Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File:                     9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier:          dr2CLWFyHQ3m3Echv46RwvNTFe0Ny4jZKLTAMoJDB08=
Subject key identifier:   0A:BF:CA:3E:8D:50:8A:73:A8:A9:A0:BA:F2:25:87:2F:56:7C:09:F3
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer:       /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial:       01962E99972EDBBD23A2EA4CF31DBD9AFBDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number:          0ABE
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: AE30aKJaJd3I6UlEfQVT8N7PBGIJhD5pSsvhfmljSn4=)
                          2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:97:2e:db:bd:23:a2:ea:4c:f3:1d:bd:9a:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=0abfca3e8d508a73a8a9a0baf225872f567c09f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:ad:9e:78:bb:8d:64:6d:c9:f9:b6:97:e3:
                    91:f0:97:d4:bb:ee:54:58:04:d5:93:f8:71:0b:43:
                    2c:dd:ea:b4:c4:f9:52:eb:bf:a5:e1:7c:45:7d:a1:
                    fc:94:d6:dc:43:d8:f1:4c:d5:65:9f:eb:c4:c0:15:
                    78:5a:f7:ba:92:17:a9:6a:2b:3f:70:6e:4b:79:b7:
                    15:c6:c1:36:7b:36:0a:67:d7:d3:f6:b9:b2:d3:88:
                    2c:7a:9c:5a:da:f4:75:a2:d7:fb:cd:80:96:75:77:
                    bd:cf:89:88:76:06:f1:6a:f6:2a:4a:34:d4:6d:76:
                    2b:ba:5e:4e:6c:d8:9e:40:40:bb:80:10:ff:2b:c5:
                    d6:f1:01:e3:e4:40:66:fd:de:a0:75:cf:de:2e:b1:
                    b6:7e:99:e0:9d:0f:87:47:b8:41:4f:9f:0a:cb:4f:
                    62:e9:29:04:cc:35:a6:99:c2:b7:ee:b7:b4:6e:01:
                    c2:bd:6d:db:78:d5:01:6a:6f:9a:e6:7b:2f:9a:5e:
                    bb:de:22:53:62:0c:24:ee:ae:52:69:4c:23:39:e3:
                    12:bb:9a:de:f7:86:ad:ec:e0:fa:a4:61:d7:d0:33:
                    59:d4:fc:57:01:90:c9:5c:e8:54:26:04:3e:93:e7:
                    3e:00:53:6a:20:d5:f0:66:47:68:c9:78:5c:69:51:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:CA:3E:8D:50:8A:73:A8:A9:A0:BA:F2:25:87:2F:56:7C:09:F3
            X509v3 Authority Key Identifier:
                keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:30:9a:e1:3c:8c:45:79:65:a7:75:a7:c5:07:0a:36:05:
         a5:37:b9:8b:2e:75:0a:f9:d5:b9:e1:52:99:f4:ce:b0:eb:8c:
         cd:19:a0:9b:21:a8:f7:97:7a:38:93:ea:4d:f6:90:f5:b2:c5:
         dd:40:e9:16:c9:8b:f6:48:f9:83:6e:a1:70:2d:b0:25:ac:05:
         ea:1b:4a:56:af:8c:02:be:73:48:8e:07:25:41:14:b8:1b:93:
         f4:6f:07:06:79:f7:40:0a:8d:b3:dd:57:64:fb:01:17:45:04:
         28:ee:43:8d:1c:a8:c6:25:82:6d:78:62:7c:fd:4f:6d:92:36:
         c9:9f:5b:08:7f:77:ae:c9:9a:7c:36:25:ea:04:9f:d6:bb:50:
         fa:63:33:a1:59:44:72:34:df:ce:da:b9:42:dc:37:71:fd:9e:
         33:a5:68:80:3e:da:8c:d2:b7:31:a5:8e:af:e5:0d:ec:5a:a7:
         6e:d4:f8:2e:2a:2d:7d:90:82:a6:c1:2d:f5:18:02:5e:d1:80:
         13:a4:5d:14:5b:3e:a1:ec:c7:c6:ff:38:a5:e5:1c:69:bd:83:
         b9:42:2b:84:8c:01:c0:e9:61:49:3d:4d:ef:c0:d7:f7:f9:83:
         e3:20:18:4e:db:d5:33:9b:7f:e2:ff:7a:da:33:d3:7c:f8:be:
         74:aa:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----