Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File:                     9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier:          OB837c+MsG+7E3QwxTRA3w2Wxcd+PAbJYO3+ucw0Ouo=
Subject key identifier:   8F:23:C2:A9:A1:6E:96:38:F4:1F:42:76:B3:B2:EB:D8:D7:45:2E:E7
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       01962F7460A7DA1E773F935D2D626BA60EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa (hash: nQJrfkgs7cckEJG4TEbt+aYboyegrJmZ5zK0surmR+g=)
                          2: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: u/AN+shHByrB+wU5KDk6ym+jFQfzCa/4L7VroXcH2tk=)
                          3: NWP0IwrsmeCD_LX1vnrNRfFM-Ps.roa (hash: frDpd28rGb7Kt7uuvCaUyJ/SYpuV4hdCfRDMb41mRas=)
                          4: Yd5r_QEQ97UxrSiXvR8HMw_XBtc.roa (hash: 4WQg20bCRgaZBVClPe/ndX9hPwZNZeu+B3wqx3iNyco=)
                          5: Z4ff2msRKcb6YMtm9rlrjleZxQM.roa (hash: R/U2SPlro8qocLQcB9G60tY7YkY0sJXo2Wic6VrrpPw=)
                          6: nUyrqanjlTLxlBHi8dA8EfDXG_4.roa (hash: IGX6m5AICiLUdK/bf7JmXZQVlw2S3FFwzl3O59Z1d3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:a7:da:1e:77:3f:93:5d:2d:62:6b:a6:0e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=8f23c2a9a16e9638f41f4276b3b2ebd8d7452ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:14:76:11:88:8a:51:b0:33:cd:00:f3:ad:
                    08:04:2f:2f:9b:af:93:0e:1e:3e:d8:10:d4:ad:64:
                    cd:4d:1a:c2:89:00:08:08:48:7b:1d:bc:13:78:87:
                    ba:a8:68:78:0c:30:ef:60:c3:40:a4:57:f2:60:4c:
                    9b:8f:00:12:a1:20:2a:a7:5a:f5:74:6d:8e:cc:63:
                    2e:c6:1e:c2:2b:a8:55:44:8d:4e:86:8d:0d:f3:e9:
                    08:a9:09:bb:b8:8c:84:a8:c9:47:39:ab:77:19:43:
                    6b:a3:8b:a6:21:d6:18:17:c0:c1:51:58:4b:ce:47:
                    6b:9d:e3:8b:3d:08:bd:e2:c8:ff:0d:50:e8:d9:f4:
                    50:a5:39:4e:57:42:42:4e:6c:a2:1c:bc:86:de:15:
                    6e:6a:e5:05:7f:43:cc:3f:6c:5d:7c:f5:f7:fd:f9:
                    9b:3d:b7:0e:07:15:cc:e7:40:fb:fb:40:c1:1d:77:
                    b8:f7:8e:bd:ea:a3:45:5f:2f:10:f8:82:81:4a:ad:
                    b2:9a:e9:e1:80:47:06:a0:b5:fb:d5:e8:dc:05:e7:
                    d0:96:be:2a:2f:c5:c4:da:01:46:f2:3f:13:bb:28:
                    79:00:53:64:3e:0e:52:0d:2f:0a:c3:4f:0e:1e:05:
                    8d:cf:ee:8f:4d:0e:92:c4:40:15:73:a0:2e:ed:b6:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:23:C2:A9:A1:6E:96:38:F4:1F:42:76:B3:B2:EB:D8:D7:45:2E:E7
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:a9:57:e6:2f:f5:77:49:3a:01:f7:e8:69:1d:14:75:f6:
         78:4c:9b:4f:d8:04:aa:b2:8c:7a:dd:be:70:25:53:b1:bd:57:
         ab:41:8f:bc:af:7d:f2:fd:60:4b:0d:ed:20:a8:6f:23:e1:33:
         28:d5:c4:b1:94:9b:c1:e4:6e:77:26:65:f7:e0:b5:1f:1b:e7:
         0c:1a:ad:8b:18:a1:e6:18:f8:8f:4f:1c:ca:5d:fc:e8:df:ec:
         58:ec:64:a0:36:f1:13:ca:5f:3b:0f:a2:56:f4:b8:43:32:64:
         b5:0a:1f:e5:36:9f:35:42:4e:05:45:72:45:b8:40:e8:6c:aa:
         d4:ad:99:57:0b:84:03:e9:ef:b0:ca:13:5d:21:36:32:c3:cf:
         2b:a2:b9:e0:cf:41:ec:4f:2c:32:d9:92:83:da:9e:9a:e0:e2:
         7a:1f:79:86:61:2a:a7:f3:35:95:a1:c9:4a:63:cf:5f:df:4b:
         79:9e:86:68:c8:d4:00:54:4f:d8:bf:f6:b7:17:7a:60:25:8f:
         df:55:dc:c0:ec:95:e0:3d:2f:f7:78:ff:34:58:2d:09:e8:ef:
         1d:eb:50:16:fa:16:b0:9d:5a:97:a0:4c:78:4f:ba:7c:44:b6:
         22:0e:93:5b:c1:c9:15:6b:53:61:0e:1b:c4:b7:7f:bc:91:25:
         2c:8f:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----