BAA+J+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:96:6b:ca:6e:a1:2b:14:f3:22:d0:87:96:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=f3f8f80461d8ee1d7f7382ce6565f656b7b6f959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:74:8a:eb:27:86:86:eb:94:58:ab:fb:cc:
                    78:a4:21:15:5a:a9:d0:79:52:8b:bd:f2:3f:a0:93:
                    5c:36:41:f7:75:00:f5:37:a9:94:fd:a9:7a:e3:0b:
                    61:7a:59:59:3d:27:73:7b:be:fe:9e:ae:78:3f:59:
                    6b:4a:14:29:eb:21:7c:72:a1:10:14:97:55:fb:d2:
                    bf:c5:1b:bd:69:92:9b:81:d0:b7:a1:6b:23:87:44:
                    57:bc:14:4d:22:dc:ef:d3:a8:f2:36:26:3a:a3:17:
                    d6:fe:e2:01:9a:d9:3b:40:03:92:9b:da:77:4d:df:
                    54:38:84:49:ac:24:6c:7e:dc:8c:a7:d5:bf:c1:66:
                    90:11:2b:39:34:dd:5e:06:48:f6:07:cd:2d:99:66:
                    35:e2:fa:b4:cf:93:04:20:ab:e0:64:43:4e:bd:50:
                    28:c1:87:7c:1f:70:9a:a3:4a:22:82:5a:ef:d0:d0:
                    a2:51:a1:07:dc:f4:46:34:25:8c:87:38:25:ea:94:
                    e6:fb:b8:2a:71:6a:26:c8:94:77:f9:a0:f0:11:7a:
                    08:c1:37:5a:42:0e:ec:fc:e3:93:82:91:7c:63:41:
                    2b:b3:81:5d:bb:42:96:ba:ed:84:b3:ee:46:71:70:
                    b5:d2:54:1c:f8:fc:2d:8a:e2:10:84:98:54:e7:48:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F8:F8:04:61:D8:EE:1D:7F:73:82:CE:65:65:F6:56:B7:B6:F9:59
            X509v3 Authority Key Identifier:
                keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:b4:c1:22:8e:51:59:c8:e5:d6:45:21:94:73:75:51:77:
         9b:75:4f:4a:fc:93:57:53:3b:c2:3d:7c:26:20:6b:be:f5:0d:
         7e:80:0e:00:86:d0:0d:de:83:b8:12:e0:12:ad:c4:5c:84:1e:
         f2:48:0b:ca:ce:08:68:8e:dd:3d:8b:f0:55:83:91:e3:b3:fd:
         63:26:4f:90:28:c0:25:74:e2:a0:85:95:3e:26:8e:fc:15:ac:
         0f:50:f8:12:b8:7c:22:12:d8:78:58:53:04:f8:10:1a:64:e1:
         19:60:b8:67:9d:f1:6c:20:f0:c7:80:7d:a2:4c:42:a1:96:af:
         46:8d:ff:1a:60:6f:4a:0c:f3:19:a2:9c:b9:34:a5:e5:7a:5b:
         7b:57:94:e9:57:7e:ed:c0:c9:b6:e3:e8:ce:c8:32:7c:2d:01:
         4b:cb:d6:40:37:aa:78:cb:75:6a:f0:b8:85:7c:9a:8e:f0:c3:
         e2:a0:52:de:95:eb:b9:df:1e:49:07:ec:5c:4a:93:45:db:76:
         56:6f:95:a3:a0:06:7c:79:6b:92:16:73:bb:1d:e4:53:fc:9a:
         e9:4b:69:fe:20:f6:f4:eb:49:7d:1b:30:4a:b3:6e:17:63:d8:
         10:94:a0:20:39:1c:e1:e7:26:6b:4b:d2:c0:a8:e9:46:dd:73:
         77:a9:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----