Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File:                     1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier:          UGeH6CpAOZF0H/HzH08S8OvoDY0MNq7naQlWQ9PCwr8=
Subject key identifier:   DD:B1:7E:9B:B3:43:6D:C3:EA:92:B2:8C:07:55:F7:1A:A4:19:55:74
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer:       /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial:       01962E2B00D62B8E80E9B88D0A262202155C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number:          0935
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: 6YqeiMMGeGa9skvbWrcRNP6PEXEWuByutJKHihn86Zo=)
                          2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:d6:2b:8e:80:e9:b8:8d:0a:26:22:02:15:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=ddb17e9bb3436dc3ea92b28c0755f71aa4195574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:89:54:f5:87:27:51:e6:9a:12:6f:76:03:
                    a1:35:fc:e6:91:63:5c:3c:99:b8:84:4d:0d:e5:20:
                    cd:fd:eb:f8:fb:84:a1:fd:f7:4c:6a:ea:bf:40:99:
                    82:75:e5:df:62:30:a8:62:ec:21:0f:b4:2a:8b:f2:
                    bf:e0:68:24:6f:4b:1d:7a:c4:16:9b:be:93:ea:b6:
                    57:4e:03:59:f3:63:b6:f3:0b:e5:cb:14:e3:d6:d4:
                    26:cf:c4:57:63:45:dd:8c:35:6c:da:37:10:14:0d:
                    f9:72:a8:a6:bf:2d:bf:8a:79:3e:93:36:bb:60:3a:
                    96:a1:6d:86:e6:06:c1:dc:eb:0f:6d:32:9a:ab:e6:
                    3c:3b:ca:ca:d9:0e:39:ee:9d:bd:d5:7e:96:e2:7c:
                    c8:10:32:41:c4:81:7f:34:d2:4d:f6:f3:67:9c:1d:
                    e4:e2:73:fa:9b:69:61:d1:c5:42:81:00:23:a3:92:
                    cf:42:a2:fe:32:d3:ba:1c:18:a5:71:c6:67:55:c3:
                    8b:c6:53:e2:79:2a:b8:46:22:4a:34:3b:a3:17:77:
                    94:cb:b7:bf:19:ba:3c:24:98:5b:ff:f7:df:2a:0b:
                    0e:a2:e9:ea:5f:16:51:c2:72:4d:cb:80:e7:0b:65:
                    f4:fd:8e:f8:9f:79:5d:51:a8:b3:82:60:7c:0c:5b:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B1:7E:9B:B3:43:6D:C3:EA:92:B2:8C:07:55:F7:1A:A4:19:55:74
            X509v3 Authority Key Identifier:
                keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:83:33:ee:e8:98:4a:d4:e9:a8:6a:45:6e:5e:e7:01:b0:
         77:3f:d7:d5:65:5c:8c:14:5c:44:1d:18:a0:88:1d:49:90:af:
         53:14:f6:64:c2:9b:ea:a3:f7:1e:01:dc:fe:dd:23:ec:bf:45:
         05:09:32:07:3c:c9:2b:a1:8a:7b:fc:01:ba:2f:c4:0c:12:94:
         59:14:8a:19:c7:75:e3:9c:01:c1:ae:58:06:fd:d0:ac:8c:84:
         36:c3:26:e2:fa:6c:92:60:e5:9f:ec:ef:11:78:d6:00:79:a2:
         ad:36:64:87:5a:8a:f8:ed:44:b4:0e:00:ed:dd:f6:b6:d7:e3:
         70:f4:17:5b:b6:b1:40:a0:63:5b:3d:d8:cc:e7:e3:6e:58:f7:
         2f:14:45:c6:c6:72:44:2e:65:59:3d:f6:6e:48:ba:c0:ec:8f:
         0e:54:7b:ad:04:1d:83:58:3e:0b:4a:12:cc:6a:11:06:32:49:
         7f:c2:d5:68:ee:53:38:68:29:02:94:0f:e4:8c:ad:c0:3c:a0:
         7b:56:0b:a8:78:e3:59:32:c5:9a:40:31:a6:55:06:fb:a2:b4:
         86:8b:65:cd:a1:2d:68:79:a0:ac:2d:67:18:29:47:3b:73:ef:
         fd:fc:36:90:c9:92:95:02:8c:59:5a:e5:c5:23:a9:2b:4d:a9:
         f7:f8:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----