Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File:                     C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier:          d1qtf//Gkiz6wSW4RtQcn9fmYsQEuY1M9pJBHrllfOk=
Subject key identifier:   48:2C:CF:05:E5:E6:A1:2F:91:2C:16:7B:D1:46:B1:D7:7E:CA:5B:D5
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer:       /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial:       01962FAB169085D3D57AD865DC480FE14AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number:          010D
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: 2Bi6gA1ybG2QqLpJwCnNAC+YJdlZP8vtQ4t5nntBkjY=)
                          2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:90:85:d3:d5:7a:d8:65:dc:48:0f:e1:4a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=482ccf05e5e6a12f912c167bd146b1d77eca5bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:2a:cb:71:95:e6:e4:2d:5f:c4:77:03:59:
                    f5:01:83:b9:f2:6a:03:64:b9:6c:48:76:0c:c2:03:
                    4e:24:ce:60:08:a0:28:e4:18:f4:ad:ae:68:a5:02:
                    e5:14:51:0d:1e:c6:f6:17:51:ee:83:b3:d4:4e:b8:
                    30:36:84:fe:40:d9:ca:3b:be:5e:e0:6c:48:85:f4:
                    9d:cc:27:f1:85:21:42:9b:a1:6b:f1:0b:68:8b:b9:
                    d9:d7:44:78:95:e6:58:6c:18:0d:01:19:c0:42:0b:
                    17:33:11:99:e5:37:b8:4a:2f:af:ab:77:fb:3f:08:
                    bd:9a:d2:34:73:88:6a:99:65:e2:e6:19:8e:6a:1a:
                    95:68:4f:42:93:94:d4:17:14:89:a5:c3:7d:5f:6d:
                    81:1f:0b:49:52:7f:60:a6:28:f0:d6:21:a2:96:5d:
                    c7:26:63:6a:cd:91:61:9f:08:12:66:76:ae:21:4b:
                    1a:b4:98:6d:1d:27:1c:19:88:59:84:97:b7:45:e1:
                    0c:61:c9:83:cb:db:d0:31:2b:4a:c9:c2:6e:8c:f9:
                    af:fe:b1:55:df:f0:c3:39:1d:3d:a3:c5:9c:15:43:
                    ba:de:10:8d:d1:a7:d3:cd:22:ed:58:5c:48:da:00:
                    16:ca:85:d6:a6:ce:81:3e:17:2b:58:76:a2:f4:60:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:CF:05:E5:E6:A1:2F:91:2C:16:7B:D1:46:B1:D7:7E:CA:5B:D5
            X509v3 Authority Key Identifier:
                keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0c:40:dc:b1:49:d3:fa:18:62:7f:6c:45:a7:f2:e6:d7:59:
         4d:8d:3a:b6:bd:dc:a2:27:64:a5:1a:0b:32:53:a0:b0:fd:d6:
         a7:f6:3d:2a:c6:50:80:d4:43:bd:db:ea:f0:89:7e:d7:fc:18:
         33:aa:c8:80:9d:37:da:e3:a5:a7:c6:ad:7e:47:d0:09:d8:27:
         76:2d:02:b8:15:03:90:d0:f4:81:62:bd:f7:8f:b4:e6:72:ca:
         10:5b:4c:d9:d3:0c:a4:c0:c3:b0:0c:92:45:b5:30:9c:90:28:
         72:33:20:17:51:61:29:84:37:ba:45:64:0d:73:63:20:6c:ae:
         80:66:64:dc:54:cc:3d:9c:04:c6:44:fa:3b:fb:ac:97:95:bc:
         97:94:fa:b9:f9:12:c2:a3:d3:35:7d:a0:21:b2:25:87:1b:0b:
         6e:ea:f6:89:fc:3e:70:2e:e3:e3:69:a2:80:84:da:13:2b:61:
         9f:17:a0:5e:a4:82:24:7c:46:89:16:18:11:1e:0a:74:02:9a:
         5d:0d:02:47:d2:3c:c4:68:f9:ba:8a:02:48:39:a6:be:a5:e7:
         41:29:41:c0:e8:ce:e3:10:c3:ea:c2:35:34:6a:54:a9:e2:d0:
         05:9d:21:4c:f2:0c:2f:91:cb:cc:20:6d:24:d2:ac:32:4d:7a:
         49:d1:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----