Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File:                     9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier:          DUJmIrcTdiSjjUoRYv+r86WteccO8qWunTmoHJB2b08=
Subject key identifier:   8D:9D:EF:80:6B:EE:E0:86:60:63:64:0D:95:C7:0B:45:10:E1:0F:DE
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer:       /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial:       01962F3DD342110CF6093C80880F5BF1DC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: nOqFSPBr1ihJWh44OoVNSTkRI+IB8f1TW7SNFXU0wrE=)
                          2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d3:42:11:0c:f6:09:3c:80:88:0f:5b:f1:dc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=8d9def806beee0866063640d95c70b4510e10fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:ef:b8:cd:87:5f:94:ff:80:7f:2a:8c:be:
                    f8:b2:be:a2:94:02:9a:fb:9d:15:43:87:ce:2e:df:
                    68:79:18:18:1d:fd:8f:0b:30:e8:95:e3:4b:69:87:
                    f6:70:42:57:85:cc:43:82:ef:ac:33:44:d1:95:76:
                    1b:af:67:75:01:c1:4e:c9:5f:5e:da:b4:16:ac:4d:
                    53:65:43:70:c7:6c:0f:0e:1e:1a:39:93:bd:94:22:
                    60:14:97:2b:b7:4e:74:f3:52:c9:c3:df:d8:e9:89:
                    9a:99:81:84:77:aa:bf:9a:ac:99:9d:30:02:18:85:
                    83:39:da:aa:4f:b5:21:fd:73:9c:66:10:e6:8f:87:
                    e1:07:c3:5f:99:51:7d:d5:74:54:49:98:76:32:f8:
                    ac:c5:ad:c3:87:fa:c8:d0:f3:71:13:28:b9:e2:6b:
                    56:d9:9b:f0:2d:7c:e4:c7:c0:28:28:8c:c5:79:4f:
                    c2:e5:2e:33:1e:c1:f6:f1:4b:b2:c0:0e:10:7a:bf:
                    d1:df:f8:84:9d:30:19:f0:f6:ac:a7:fb:04:07:e3:
                    72:82:62:06:f9:02:e3:a6:e2:2e:fa:42:33:02:14:
                    b4:62:d0:f8:f5:b1:63:21:a8:34:49:d3:2a:ed:53:
                    ca:22:7f:50:90:c3:38:0f:0a:10:e6:8a:05:67:51:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9D:EF:80:6B:EE:E0:86:60:63:64:0D:95:C7:0B:45:10:E1:0F:DE
            X509v3 Authority Key Identifier:
                keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:16:93:50:8f:5d:a7:04:d0:6b:3c:ad:f8:d0:c7:be:80:04:
         19:3e:f1:8f:64:d3:2c:f9:ab:f5:da:4f:30:df:63:e1:a7:bc:
         2e:e0:6d:41:8d:bb:89:e6:f0:02:20:70:35:ae:8a:18:51:73:
         74:bb:b4:be:73:3f:64:85:eb:80:1a:41:32:24:17:33:a7:b1:
         47:ee:92:c6:af:e8:0c:1d:61:7e:61:8e:bc:c6:e0:6a:ff:98:
         bd:10:27:53:8e:97:09:5b:1e:d8:1d:41:c9:42:d4:4e:c7:9d:
         4a:cd:2c:b7:0c:3b:4f:23:12:0c:af:53:89:88:c5:87:d6:26:
         2c:e1:94:f1:e8:43:50:6c:06:1b:97:3c:18:91:e7:45:2b:cb:
         83:2b:bf:de:04:04:be:e3:bf:a6:44:e7:d3:23:17:48:d9:66:
         e2:4c:d7:7f:03:5b:f4:0d:6d:9d:10:f5:b7:04:2c:bb:bf:05:
         62:da:e8:1a:ae:6d:dd:9d:9e:99:63:42:8d:a1:69:77:e0:cf:
         de:5c:28:e8:ef:3b:a6:79:b6:f5:f0:6c:ae:48:c1:8b:9b:6a:
         63:39:d0:98:5f:69:d3:81:c7:7e:7d:aa:56:44:1c:31:3f:8f:
         9f:99:16:f3:c7:cb:3d:65:e7:d5:bb:71:53:dd:f2:67:6c:76:
         e5:1e:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----