Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File:                     9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier:          MdL7eRPXQCPUjwHaoY/SyFBuMRQmeNEKl54KGpWI1IE=
Subject key identifier:   DB:C9:B1:7D:96:27:BD:A7:B7:CB:EC:6B:76:73:C1:87:5D:B4:00:3A
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer:       /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial:       01962E9860CE549141AE694CF15D098E4895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number:          05BA
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: HbOoZXNkb2prDIafcz/HCizc8YCbfAGTDRMwVkU+AfU=)
                          2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:ce:54:91:41:ae:69:4c:f1:5d:09:8e:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=dbc9b17d9627bda7b7cbec6b7673c1875db4003a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:ce:e5:f6:79:19:48:6d:b9:fd:88:14:8d:
                    7a:98:4a:da:40:fe:3b:ad:a6:a3:9c:42:94:e4:f3:
                    c6:ab:31:3f:82:28:27:13:fd:49:d3:de:d6:29:d3:
                    a6:b7:fd:d1:45:d4:4b:45:46:36:8c:15:a2:8a:0b:
                    9f:3d:75:04:fb:c3:d9:8a:f8:af:56:4d:4b:82:6c:
                    00:87:7c:8b:58:18:ab:01:13:f2:6f:bf:fd:7a:c2:
                    56:40:37:08:aa:a2:b3:8a:fe:85:97:d5:21:cc:fa:
                    9a:f3:b7:18:c3:d2:c8:03:c0:bb:80:fd:31:1a:0a:
                    2b:54:c7:95:4a:53:90:ff:41:2e:46:6f:6f:0d:38:
                    b1:b3:65:ad:56:ec:4c:8f:19:f5:85:8b:9e:09:98:
                    b5:04:ad:30:5f:97:c3:68:8e:bb:0c:7e:79:96:85:
                    1a:8c:11:df:f7:e1:98:0a:c4:32:58:06:86:92:d7:
                    a4:52:77:b7:5e:92:b1:0f:39:05:01:5d:92:c2:86:
                    49:2d:6a:ec:a7:fa:62:fd:72:45:ff:46:ef:9d:7d:
                    b7:cf:28:ec:91:a2:d2:3a:5b:06:a0:e3:16:fe:8c:
                    6b:51:9d:fc:65:68:01:08:cf:39:c9:99:40:8d:9b:
                    4d:37:89:26:8c:12:27:07:64:cd:9d:8f:c2:f7:f5:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:B1:7D:96:27:BD:A7:B7:CB:EC:6B:76:73:C1:87:5D:B4:00:3A
            X509v3 Authority Key Identifier:
                keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:db:64:85:74:94:50:64:8d:ed:a0:b7:8a:5a:61:7d:7c:
         95:7f:d8:7c:0e:cd:d1:61:c5:87:5f:71:f9:b2:86:e9:9f:d0:
         05:da:27:71:6e:c7:65:e2:7b:56:52:30:e9:b5:32:0b:1f:3f:
         3b:89:0a:6f:57:3f:ae:c9:c5:8b:22:e5:57:07:a2:81:40:fc:
         1b:5c:86:71:39:51:a6:c7:fc:f2:6b:65:50:86:f7:35:5f:73:
         51:04:bd:5c:61:b6:0e:df:41:b4:00:ba:ef:3e:dd:a0:74:51:
         2b:61:88:0a:85:24:c3:e6:a5:f4:d9:dc:f0:b1:db:63:ec:a1:
         bf:c3:d2:b7:ac:9e:5d:8f:49:49:e1:e3:23:10:25:4f:94:4d:
         36:87:7d:31:9f:20:63:65:27:ff:c7:2c:4a:cb:40:20:c4:ee:
         e8:4b:97:0a:2f:ad:49:cd:de:f4:63:22:0a:91:91:e8:14:e9:
         6d:0b:0a:05:8a:8d:68:84:82:4a:3d:4d:4c:7d:d5:5f:78:4f:
         e0:ec:5e:de:a4:9e:99:a4:9c:f7:84:f3:1c:65:f7:1b:c6:3a:
         c5:19:33:1f:60:17:2c:e1:0f:65:a4:4a:7a:6b:03:5d:d4:e2:
         9c:94:64:49:95:17:5c:cc:b7:1b:d9:8d:ba:61:84:63:56:8b:
         48:f9:f6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----