Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
File:                     9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json)
Hash identifier:          +K1aftG6oZOKhYGlxK69nKjVcvuVez4aFHpW3F20+KA=
Subject key identifier:   9B:35:39:B8:5E:A8:E2:35:E3:AB:8F:4D:83:47:FF:2E:FE:0B:80:FD
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Certificate issuer:       /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial:       01962E99A7AFD752CCB1F0DC12C953F1F86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
Manifest number:          11D5
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: 7HvIX7fCTI2gbjc-7RnxufJl1mA.roa (hash: NWw/MjwkOB9Lahk4UnTOA4UYmqTEetLTZcrDtU3BUtM=)
                          2: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: QeebXNukTjl41Rl+XYqNK7Tq8BOV3J+RbLwzmkmwQQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a7:af:d7:52:cc:b1:f0:dc:12:c9:53:f1:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=9b3539b85ea8e235e3ab8f4d8347ff2efe0b80fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:f5:d0:af:c4:52:7b:01:18:84:71:da:c7:
                    af:6e:b8:12:d3:cb:c3:2d:eb:29:e4:bf:06:b8:0d:
                    69:ad:a4:ca:89:de:fd:f3:dc:71:e4:d4:62:0c:b2:
                    9d:ed:75:37:45:58:c5:91:d9:22:03:bc:f5:8e:3f:
                    ea:0a:c5:56:7f:ab:95:db:de:bd:89:be:2b:2a:f0:
                    52:d0:ea:5c:ae:a8:e1:f0:e1:57:09:d7:5d:16:de:
                    6b:81:e7:7b:a4:86:35:57:29:ee:51:1c:b6:ad:d8:
                    13:41:e8:06:94:d3:23:a0:05:e0:81:6d:f8:e7:24:
                    4a:b5:c2:98:44:2c:88:1c:2d:17:39:17:25:29:68:
                    3b:7a:7d:da:68:05:60:53:99:6d:e4:75:31:02:67:
                    45:5c:3e:04:d5:f3:ed:54:00:ce:b4:93:29:4b:d1:
                    09:4b:cb:70:05:a3:66:14:6f:a4:46:f7:3f:4c:56:
                    71:1b:68:48:ff:4f:27:24:6a:6d:de:da:31:f0:98:
                    99:13:ee:dd:cd:98:10:68:f9:8c:fa:74:80:60:f1:
                    dc:4e:06:2f:b7:10:6f:79:a8:b4:4a:45:f5:07:14:
                    2e:7c:f5:f6:65:69:f7:a0:a0:ec:19:91:17:0e:e3:
                    56:d1:43:95:2a:ec:00:1a:f1:96:0f:fd:c9:de:8e:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:35:39:B8:5E:A8:E2:35:E3:AB:8F:4D:83:47:FF:2E:FE:0B:80:FD
            X509v3 Authority Key Identifier:
                keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:de:29:bf:ab:6c:8d:42:2e:a6:91:f2:84:64:6b:96:48:
         81:48:3b:65:39:b5:8b:31:ed:2d:1e:e0:3a:9b:6f:04:bc:ba:
         ab:cc:4b:8d:32:6d:15:0f:16:98:08:50:d5:57:2c:8c:ce:6d:
         fd:bf:dc:2c:bd:22:17:43:89:3e:a1:3a:aa:ae:59:74:57:41:
         bc:0d:19:dd:19:1a:44:95:79:4e:90:8d:cb:83:28:9b:3e:8c:
         4b:aa:36:61:8a:1a:f5:ea:5a:12:7a:25:4f:d3:99:d0:13:7a:
         d4:12:95:82:4d:50:06:1f:e9:88:29:53:69:ca:c7:4e:49:fc:
         9e:23:8d:6d:60:fd:1f:a0:01:09:e1:e9:9e:5e:44:b9:60:ac:
         12:05:bb:8e:4d:18:59:7d:69:d7:59:cd:43:98:9e:92:cc:c2:
         c3:70:ad:ad:1e:75:7a:9c:61:07:14:0b:0b:c2:0e:1c:a8:18:
         52:2e:b5:ff:ce:8c:3a:11:ae:b2:dd:b2:67:ce:3e:28:27:c7:
         18:e9:e1:f9:97:8d:a9:ee:ac:31:f6:c2:9b:6f:41:bc:11:bb:
         0b:b0:a5:b9:c0:b9:24:56:12:24:bb:20:d9:3d:c8:02:28:04:
         c6:0b:06:09:c1:86:26:c2:67:40:1a:7d:78:ab:df:ec:d8:e5:
         4f:34:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----