Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File:                     B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier:          GR5M8Ic09FrLPzHzA9QEuwe6FxPyG8wCr9gK+YucTDw=
Subject key identifier:   4F:75:54:0D:F8:8C:CA:F2:88:D9:61:38:82:D8:E0:60:03:27:9E:6E
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer:       /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial:       01962E988E369E0E1D62278CC24AA3EF3AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: 8s5jlmVuyTPiRv4H9BvQU42g7nw.roa (hash: Ucu3y8/kR6J85jmowJDRLpHtgn2LtVqQioF1Y1wmZq4=)
                          2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: LjmFvYFGoQjAHeAaGeVo4hSMzXnmRUClHR+UmmZleO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8e:36:9e:0e:1d:62:27:8c:c2:4a:a3:ef:3a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=4f75540df88ccaf288d9613882d8e06003279e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:c9:2b:73:2a:5a:e4:ae:44:38:7c:21:c0:
                    29:2d:e1:45:a0:ab:d3:48:d8:58:c7:ff:b3:ab:ef:
                    fd:8b:e8:1f:04:94:5f:43:c1:d3:37:20:15:97:8c:
                    d4:94:46:b0:ed:13:90:04:2d:2e:b4:dc:7a:24:68:
                    39:1b:0f:0a:12:89:e2:e9:aa:b6:5b:6d:9a:d9:aa:
                    0e:42:38:65:c0:14:d6:87:de:a3:56:2a:ec:4a:8b:
                    ab:9e:be:e4:3b:19:7a:37:f0:2c:7e:e3:3a:65:01:
                    5c:59:d4:dd:e9:6f:06:1e:fc:24:58:1f:4f:da:35:
                    41:5c:d6:2d:cf:36:3b:b4:e0:64:d6:55:d1:fa:8e:
                    ef:17:d2:23:37:f7:07:c1:bc:7d:2a:59:f2:5a:3a:
                    48:79:21:fb:de:48:86:57:78:15:a3:74:34:d8:8a:
                    21:c0:ac:4d:a2:c0:a9:b3:47:49:32:a1:87:5c:2e:
                    c9:d6:ac:88:05:c0:69:4c:ea:ef:8c:99:79:a8:f4:
                    e9:d1:6b:07:75:82:aa:0a:2a:69:17:4e:88:9a:f4:
                    61:44:60:f9:8f:7e:fd:28:4c:33:cb:25:e8:67:ed:
                    ad:19:a7:5c:f7:e9:79:42:23:5d:eb:d5:26:f8:2b:
                    47:1f:7e:84:5a:20:e1:d0:f2:43:66:bb:e2:6f:a6:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:54:0D:F8:8C:CA:F2:88:D9:61:38:82:D8:E0:60:03:27:9E:6E
            X509v3 Authority Key Identifier:
                keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:02:0b:b1:3a:f0:45:7c:a6:73:66:95:22:bb:6d:5a:6d:d2:
         3c:c8:3b:29:b3:e1:14:ac:ec:8e:40:0c:2d:04:54:07:0f:25:
         34:89:8f:68:8d:cc:7e:5e:19:9c:f9:07:fa:aa:9e:b3:ff:9c:
         a6:94:0d:f9:b4:a6:c1:87:52:cd:48:ed:3a:6a:9e:64:1b:52:
         31:f6:2d:c9:b7:26:d0:3e:78:7b:99:09:bf:6d:cb:a7:15:0d:
         62:60:b6:eb:16:7d:64:f5:0a:b4:15:35:05:98:cc:0f:9b:63:
         ec:dc:6b:b7:d1:20:29:8e:97:04:89:39:44:c7:1f:f5:43:d5:
         64:2c:0a:b9:46:2e:9a:8f:ad:91:23:7e:27:d9:b6:c6:58:99:
         4b:dd:70:4f:28:4f:af:bb:81:94:e8:23:c4:18:56:f4:27:26:
         06:a8:ca:c7:4b:f4:65:12:12:75:1d:0f:fa:c2:0e:30:7d:90:
         b3:a9:6f:cc:92:a4:44:81:79:9e:18:42:72:de:28:88:70:fe:
         36:ac:ef:c9:22:93:76:d2:04:74:74:95:2a:91:95:77:ef:f0:
         01:db:ae:76:21:a6:ab:ef:55:61:2c:fa:d3:20:97:4e:17:17:
         06:f9:95:01:e3:39:af:d0:30:1d:fc:4d:7d:ef:ac:15:05:ec:
         cf:65:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----