Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          wtkhfxjKuFqDSwMqboUftXk/4kai2ttAiC14pLuPwow=
Subject key identifier:   E9:AA:14:FF:CA:68:91:DC:F0:B9:69:E1:DF:34:45:A3:5A:9A:0D:0C
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       01962E9942FCAC864A692BF7BDD9C8E46C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          128D
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: AIF2RQyzBK7EZEvZzpFTBHwSvQWkiLOPvPmgZl2yEp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:42:fc:ac:86:4a:69:2b:f7:bd:d9:c8:e4:6c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=e9aa14ffca6891dcf0b969e1df3445a35a9a0d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:d8:60:ca:d9:cb:3e:9e:bf:c5:31:74:9f:
                    6f:bf:04:15:e0:7c:f0:f4:12:93:63:b8:0e:73:08:
                    cd:d1:c3:57:42:6b:65:16:51:aa:be:fd:88:8b:e8:
                    ce:d9:3f:f0:56:c9:0a:2e:de:a5:73:24:b7:f0:c9:
                    3b:79:4b:aa:87:2c:08:9e:57:52:41:71:bc:4f:40:
                    14:0d:ac:86:2b:42:da:11:5f:d6:44:77:27:c2:81:
                    90:95:c0:d8:84:a1:d9:17:b5:ce:4b:2c:7f:c6:27:
                    ce:93:23:76:28:b6:81:da:88:de:ae:a9:ec:b8:34:
                    99:92:64:af:ba:ed:85:41:06:8b:14:bb:aa:81:77:
                    39:0e:f3:7d:b9:fb:90:e7:71:68:c5:ec:bb:01:7e:
                    76:1e:66:56:c9:20:36:71:72:4d:28:90:94:b3:f9:
                    08:84:1e:88:7c:0a:39:e8:66:54:bf:07:93:13:ce:
                    6f:c4:74:64:2c:8c:a8:71:93:26:60:1c:9e:73:c6:
                    26:49:4f:53:26:4b:2d:21:9c:2b:00:6d:2d:2b:dc:
                    ec:ae:69:7c:9c:d0:b6:22:1f:b3:1a:ad:d4:4b:b3:
                    c8:14:10:07:06:b0:7f:b2:db:cf:09:3b:19:fb:5a:
                    db:d1:cf:27:e9:99:dc:4f:6a:00:a7:8f:e4:04:78:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:14:FF:CA:68:91:DC:F0:B9:69:E1:DF:34:45:A3:5A:9A:0D:0C
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bb:bd:a2:80:a8:7a:e3:5e:32:39:f5:48:d3:eb:a6:19:cb:
         7a:2d:a9:0f:e3:6f:47:fa:d2:7d:95:a2:2f:17:5b:19:1d:52:
         df:85:3a:f0:e1:0f:9f:7f:b0:7e:fd:09:ac:fd:4b:31:2d:40:
         b4:9f:b9:3d:82:2b:dc:e1:ba:9d:5b:06:dd:e8:49:7a:1c:cb:
         bb:3a:2a:d5:0e:f7:ce:00:3c:06:7c:af:11:70:72:5c:ce:3a:
         6e:dd:21:d5:01:15:d3:a8:28:b5:01:0d:4d:b6:d5:2d:b3:2a:
         c6:27:f9:f2:82:67:35:e7:79:5c:92:b1:8c:b9:38:5d:53:23:
         77:65:03:03:53:af:c1:a7:05:d2:72:d6:b0:b7:36:67:3b:57:
         e9:87:6d:8a:65:44:9a:55:b2:79:db:d4:2e:10:d8:0f:8c:23:
         d5:c2:56:33:61:c7:67:f9:7e:8b:ac:70:82:64:11:df:22:db:
         1b:bd:36:01:ee:2d:f3:07:54:e8:1b:db:13:b7:55:1e:f6:09:
         88:b7:38:fb:7d:d9:ad:36:7e:de:7d:da:c5:fa:de:4f:b5:5f:
         7d:32:cd:5d:42:7b:25:be:bb:95:24:8d:2b:69:a3:be:46:f3:
         00:af:de:62:67:88:c1:24:e1:1f:59:c3:50:fd:e3:75:23:c2:
         28:a6:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----