Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File:                     k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier:          CyLkzBpauqSQbin/Dao6r9K3XT0/2CRBPdXWJPQey6A=
Subject key identifier:   3E:BA:C7:5C:AA:83:DB:2F:6F:37:BD:F3:42:22:C4:AC:1E:09:AE:87
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer:       /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial:       01962F072B6BC59D8A5753D8F3ED533A5B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number:          11EE
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: SboGMTB-9QHWroFpAbYSHcl3CKo.roa (hash: rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=)
                          2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: M6h7jUZnQFqch7y2yGJL6ZyaGcg6UpN0eyi4+C7gKtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2b:6b:c5:9d:8a:57:53:d8:f3:ed:53:3a:5b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=3ebac75caa83db2f6f37bdf34222c4ac1e09ae87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:1d:89:ce:be:b6:40:28:a5:c8:23:71:73:
                    f4:40:80:0c:7c:23:11:4e:7e:d2:79:8a:24:6b:ff:
                    da:76:58:d7:de:78:75:23:c7:c2:b2:e3:e8:f4:d4:
                    3b:8e:31:03:48:48:88:d9:5e:ad:b1:fb:bb:41:83:
                    3d:6c:ed:40:e4:46:fe:82:1f:d7:cd:83:ce:a4:ff:
                    69:95:05:b0:50:09:64:b2:22:72:58:37:7d:cf:4d:
                    58:45:07:10:b4:af:a4:4f:b3:c1:65:26:65:c2:7d:
                    25:ac:33:11:9b:5c:95:c5:8e:f6:bb:28:42:a9:b9:
                    08:52:28:42:ba:d0:95:53:f0:23:81:e1:5d:e2:73:
                    53:b2:c6:eb:5c:3f:ad:b5:c5:ea:e4:5a:99:98:50:
                    5c:d4:8b:8b:b4:35:22:1c:90:af:e6:2c:60:d2:ca:
                    56:d3:8c:22:34:90:9f:6d:8d:05:35:ba:d4:93:78:
                    67:78:46:3f:e9:51:09:8b:2c:5a:e2:4a:31:7a:a1:
                    27:34:bf:64:91:5b:fc:8e:d6:eb:15:51:7e:8d:69:
                    e5:79:c6:6a:1e:52:2b:af:a9:46:80:a7:ed:d6:6a:
                    df:7b:84:ce:fd:d2:0b:c3:5a:d6:0c:5a:87:0c:39:
                    a7:33:cf:5d:a6:e3:32:ad:40:13:1f:36:2b:18:94:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BA:C7:5C:AA:83:DB:2F:6F:37:BD:F3:42:22:C4:AC:1E:09:AE:87
            X509v3 Authority Key Identifier:
                keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bf:d9:45:41:de:cd:8d:a4:fa:d9:c8:3e:9b:3f:c6:ee:5c:
         a1:13:44:12:b8:de:a7:2b:2a:3f:fb:4b:de:68:ef:b0:9a:01:
         7a:b5:3a:cd:59:44:2a:e9:95:e6:cb:09:45:0e:bb:02:64:e5:
         19:a1:8d:02:cd:e8:f5:ac:71:e5:57:18:9a:9e:e3:23:70:bd:
         d7:4f:37:e6:4a:9a:cd:aa:b6:99:01:60:d3:e3:35:14:ff:50:
         10:e2:90:42:76:db:13:df:ff:56:3f:1a:ae:d2:a5:b2:d1:94:
         05:d0:aa:ca:f0:de:ca:57:47:c6:2a:ba:87:ec:e8:d1:2a:df:
         e7:32:bd:8e:58:bc:6e:1f:88:28:b9:d5:7c:65:5c:95:8d:6b:
         37:a1:bd:90:e1:25:c2:a0:17:17:5c:df:c3:38:7c:b1:97:33:
         f4:c6:8e:97:32:f5:78:d6:2b:75:bc:fe:fb:e7:c1:6b:36:1a:
         2f:d8:43:8b:64:dd:0a:62:ff:c8:63:b6:dc:f8:97:89:71:03:
         f9:f2:61:f3:fb:7c:23:99:c5:67:f7:bc:50:d1:ed:3f:86:c9:
         64:0c:f6:74:2b:42:10:0b:60:8a:b7:46:1c:c2:21:44:20:0d:
         fb:e8:f1:ed:bb:42:54:44:9c:14:2f:6c:ed:bd:72:6f:f2:6c:
         00:18:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----