Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
File:                     9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft (raw, json)
Hash identifier:          vmNKD4ZfM/ykTXOySbn5Y+BnyEubZ860l7aAQEVt2K8=
Subject key identifier:   20:AD:A9:60:4F:67:93:23:DC:5C:C8:19:FE:15:38:03:2B:AD:5B:83
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Certificate issuer:       /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial:       01962DF3E793F0AD89AD5828184393726BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
Manifest number:          0F95
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 5VpJh85q40wiF3tIcwBqbUYfHXs.roa (hash: FZq736wENvopOQrubygsWoOWFmhs6QXxNgIM0epTpuM=)
                          2: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl (hash: iAifYXyaf+X/3w7CfNb40dxteAeI0qPJfC9hm5WByqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:93:f0:ad:89:ad:58:28:18:43:93:72:6b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=20ada9604f679323dc5cc819fe1538032bad5b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:c1:0e:4a:c1:24:80:87:79:f3:d7:1a:8e:
                    71:fe:e2:fd:6c:c7:2e:32:18:31:65:00:16:a2:ef:
                    b6:69:a0:1e:d4:c5:ba:7c:6c:ce:7e:fa:9f:cc:ff:
                    26:e6:cd:d7:bf:7b:d4:c3:8e:0d:1f:c7:c1:2e:2f:
                    05:2b:0a:09:87:ea:06:cb:c5:89:4d:0c:20:3b:45:
                    d6:29:d8:f2:8c:3d:cc:30:61:01:15:e0:8d:6d:99:
                    9d:68:87:59:d6:6f:ce:61:81:46:2b:f3:aa:bd:af:
                    b7:59:b2:3d:fe:0f:22:9f:ee:80:2d:11:54:36:b3:
                    f6:3a:41:16:41:e2:18:84:45:64:fd:1d:40:99:7e:
                    09:e1:c1:6b:81:ca:09:86:41:2c:80:6d:39:d8:61:
                    38:47:e8:fb:10:cc:98:20:53:aa:92:df:a1:48:5e:
                    2c:14:b3:c8:91:e3:87:e1:c5:d3:54:ba:68:cf:e6:
                    f0:47:e3:0d:8d:89:8d:58:13:b1:ad:13:f1:c0:f7:
                    3e:49:5d:ec:ad:e0:fc:a9:a8:42:53:2c:c4:7c:2e:
                    e6:68:2b:c1:77:9c:45:3c:a5:22:96:b4:03:85:c0:
                    22:4e:25:97:e2:de:49:61:26:c3:89:d9:d2:9e:1a:
                    85:55:c9:32:a0:d6:18:57:cb:ed:27:1d:fb:7a:a5:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AD:A9:60:4F:67:93:23:DC:5C:C8:19:FE:15:38:03:2B:AD:5B:83
            X509v3 Authority Key Identifier:
                keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:d7:df:fe:6b:09:56:2f:72:bb:83:67:07:0e:05:d9:6e:
         57:56:17:97:d7:55:3e:46:77:d4:d2:01:7e:89:c6:76:46:55:
         05:57:4c:95:42:40:20:22:b9:c4:15:36:aa:1b:48:37:a0:7e:
         02:06:eb:62:94:b4:30:28:21:f3:bd:58:ab:e9:8a:23:e3:97:
         0e:7f:5a:bf:19:9b:73:59:d9:82:50:a2:21:45:23:f1:ec:63:
         1e:49:02:0c:7c:00:a0:3b:1d:ab:7f:b7:85:d1:1f:03:92:4d:
         1e:2d:57:59:eb:3f:cb:55:6b:41:b2:8d:51:08:30:4c:f4:8b:
         82:a2:47:9c:fa:e9:a6:c6:18:06:71:c1:c1:16:71:66:c8:14:
         ea:f1:7f:0b:68:b0:0a:e1:72:3a:b9:64:9b:54:1a:b9:91:3e:
         9c:23:cc:89:67:10:9d:fc:34:26:ae:e7:a8:b9:e6:7d:be:95:
         95:6e:b6:72:00:bd:1c:0e:2e:b5:48:38:87:f7:ee:5f:96:26:
         20:51:37:60:fd:43:39:9d:4b:5c:91:4c:7f:56:03:a3:82:78:
         c2:cc:83:24:33:26:59:be:be:1f:fd:fe:ce:98:08:62:38:60:
         c7:f7:77:c8:e0:53:e9:b4:c1:c6:a8:b8:3b:a8:ce:f6:a9:ae:
         8e:30:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----