Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File:                     p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier:          wU0I6uuaIMXgh+0IXz/EGbGioGZ1K8jFSox25IVyalg=
Subject key identifier:   5F:73:FF:74:E4:BC:88:54:88:A3:02:45:10:2D:23:DF:B3:8B:F8:83
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer:       /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial:       01962F7469CA6F7326E46A5FCC33A179598C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number:          0C73
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
                          2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
                          3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: +1VtifcOnVBy+xhd7uBXDGVjXZj6RxaORivNBYuGTr0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:69:ca:6f:73:26:e4:6a:5f:cc:33:a1:79:59:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=5f73ff74e4bc885488a30245102d23dfb38bf883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:70:33:f8:13:e4:9e:ab:52:e8:84:6e:c4:7a:
                    9e:fb:5d:15:e5:24:8b:8e:7b:09:b9:09:b9:e8:ea:
                    78:b5:b0:dd:5c:7d:ea:77:05:04:12:6f:15:20:2a:
                    96:04:40:57:b3:1f:aa:44:b9:58:72:32:23:9a:9a:
                    5a:96:56:c7:b1:8e:73:01:81:bd:ab:f0:16:41:86:
                    49:9d:e4:b9:a2:6c:b6:3c:af:0d:62:db:62:ca:4f:
                    18:94:92:e5:2e:aa:1e:4f:4a:14:99:0b:01:42:76:
                    6b:48:f9:6f:c9:96:7d:37:36:34:7b:77:3b:41:20:
                    88:96:67:48:30:05:50:57:56:71:61:a1:4c:f0:ff:
                    13:7f:4b:8b:b7:6a:8e:95:90:a3:50:5b:46:f2:3f:
                    ae:7c:b2:32:3c:ce:09:48:9d:da:93:e2:61:43:50:
                    6e:80:c2:a1:c4:85:96:ae:90:36:93:ea:3d:2f:a6:
                    bc:fb:ed:59:50:49:68:f2:a6:e7:20:35:bb:6a:0d:
                    4d:f5:88:14:36:45:02:bf:03:5d:d9:12:49:c2:ab:
                    73:25:42:63:72:a6:9c:8c:d6:2b:5d:12:4f:20:9e:
                    b7:08:c0:80:3a:c8:e0:34:51:b1:25:17:de:20:8f:
                    b2:9a:ff:5c:1e:cc:b7:ce:3b:4d:b2:f9:d8:50:8d:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:FF:74:E4:BC:88:54:88:A3:02:45:10:2D:23:DF:B3:8B:F8:83
            X509v3 Authority Key Identifier:
                keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2e:f3:a1:1f:55:90:9b:93:ec:78:de:82:49:d7:d6:41:e8:
         73:f3:8d:2d:41:52:35:66:ed:0b:72:a0:40:b0:9b:18:7b:f3:
         49:ef:89:0c:44:56:6d:73:95:61:f8:bc:7f:91:62:ef:16:2a:
         07:ce:32:93:25:45:b6:8c:d2:d8:70:78:98:44:b5:93:66:bc:
         e3:34:2c:56:df:73:8c:11:82:6d:e7:f1:1e:ea:3b:e4:be:17:
         6c:25:a1:ef:15:c1:ef:77:11:0a:bc:72:9e:00:5e:fd:61:c8:
         bc:54:81:51:b1:0a:2b:d7:b9:49:9b:64:5c:fa:74:02:37:07:
         a0:d4:d1:6e:13:f8:20:c6:b8:bc:be:e3:b9:d1:e9:7b:5e:c1:
         06:7b:c4:5f:7d:4d:1e:71:9e:fd:11:42:cd:95:f0:c3:fa:0b:
         5c:c5:b5:b2:1e:2f:0d:54:86:5c:62:65:55:64:e7:04:0c:7b:
         1a:59:fc:a4:37:d1:0e:c2:53:cc:42:c1:20:82:b3:5b:86:65:
         e4:86:6b:56:1f:52:82:c3:99:14:2f:a7:72:1f:67:e6:17:a2:
         d2:b8:04:ac:dd:d0:01:1e:ad:28:36:53:b0:0e:cc:9e:f8:6d:
         2b:25:4c:3d:b2:73:ab:6f:e4:25:52:fc:88:b7:35:a6:9f:1c:
         73:43:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----