Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File:                     my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier:          AhkCdUtIuEshned1Ib4wkAMa1kOwfgk7x6J4W0F3hP8=
Subject key identifier:   A6:40:E7:7D:34:04:FC:7B:FD:FB:2E:95:C1:DD:EA:B1:C5:7A:D5:22
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer:       /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial:       01962E9917C7C4D74E545C2C3996AC91FC76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number:          0C9B
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: 0mwho/PO3gRX+w3h9+tAV2EpoWNZ/PkzTycQpV/jpSM=)
                          2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:17:c7:c4:d7:4e:54:5c:2c:39:96:ac:91:fc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=a640e77d3404fc7bfdfb2e95c1ddeab1c57ad522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:ad:86:bd:a7:e1:eb:83:e5:11:bb:c1:27:
                    92:56:4e:d5:ce:88:a0:3a:b3:5e:81:be:7c:e2:c0:
                    3a:a4:b3:07:be:b1:f8:10:a9:5e:c0:16:ec:ab:b9:
                    df:2a:43:67:bd:3f:77:a8:e0:bb:ee:4f:47:74:2a:
                    af:15:ef:be:d9:05:fd:dc:39:65:d5:6e:f7:6b:92:
                    01:e2:d6:48:06:0c:70:2a:06:bd:82:75:2a:2c:34:
                    cb:b6:4c:0b:06:d4:6f:05:39:ff:25:99:bf:c8:ae:
                    9a:34:3d:c3:66:72:1e:b5:7b:cf:f0:2e:27:6e:10:
                    45:de:d8:c8:4f:bc:e8:81:70:9a:ab:a2:e7:da:7f:
                    3e:b6:25:1c:aa:90:71:56:17:ba:59:25:64:b0:c2:
                    21:d6:f0:2a:ac:2d:d6:d7:fa:82:4a:88:8c:fd:66:
                    c6:eb:eb:9c:31:2d:cd:06:bf:dc:8c:12:9a:0b:ab:
                    80:63:4c:b1:14:74:22:1c:0a:df:20:2d:59:3f:91:
                    dc:45:5a:fc:a0:33:c5:ee:ce:04:51:95:34:47:d6:
                    52:29:12:bd:b5:61:7c:b7:02:98:82:39:4b:1f:6d:
                    b2:27:f2:0b:a0:fc:da:9e:16:c4:74:65:e6:23:5a:
                    f4:11:9d:20:37:90:91:09:fd:ec:a4:74:c4:b7:1c:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:40:E7:7D:34:04:FC:7B:FD:FB:2E:95:C1:DD:EA:B1:C5:7A:D5:22
            X509v3 Authority Key Identifier:
                keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7b:e0:a6:00:29:68:00:43:10:2f:df:c0:82:52:a9:01:7d:
         7c:39:86:50:d5:70:7e:71:cd:1b:40:dc:85:0e:a5:05:5c:61:
         6c:9d:c8:55:6b:bd:98:e1:8b:6c:50:40:c2:c0:99:b9:85:8b:
         b2:c5:be:a9:e9:66:5a:b3:7e:e2:69:03:ae:30:de:31:0e:31:
         02:8d:62:27:e2:ee:37:98:16:39:7f:73:66:5f:52:d5:4d:a9:
         57:bb:eb:36:51:73:df:21:6f:ec:fa:f6:e2:be:c2:b9:81:dc:
         1e:03:a8:44:12:fc:6f:4b:40:17:13:45:c3:ba:2a:cc:88:22:
         cd:e5:bc:f8:cd:d4:43:b5:e2:1d:af:4b:8b:8e:3f:ef:22:1e:
         ee:f0:2f:73:55:18:97:66:52:33:65:b0:1b:10:6d:cc:b6:99:
         54:71:36:f2:ed:98:c0:62:09:18:77:7c:b4:ef:94:f1:09:35:
         4f:2c:3a:bd:18:d6:20:7b:02:b4:e2:2c:ba:dd:38:16:bf:f0:
         ca:35:ea:4a:5d:cd:57:14:e9:47:38:22:27:15:cb:ca:67:2b:
         ab:f7:76:db:15:3c:e0:24:f3:36:8a:8f:c3:64:6d:a2:34:76:
         ce:b7:d3:ee:2e:70:13:6b:bc:d2:cb:d5:c6:dd:5d:33:e2:40:
         91:8c:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----