Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File:                     HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier:          x5bqjLNYTqE0B17WD4PN8TIHBFlw3wMQEFRZsNk/tsI=
Subject key identifier:   6E:9F:63:CE:51:4C:D9:CB:F0:A6:AE:64:38:2B:97:DE:AB:FE:AC:D1
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer:       /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial:       01962DF41A05522177E655700246C404B820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number:          9E
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
                          2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: vzdJq+It9n0wUOBC6bHDypWuMnpnFilkOnd9fPSFQF8=)
                          3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1a:05:52:21:77:e6:55:70:02:46:c4:04:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=6e9f63ce514cd9cbf0a6ae64382b97deabfeacd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:63:ed:10:8a:3a:bf:6d:63:06:22:ed:cc:
                    85:fe:bf:bb:77:eb:84:f7:f4:6c:b7:41:57:b3:06:
                    57:5e:c8:a0:75:57:68:21:f9:92:5a:ab:65:f7:fb:
                    32:b1:98:48:d4:97:7e:62:63:8c:df:8d:95:12:42:
                    d9:5d:47:51:a2:ed:79:22:9d:f5:a9:cc:24:6f:b9:
                    25:be:33:7c:24:42:7a:e1:1d:c0:8f:61:a0:83:f7:
                    2d:66:01:1d:75:a3:8f:86:89:3d:f8:63:fe:42:07:
                    a3:63:73:52:12:db:21:d3:34:d7:1d:2f:df:a8:22:
                    46:da:da:e3:43:3b:5d:d3:66:63:a1:f7:b9:83:a3:
                    47:1b:1f:d7:6b:83:00:b7:32:47:4d:6f:13:07:f5:
                    c4:6c:a7:e7:1d:a8:81:4d:9d:f7:dd:bc:3d:02:b9:
                    51:3d:44:00:8c:d6:de:0c:55:9f:a1:66:ef:48:79:
                    14:eb:73:ae:c1:17:05:29:84:a7:b7:bb:5e:21:8d:
                    60:74:ec:83:5e:38:24:6c:3c:4f:a4:b7:6d:27:72:
                    4b:b0:2e:a3:ad:f0:0d:1b:1a:60:54:80:06:82:55:
                    f6:53:9f:4d:67:ba:03:1e:06:15:07:ac:ab:76:b5:
                    2c:7c:77:f0:f5:44:f5:ea:30:fc:86:03:6b:ec:e8:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:63:CE:51:4C:D9:CB:F0:A6:AE:64:38:2B:97:DE:AB:FE:AC:D1
            X509v3 Authority Key Identifier:
                keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3f:3f:77:ca:f2:d4:c9:b3:5a:ec:43:fe:22:6d:fa:72:4c:
         57:ad:c7:01:49:f2:2d:dc:5b:fb:cd:e5:1f:2f:6f:5f:bb:38:
         bc:ee:de:04:ff:be:16:ec:4a:56:a5:7d:44:cc:41:08:e6:e1:
         6d:9f:f8:df:cc:32:9a:32:f5:5a:50:01:fa:38:13:b9:5f:a9:
         7b:36:b7:d2:64:a6:0c:4f:91:3a:dc:d2:12:33:cf:a8:93:02:
         7a:73:7e:14:94:7a:ce:f2:6d:14:87:4d:c6:10:74:72:d3:45:
         f6:17:86:46:ff:c1:62:13:e0:b0:fe:7b:92:4f:93:2d:f3:aa:
         a4:cc:07:0a:27:ac:3b:3e:88:40:08:28:c6:73:58:10:26:aa:
         99:df:9f:cb:6b:a5:5f:ef:8e:8f:c5:09:56:89:75:a2:7f:56:
         f1:43:59:ae:96:3a:28:80:91:d1:fc:74:ab:e6:97:46:b9:67:
         c9:a8:f0:4a:5e:1c:c9:bf:7d:41:91:f8:d4:25:98:1e:34:dc:
         58:48:7e:21:7b:3c:77:2a:c7:99:ab:38:33:c7:b3:d9:64:43:
         8e:1d:ee:ae:27:64:4c:b2:a8:e2:77:96:e4:d3:65:ca:26:a3:
         4d:fd:6e:d1:d0:85:17:df:23:21:5b:98:7b:a6:8b:92:59:af:
         52:cc:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----