Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File:                     r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier:          NdoG0jfVdusEn/bkZ/mAGcVFNG8Gw4sGX++TMQAr2u4=
Subject key identifier:   3D:2F:94:CA:1D:61:FF:A3:90:0E:80:65:3B:51:1E:BD:9B:E3:AF:C6
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer:       /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial:       01962E2AC2E11D61992FA46B88F06B8DED32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number:          0AB0
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
                          2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: hweL9uy0a9yuc0SuZX6uSGAzx6Fq4DBwFIksGLqagfc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c2:e1:1d:61:99:2f:a4:6b:88:f0:6b:8d:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=3d2f94ca1d61ffa3900e80653b511ebd9be3afc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:5a:ff:d2:25:ae:7c:0d:92:b3:2b:35:5a:
                    1d:85:cb:90:5f:49:ea:b4:d9:32:b9:f5:d6:2e:10:
                    3f:ec:1c:b2:98:d2:38:ab:f8:8e:86:ae:e5:3f:d2:
                    a0:de:76:0d:6b:a7:d5:e0:64:eb:23:d9:3d:96:b1:
                    61:6c:a7:a8:95:95:a6:98:5a:fc:17:4d:6e:ef:a7:
                    80:74:f5:bb:fe:99:65:f4:51:63:af:da:15:be:e2:
                    1d:62:96:0d:4c:04:03:89:36:a7:ad:2a:ca:9c:d4:
                    c4:56:7e:40:d1:e5:08:d3:ee:9d:f6:f5:d9:b7:92:
                    02:d7:9e:56:8e:de:7e:b8:55:6e:89:66:fb:28:fd:
                    1b:66:f7:d8:03:9c:81:56:b0:71:7e:eb:83:ef:82:
                    c7:ab:00:04:ef:38:bc:24:4f:7b:9e:9b:28:dc:2d:
                    b8:4b:cd:ed:dd:f8:74:30:34:8c:d7:1e:3a:d0:18:
                    c8:fc:9b:43:d4:1f:3f:14:5a:c2:2a:ef:26:e0:f7:
                    dd:ea:0b:12:f0:dd:c9:03:c3:9d:24:22:29:64:83:
                    eb:c9:32:92:ac:6d:34:ab:4f:bf:19:13:70:58:36:
                    65:aa:00:b6:7b:9c:c4:f4:7d:9d:12:e4:92:95:13:
                    15:28:97:46:2e:8a:35:6b:2f:63:34:50:a5:a7:80:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2F:94:CA:1D:61:FF:A3:90:0E:80:65:3B:51:1E:BD:9B:E3:AF:C6
            X509v3 Authority Key Identifier:
                keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6d:b5:a6:32:02:7f:98:9c:5a:05:7d:d8:a2:ff:4e:b1:eb:
         b7:0e:f1:8a:d8:01:e5:5d:89:1f:ed:3f:6e:b9:f9:4f:c1:a4:
         9d:73:5e:64:b0:d4:da:c0:6d:99:b7:0d:3e:66:be:92:cd:44:
         b1:89:8f:1e:00:0d:ca:a4:57:ca:f3:96:88:58:ec:fd:0b:3e:
         21:b7:81:8b:e8:32:59:ce:fe:a3:ed:b7:b1:5f:67:85:81:02:
         6e:5b:5d:ac:19:3c:52:97:0e:d9:bc:c1:91:3b:1f:2a:08:91:
         bd:7a:ff:95:ad:30:9b:0c:b2:dc:dd:07:eb:34:3c:b1:f5:66:
         7b:ce:82:4b:78:c3:f9:74:38:be:18:6a:b1:41:7a:c2:ad:1f:
         08:e9:cd:d4:5e:26:f1:b7:52:69:3a:1e:4f:16:fc:e8:de:ec:
         04:d2:eb:0a:f3:59:67:7e:9f:fd:64:46:5c:e9:0f:7f:d9:e5:
         c5:5d:7b:c0:1c:64:ee:b8:63:41:ac:02:30:07:2f:fd:32:f5:
         93:0b:4a:73:b2:84:7c:42:37:06:2b:08:dc:41:6a:50:73:ee:
         31:5a:50:fb:f5:c8:03:8b:26:42:e2:cf:95:88:22:bb:19:4d:
         c9:27:6e:b6:a6:cc:ab:32:ac:0e:1d:08:db:e8:ab:2e:ab:ad:
         39:76:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----