Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File:                     4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier:          zptQAIAAf5ge4baxOyZcI0HUiEGCFlYQZ968b8mElqs=
Subject key identifier:   B1:F3:99:9B:9B:B2:0F:BD:91:48:72:D6:92:CA:A5:16:09:60:BA:22
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer:       /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial:       01962F3D6EF9CB556DFEFE04FD9D4BE0A451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number:          09FD
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: cUL96P0aLilWJsFbt5gtTqUd/95vV+litKQnbrFkUS4=)
                          2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:f9:cb:55:6d:fe:fe:04:fd:9d:4b:e0:a4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=b1f3999b9bb20fbd914872d692caa5160960ba22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:7a:0d:fc:bc:25:02:a8:60:3c:52:e0:dc:
                    08:c1:89:21:77:7a:e1:cf:9a:14:97:c6:d7:c5:cd:
                    9b:9f:68:6c:3f:3f:f9:2b:ef:53:2d:3c:28:ee:8f:
                    96:29:a3:d5:46:b8:6e:e4:ca:36:2b:71:90:1d:6f:
                    a6:c7:3d:5b:ec:29:1d:05:9f:a2:b3:22:cf:ca:e8:
                    59:26:64:45:7e:68:1d:13:da:b5:78:f8:10:99:23:
                    c1:5a:9c:75:4f:77:ed:6c:84:44:ad:94:16:d1:70:
                    0d:85:a5:ae:b3:35:94:7d:f1:b3:36:a6:7e:a3:18:
                    62:e6:bf:52:94:55:1f:99:2f:a2:48:bb:13:83:e7:
                    2f:4e:c9:f1:e7:a3:37:39:16:25:54:cb:66:ec:07:
                    0f:65:1c:7e:76:eb:53:7c:2e:38:74:ea:94:0f:02:
                    0e:26:26:dd:ed:68:22:bd:90:75:8b:fe:f7:ca:a5:
                    99:10:d2:d4:a6:19:d0:9f:18:99:bc:9c:91:78:28:
                    13:22:d6:a7:81:d5:ea:d1:1b:d8:dc:d6:cc:44:36:
                    29:4a:0d:e3:4e:93:07:38:57:e4:e5:fd:59:dd:9a:
                    d6:a1:32:50:31:8a:07:98:a1:c9:cc:d0:20:ae:9a:
                    e6:df:be:2f:3b:3c:1b:ff:b2:78:99:e5:7b:44:04:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F3:99:9B:9B:B2:0F:BD:91:48:72:D6:92:CA:A5:16:09:60:BA:22
            X509v3 Authority Key Identifier:
                keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:be:94:40:b5:5c:37:90:fd:ad:f1:eb:b7:c6:a9:76:99:
         05:a1:77:e6:70:6b:c3:5a:cb:bb:77:83:f6:26:35:eb:de:b6:
         56:91:08:fd:b7:52:b0:07:f4:32:27:91:51:dd:3d:53:c2:d3:
         d4:2d:9b:12:da:b9:e8:30:39:ea:4c:79:83:c3:f5:00:e6:e7:
         59:2e:7e:9d:d2:c0:7e:05:83:42:10:30:da:88:f0:fc:e2:5a:
         c6:cc:0c:77:a0:db:76:1a:52:6e:19:95:12:eb:10:89:b5:8e:
         38:f5:9d:b5:76:b4:26:c3:94:30:1c:40:01:c6:52:67:80:d9:
         2a:34:d2:02:06:57:aa:8b:a2:96:b8:d5:2f:7f:af:c1:08:56:
         24:50:76:94:a2:bc:b9:8c:33:06:3e:a0:86:21:7c:04:3d:b2:
         9f:38:bc:a4:09:cc:eb:c6:15:ab:2f:f3:25:50:9c:ce:82:3b:
         b9:7f:b5:d1:d7:ea:f6:22:b5:7e:00:ba:da:b1:d6:04:85:9a:
         89:58:28:29:6a:2e:ab:f6:a7:c4:1d:72:d9:47:b7:ff:82:17:
         31:6e:bb:53:e2:3d:fe:3a:df:74:25:0c:9c:92:b2:97:d7:d3:
         2a:95:b3:2e:6e:cb:ed:22:ad:1d:8d:ee:cd:a9:55:c9:19:a6:
         db:fb:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----