Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File:                     R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier:          mMqkj4caRHKLhS6agZciNLDz0xhVfD1BjWNACkCOaAI=
Subject key identifier:   A6:49:CB:3B:60:C3:17:CE:38:D0:8D:DF:67:E0:B6:25:39:C3:8D:05
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       01962DF44D6E6211D697C191B3470879F31A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number:          0F8E
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
                          2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: fIxy9evzaII0IL8khnJ8NXwb6jh9t1IQX3pZIMRRXGk=)
                          3: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
                          4: hP4RlSdcYGNnTpuPiY_-lw9F7k8.roa (hash: C3TpjMqyfvy/eCoQ7B0XWPy+vgrcOa/QV9L4/p4cn7c=)
                          5: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4d:6e:62:11:d6:97:c1:91:b3:47:08:79:f3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=a649cb3b60c317ce38d08ddf67e0b62539c38d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:b2:c2:71:c4:8c:04:bd:c2:e2:65:af:d3:
                    13:e8:f7:7a:3a:c0:31:f0:7f:52:d7:f0:90:cd:4c:
                    78:88:e6:dd:e3:28:ed:a7:5e:bc:8e:d6:ad:d4:58:
                    44:88:c5:ec:38:71:05:18:ec:76:5d:87:94:7b:44:
                    0c:8c:b4:28:90:20:76:2b:8f:c1:6e:ca:42:6f:68:
                    76:85:d7:67:16:54:5d:41:ca:26:07:18:ea:b4:f8:
                    ce:ce:9f:4b:ca:a1:7b:14:b2:42:8b:a6:5d:ae:99:
                    ee:c4:5b:bb:fc:6a:4b:e2:fe:34:c2:92:34:fd:be:
                    d5:68:d9:4d:f3:5c:8b:61:35:06:0f:5d:31:f5:13:
                    6b:c4:af:3f:c7:94:48:4d:02:bd:98:55:4b:a6:3a:
                    42:7f:23:c5:b4:f7:1a:f1:6d:9b:ca:d1:cc:50:d0:
                    bd:05:7d:e6:54:18:e3:97:6d:fa:db:99:32:b8:5a:
                    1f:c6:d8:fa:30:4c:80:96:65:3d:d5:81:eb:97:8e:
                    1b:5d:29:3f:49:f6:0e:ae:2f:5a:a7:24:58:50:a3:
                    23:28:d8:9c:14:ae:46:40:8a:48:f4:db:93:2e:27:
                    63:f0:54:77:b3:e0:e3:cd:c3:64:a0:75:b3:02:97:
                    25:0e:82:bc:d5:0d:e9:63:5f:c1:d0:50:bd:f8:ad:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:CB:3B:60:C3:17:CE:38:D0:8D:DF:67:E0:B6:25:39:C3:8D:05
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:07:d6:12:3c:f0:14:48:30:aa:6e:6b:7a:ab:1a:1b:5d:
         ac:d9:6c:ca:4e:79:7c:9a:6e:98:45:7a:20:be:e5:f8:4f:69:
         4f:0f:bf:3d:e8:50:07:be:1e:ed:0c:de:31:8a:9f:45:b6:c7:
         c4:b7:e0:d5:1c:c9:2d:77:31:63:17:bf:79:c0:8f:7d:18:67:
         b5:64:77:82:27:21:af:bc:20:da:44:ae:87:6b:34:02:39:d6:
         57:dd:63:c6:1b:f1:b6:a5:52:6f:9e:55:a2:71:88:32:4a:f2:
         cb:b0:0b:7e:ae:da:57:0e:ff:0b:0b:87:a4:68:a8:77:e4:d6:
         dd:50:47:57:98:a0:3a:ba:a3:04:0e:f1:e0:56:8d:df:67:d8:
         65:56:0e:05:9a:46:2d:43:e8:c2:2a:2a:2a:f0:86:94:1d:b1:
         8d:28:ae:fd:85:a0:7e:8d:18:1e:d7:14:2e:e4:a4:4c:78:c9:
         c5:80:86:80:e7:33:41:8d:7e:b2:bc:16:00:04:3a:e0:c5:0d:
         7a:47:c6:79:b4:f3:92:59:17:e6:e3:8c:e6:74:85:21:03:f1:
         b0:79:df:4e:b2:40:68:a2:89:c6:19:0d:c3:5d:8b:2a:c1:5e:
         7b:0e:0d:56:b8:70:76:44:33:2e:55:77:6d:b0:3f:10:ff:2f:
         d8:3f:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----