Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
File:                     Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json)
Hash identifier:          t2OJY9VEn0JZ+7cUh2d0Q6fI8BQLzm4baLbv4gyfTwY=
Subject key identifier:   F6:31:10:30:95:01:43:F1:D9:44:F2:A9:D7:D8:5B:0F:15:D4:57:1B
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Certificate issuer:       /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial:       01962F7462E7D3628BF23D0563FE192D9844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
Manifest number:          09B5
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 2HCBJIX5AwlQw5itkpbxu-ijjmk.roa (hash: PvO3JA7EOrGZaCXFQBX1/p9bbO95IhgeMuSkTUD055k=)
                          2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: +8/oQ9LfoSRiM2WPIwPjKWKBFqs6KSahDlUflNmaf2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:62:e7:d3:62:8b:f2:3d:05:63:fe:19:2d:98:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=f6311030950143f1d944f2a9d7d85b0f15d4571b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ae:7b:da:1d:40:42:b2:08:3e:fb:eb:ff:65:
                    0e:1f:0d:d9:b6:0d:d0:a6:d1:ee:4e:63:d7:57:32:
                    09:e0:b4:7c:b1:c9:32:f5:79:4b:6b:a4:96:09:15:
                    4f:c6:07:1c:7c:b3:39:a2:38:11:02:ab:92:1d:16:
                    5f:21:a3:b0:2b:bc:61:eb:5c:54:cf:e2:6d:ae:61:
                    5c:3f:5b:e1:da:20:22:11:71:a3:61:4a:25:f3:7e:
                    ae:fd:2d:da:c8:18:df:a4:a3:43:e3:0c:d3:09:3d:
                    b8:13:ae:ce:d4:2f:48:d4:79:ae:6f:7c:af:64:d4:
                    87:2c:89:3a:8c:64:ca:40:95:e8:cb:e7:74:02:c6:
                    e5:82:70:1f:38:e2:eb:6d:b0:4e:54:53:22:42:2c:
                    d9:5d:94:ec:08:47:f9:f8:6d:da:67:69:08:45:0c:
                    61:9b:bb:66:ce:55:07:63:9a:9b:9b:85:3a:de:5e:
                    54:42:49:3b:9a:e7:46:b1:8a:7d:55:9c:59:83:79:
                    69:a6:38:e8:02:44:36:e2:0a:b0:3d:f6:26:0f:89:
                    34:a3:d5:1f:1d:e2:34:11:49:4e:30:6b:6b:af:65:
                    37:c2:ab:92:d2:71:5e:6e:a5:35:f9:58:68:18:fc:
                    dc:55:9e:5e:52:e5:43:e1:5f:90:9c:e7:50:32:50:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:10:30:95:01:43:F1:D9:44:F2:A9:D7:D8:5B:0F:15:D4:57:1B
            X509v3 Authority Key Identifier:
                keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:c0:a7:d1:7c:7a:1e:84:52:4f:5d:df:4e:90:9b:93:90:
         51:f8:d5:a7:dd:cc:9e:0b:9f:8f:8e:60:b6:33:32:8a:2e:c5:
         04:ce:f3:8f:79:f1:eb:af:b7:aa:0d:08:0a:93:fe:19:4a:6b:
         3b:0d:f7:ad:16:a0:f7:c3:da:3c:13:2a:42:90:15:9a:3f:64:
         e0:60:b9:37:a7:e3:85:ef:aa:d2:b8:61:df:65:9b:d3:61:3c:
         07:7c:17:65:a3:ad:ab:8c:03:aa:78:50:76:48:14:57:ee:2e:
         ae:7a:42:f7:4d:3e:3a:ac:9a:61:e0:45:d0:1b:75:71:ad:0c:
         6d:d0:b2:db:91:7d:68:4b:19:0d:b5:2e:24:25:80:2e:0c:2e:
         ee:4f:2f:81:fa:48:9e:bd:78:b4:77:f5:d1:35:07:74:0e:5c:
         80:62:31:a8:cb:7b:b4:d7:46:12:a0:38:9d:ca:ca:65:79:e3:
         00:8b:27:cf:13:dd:6f:e6:09:a6:53:44:02:bd:3a:93:bd:fe:
         71:46:b2:b4:76:85:1f:c3:20:98:33:b1:72:e7:77:fe:f7:e7:
         18:ed:73:0e:64:e7:e8:b0:1f:98:63:be:10:c9:9e:9f:ff:b6:
         c8:c2:50:8c:b2:17:11:64:cc:ac:df:e6:bd:2a:9a:c6:d1:58:
         98:fa:a0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----