Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File:                     m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier:          UGTRrrGnCI5SKvpcNnb+TAx0NIe0GSkd8QJ+nhL0P4s=
Subject key identifier:   AB:AD:50:F5:80:83:66:93:AB:65:4E:4B:41:31:BA:AA:7D:B9:31:89
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer:       /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial:       01962E98A5ACC1A1E9C666CCAB3CA6695778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number:          0CD4
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
                          2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
                          3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: FSNWmzsI3DM4kw9lYcnEjx1ve2XJWrgg/2J7HC1ED94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a5:ac:c1:a1:e9:c6:66:cc:ab:3c:a6:69:57:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=abad50f580836693ab654e4b4131baaa7db93189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:1f:5b:86:64:31:50:1e:91:0c:18:77:3b:
                    89:c5:08:6f:a6:ed:53:5e:77:4b:bc:d8:29:b3:ac:
                    26:da:09:b0:b8:54:e8:03:b9:d4:21:3c:10:2e:4a:
                    d7:7b:9d:bc:09:f8:d6:4c:c6:96:bc:12:e2:c1:08:
                    48:eb:d1:04:55:93:5e:33:ae:a2:74:d1:9c:39:c4:
                    21:de:46:be:8e:d5:e3:db:66:f6:dd:87:b2:b4:0b:
                    1d:02:3a:fc:ea:8f:a0:74:54:48:44:45:8d:a1:59:
                    be:85:e4:b9:bf:e9:c2:d3:59:74:86:9e:22:c5:22:
                    e1:37:04:ac:56:17:4f:93:64:10:87:41:e5:49:46:
                    76:33:91:e5:54:74:cc:34:66:63:9f:a7:76:cb:60:
                    7f:11:bc:25:d3:0b:4f:76:1e:45:aa:67:f4:4e:2c:
                    94:b4:63:05:ff:95:c2:ac:5e:19:4b:8a:22:43:f4:
                    94:62:fc:41:01:6a:e3:09:77:ad:1c:96:45:03:4c:
                    cd:88:69:d1:63:88:a6:a4:08:3b:99:be:1b:56:8e:
                    d2:41:9f:29:74:86:16:33:05:e8:9d:22:9a:32:41:
                    e6:a9:ba:a7:86:e8:01:8b:88:28:ff:e0:fa:2a:f9:
                    3d:4e:96:4e:d0:5b:21:19:c4:72:d3:32:c4:28:31:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:50:F5:80:83:66:93:AB:65:4E:4B:41:31:BA:AA:7D:B9:31:89
            X509v3 Authority Key Identifier:
                keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:db:22:9f:bc:e0:e2:7e:48:21:69:57:2e:05:3f:4b:73:
         7a:cc:04:a9:a0:83:0e:8a:4b:15:9a:50:63:0c:16:04:0a:1e:
         27:17:bf:d6:a4:01:d1:70:ee:3d:68:88:af:cc:78:28:96:d4:
         3a:a4:07:9e:aa:9d:81:7d:86:de:3e:a3:69:de:91:b2:a4:ee:
         d9:19:6f:1a:ea:bb:57:4c:a9:56:90:94:11:b5:5a:4b:ad:85:
         77:7d:a7:3a:d0:10:25:60:00:fc:5a:d7:1c:58:e3:7e:78:02:
         c6:5a:69:66:16:d6:e9:c4:90:b3:84:ca:fa:46:f5:b2:d7:42:
         0d:69:6e:6c:cf:10:29:94:33:70:55:c4:48:82:b4:9f:e3:ce:
         db:7a:9c:1c:d0:91:82:b6:eb:f3:5b:5e:86:64:9b:c7:44:fc:
         c3:24:e3:3b:d4:40:2e:bc:58:5e:53:6e:8d:2c:b1:1f:44:55:
         c1:59:37:b0:49:a1:59:cd:e0:47:a1:4f:80:8c:04:33:c8:a8:
         0a:77:7e:51:c0:e0:73:1f:08:d1:a4:da:59:e1:9e:b7:ec:9e:
         ca:e1:ff:93:bf:1c:10:fa:e7:69:52:33:a3:2a:27:cf:24:8f:
         7e:ca:5a:67:71:05:37:d5:8d:d8:16:02:86:bd:08:35:1b:3b:
         35:8b:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----