Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File:                     m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier:          gqrir1dDD+jXwW1hC4nQd2aVy4mgOqceXq5LAL7RsHo=
Subject key identifier:   80:D4:B8:29:07:35:47:4D:7B:DE:63:D2:13:AA:E0:A4:A1:74:7F:41
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer:       /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial:       01962E9990D8DA462A975FE98034CE57CCE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number:          08DC
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: GEhUWu1KvfkWmnZbjpNBUrFnzJ9gBxAB01GhNDGmSaQ=)
                          2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:90:d8:da:46:2a:97:5f:e9:80:34:ce:57:cc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=80d4b8290735474d7bde63d213aae0a4a1747f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:f1:f0:8f:b9:68:ad:18:06:3d:4a:d2:54:
                    e2:86:d8:bd:3e:13:50:42:e6:0d:9d:ba:1d:6a:0e:
                    31:7f:46:9b:ad:c8:d3:a8:f0:5e:66:99:2c:72:1c:
                    38:14:d9:98:28:fa:c3:dc:26:a5:31:ca:75:bd:ce:
                    3e:b0:09:d0:01:77:20:9b:9f:45:6c:1f:d5:06:a6:
                    a0:f9:19:a3:66:46:db:5a:6b:00:bd:4d:06:b1:5a:
                    d0:89:42:de:8d:55:f9:e2:ec:65:9a:f6:4d:5a:70:
                    d3:51:03:c4:e0:f8:f4:5b:f5:d3:39:3d:37:75:76:
                    30:a0:a2:56:b8:2e:7d:4a:d1:17:0d:ba:3b:a1:f9:
                    da:9b:c5:0a:51:fe:79:ec:85:48:eb:cb:75:0c:95:
                    e0:8f:cc:e5:8b:44:0d:4d:6d:d3:ac:59:66:cf:7c:
                    3d:a3:91:cf:7c:6e:7e:9f:c2:67:2d:5c:6a:45:3a:
                    4b:e2:44:e5:6a:ce:c1:8e:f6:66:ca:62:93:58:6a:
                    e8:29:18:3a:ef:e8:7e:38:64:77:70:11:8f:1c:84:
                    c1:b2:49:6e:6f:91:32:9b:67:00:41:9e:4c:6b:a3:
                    fa:4e:05:77:cc:47:c2:05:46:5a:8b:fc:a2:9b:2f:
                    c6:ea:ec:f4:be:98:d6:a2:23:40:48:8b:d7:47:f2:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:B8:29:07:35:47:4D:7B:DE:63:D2:13:AA:E0:A4:A1:74:7F:41
            X509v3 Authority Key Identifier:
                keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:95:05:ce:9c:7b:1f:8c:f3:d6:b6:c9:aa:80:f4:26:59:3b:
         a9:a4:6c:72:6f:33:07:fe:75:db:57:da:ed:e4:02:17:75:95:
         7a:25:6c:48:8d:8f:96:3b:1c:2e:a0:dc:38:4e:bc:08:b7:29:
         b0:2f:23:c5:4b:cd:33:ad:84:d4:fb:ef:50:96:4a:05:e5:d3:
         a7:be:28:d5:e8:19:8d:2e:b9:e5:8a:fa:12:dd:ce:b6:ba:67:
         f6:aa:93:3f:40:a9:f6:de:db:20:a4:1f:52:99:b8:5c:fe:80:
         55:93:cc:e9:ec:eb:45:24:c4:e7:e9:b7:03:2d:c1:f0:31:57:
         d6:e9:46:53:8f:4c:ab:54:5a:47:14:20:a0:85:d6:ea:37:4e:
         c2:7c:92:b0:bd:c0:7f:99:ad:9f:05:ab:12:e1:e3:29:09:82:
         54:28:2c:c7:f9:ce:95:55:8f:e7:43:aa:6e:b8:4c:3e:f3:90:
         f9:ef:f1:c0:85:40:00:c3:3b:9a:f1:94:83:1a:15:fe:24:fc:
         4f:71:a6:b7:83:7d:e8:01:2a:1b:50:34:b5:13:b5:2f:a1:f4:
         c8:22:f3:18:6f:b8:63:f5:c2:c5:c0:73:87:17:68:49:07:4a:
         86:45:7f:dc:79:c6:1d:e3:0c:93:9d:43:bb:47:a6:b5:fc:9e:
         a2:b8:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----