Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          Fq7Z9L9dbAjcw2BGDij3wq/baWRjIv2ihnWzsQj9nLc=
Subject key identifier:   FE:56:CE:90:51:05:C0:C0:D1:A3:55:D9:87:C6:1F:DD:01:69:27:EA
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       01962FAB2AF14F2F8980C6525118F02016BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          12DF
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: g6j5CNGqWDFKsX3ld+D0eXSO8htCXdnwom7e0j1GQWM=)
                          2: rtyY9Cz1KYossj4NRjvNjMhwRZI.roa (hash: KYSFbkeXEHZUiKzf8OS4b0YogJmArNqO7BI7cVGBHSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2a:f1:4f:2f:89:80:c6:52:51:18:f0:20:16:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=fe56ce905105c0c0d1a355d987c61fdd016927ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:df:38:e3:59:75:e0:51:d2:01:f2:63:28:df:
                    fa:a3:69:c7:ef:40:6a:4e:3b:6a:d8:52:80:e8:8a:
                    f0:c4:75:7a:eb:b8:0f:72:55:05:17:33:85:28:81:
                    d6:b0:d8:6b:62:90:9e:85:28:cc:38:f9:eb:97:99:
                    f9:fc:5e:2a:38:4b:7a:4f:2c:e6:eb:02:2a:71:19:
                    a4:f5:3c:f6:86:d3:6a:9a:cb:20:2e:df:42:ff:93:
                    2c:23:4f:72:43:b0:bd:c1:6a:32:7d:89:56:83:20:
                    99:ca:56:08:bf:d8:a9:c5:1f:e3:80:01:c7:5a:69:
                    44:0c:5a:1c:43:70:ff:21:23:14:0d:0e:45:fb:8a:
                    d1:f7:46:fe:01:0a:7e:35:80:6e:61:be:82:a4:18:
                    fe:d3:0b:55:77:cb:e5:4a:23:3a:c3:68:aa:a7:25:
                    41:ec:99:da:83:6f:16:c1:87:a8:b2:12:44:74:f9:
                    a2:22:79:a3:e8:4e:39:39:86:41:12:c8:c1:39:65:
                    50:11:92:af:f1:55:67:f4:9e:22:df:27:4f:a5:da:
                    17:80:24:f5:b6:b5:fc:fc:64:a1:d2:fd:40:6a:08:
                    c6:58:73:de:52:79:ad:73:a2:b4:39:3b:51:a6:7f:
                    70:08:ba:92:b4:41:c4:45:77:c1:96:74:57:ae:10:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:CE:90:51:05:C0:C0:D1:A3:55:D9:87:C6:1F:DD:01:69:27:EA
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:67:58:4a:e1:70:1d:2a:f0:43:a2:62:8d:8f:55:02:cb:
         87:45:a9:3a:a3:39:cb:35:e8:b6:91:7c:8f:00:8f:77:45:51:
         4a:92:22:06:22:04:11:ce:68:0c:f2:c7:1e:fa:3f:71:8a:9e:
         f3:c9:88:5e:18:3c:6b:7c:91:9d:69:ac:ef:13:6b:46:62:80:
         8d:e8:2f:85:0f:bd:23:5f:90:a5:e9:58:b6:ab:c2:38:74:d3:
         ae:68:a7:40:8c:af:66:29:c2:b6:a1:fc:c1:98:5c:80:a5:5b:
         de:d4:c8:48:bd:f1:4f:55:82:3f:c2:67:60:b2:7b:e7:e3:b0:
         68:87:5f:02:22:a6:a4:bf:e1:5f:95:14:60:fd:bb:8f:12:78:
         75:88:32:86:0f:5d:b0:e9:bb:15:c0:23:26:1a:b8:a7:98:99:
         66:cd:13:e0:d5:1b:f8:53:7a:bf:45:46:e0:45:c5:17:c5:0b:
         6d:ca:3c:ba:22:d1:43:d6:3c:02:ae:9e:78:29:cb:ae:ae:95:
         7c:ae:bd:87:16:8d:a5:44:c0:65:7e:46:c5:67:ca:2c:44:a3:
         92:3b:22:70:23:4e:43:3e:05:f9:1c:99:48:7e:12:19:86:bd:
         7a:6f:f4:5b:7d:58:ec:1d:2f:b3:cf:10:68:27:87:ab:d5:ce:
         06:77:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----