Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File:                     9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier:          fVArB8RMHW8sFxvclcx2PDKA6RXOw4fyujhMZ30T19c=
Subject key identifier:   2F:7E:3F:6B:54:86:E9:78:14:E5:73:A6:F3:71:54:4B:C3:BE:A4:B6
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer:       /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial:       01962F74BE2500C953ADBAC86864ADC38458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number:          0309
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
                          2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: XrV34wWrIJl69IV1Vqkp341r1UqhJ2u4tCgzKZRWkwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:25:00:c9:53:ad:ba:c8:68:64:ad:c3:84:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=2f7e3f6b5486e97814e573a6f371544bc3bea4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:f6:25:76:2d:36:16:5a:2d:57:f4:a9:60:
                    6d:93:f1:ff:b8:f7:cf:bb:8b:70:22:a9:25:f4:3a:
                    4b:b6:1c:9b:f9:d5:06:07:48:a3:ca:ca:3c:81:8c:
                    38:ee:71:49:15:07:96:22:d8:12:a2:4c:e8:4c:78:
                    f3:89:6a:e0:ec:39:60:f2:81:48:b4:0b:ac:8e:2c:
                    bc:6f:e5:0c:8d:48:53:2a:f0:14:bc:fc:16:68:7f:
                    d8:f5:57:aa:20:9a:31:59:06:d7:ec:09:3e:09:ac:
                    62:70:c9:74:5c:46:c9:e5:96:84:84:ef:d4:05:81:
                    e1:e4:bc:3e:18:fc:d0:54:7a:07:df:09:cc:c0:92:
                    7e:c6:13:c7:19:33:d6:d7:a7:ff:e3:d0:ef:58:35:
                    99:a3:88:6a:6f:f8:d7:bc:fd:3b:95:4c:e3:ae:14:
                    78:08:6a:90:94:6c:c1:10:d8:1f:38:cf:19:29:ff:
                    28:62:c4:19:00:b6:f7:16:b9:34:42:5b:2e:06:44:
                    db:67:d7:3b:fd:e8:23:0e:b7:86:a0:e3:f0:56:50:
                    c8:f7:64:8c:59:01:fc:71:1f:9c:72:30:58:7b:e9:
                    02:a9:84:ac:e8:b4:95:4c:a9:3a:6c:11:10:8e:21:
                    c4:75:92:06:ae:d2:29:32:7f:01:fe:4d:0f:36:a6:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7E:3F:6B:54:86:E9:78:14:E5:73:A6:F3:71:54:4B:C3:BE:A4:B6
            X509v3 Authority Key Identifier:
                keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:20:24:62:0e:9b:1d:0c:a2:82:b1:86:42:97:43:b2:c0:
         65:45:0c:86:11:61:49:c4:b2:38:31:3b:88:d0:a5:3b:26:ff:
         da:38:ef:86:37:d3:9b:a2:ce:5b:9b:0c:d7:a9:c3:c4:db:5c:
         ee:0d:d7:7e:50:49:76:a8:18:15:cb:b2:bc:8e:0e:f4:8c:37:
         16:56:cb:d8:5d:85:15:e0:e4:86:e8:50:ba:7a:ba:a5:b4:67:
         d8:b9:02:a4:41:19:ad:b3:24:c3:6f:7e:7b:16:85:f1:89:f7:
         4d:ff:36:23:ac:08:f8:0c:c9:28:94:14:ab:f0:85:92:7d:7e:
         56:db:a1:d8:8f:12:da:ef:bd:eb:aa:b1:99:4f:0f:88:1d:81:
         2a:9d:e4:a3:6d:60:60:56:a4:9a:fa:4a:79:2b:05:af:b9:11:
         56:2a:0f:52:91:a9:c6:d0:ba:9e:37:4e:e9:51:4e:f1:76:52:
         31:2e:aa:87:f2:18:0e:43:06:83:b2:39:19:07:9b:45:3f:da:
         b3:60:8b:71:72:a4:92:c4:6a:04:91:4b:03:25:f0:d5:e0:af:
         cc:28:ec:56:69:c3:ac:e9:ab:a0:57:94:76:bf:9a:4a:59:fe:
         40:28:ef:a3:b6:9b:04:52:bf:f0:10:fd:13:5a:12:6a:1c:5c:
         61:9b:e1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----