Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File:                     9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier:          PmSIxoum1yYXS4eK3QM4S5tk8HtMeOQmCMurhqMk31o=
Subject key identifier:   7F:8A:4A:63:24:66:6D:82:CC:79:F5:50:55:1A:DE:69:8D:0B:9E:51
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer:       /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial:       01962E61FE838E4EF6CA7B5DF9D817746BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: mJn3Hv8WH9n7kAAuvVacuc3fVOTcKtYGKVIuOJ3PWAA=)
                          2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fe:83:8e:4e:f6:ca:7b:5d:f9:d8:17:74:6b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=7f8a4a6324666d82cc79f550551ade698d0b9e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:ad:e4:2b:01:8a:5e:a2:5b:97:cb:b8:9e:
                    8c:23:fa:b0:5c:fe:c7:7c:de:f2:15:67:ee:2b:37:
                    23:21:f8:b7:f4:0f:15:77:a4:ee:83:ba:e4:4b:82:
                    d2:f2:52:70:4e:bb:0f:ba:5b:1d:0c:17:59:f2:0f:
                    e2:77:d8:ed:3c:e0:c8:0d:c7:f1:ea:8e:9f:89:32:
                    51:23:20:1c:49:a2:ff:58:0f:fd:07:99:c1:70:89:
                    06:d6:a5:fb:f8:34:83:33:b1:64:68:18:ca:64:11:
                    42:5e:80:2e:94:62:0f:f2:76:2c:5b:1f:08:5a:22:
                    05:f4:86:72:a9:ad:76:01:c6:ff:f6:72:d0:31:43:
                    9d:11:de:9d:d9:89:ae:b5:85:f4:7e:37:b6:b2:36:
                    54:c1:26:14:6d:3a:f5:60:a1:a6:d3:ea:f9:a8:bd:
                    73:c2:f8:ad:cc:29:e9:ed:e0:e4:27:89:ec:2a:c5:
                    f6:4c:c5:29:77:33:06:85:0b:35:ca:80:af:13:a0:
                    b2:c2:e7:fa:70:29:1f:37:71:09:38:28:a6:b6:0e:
                    6e:48:a6:3a:f5:8c:77:72:bb:cf:9b:26:a4:29:8e:
                    c7:d8:6a:80:87:d0:a7:5a:2b:a9:f0:0b:40:9e:44:
                    c6:27:5f:2b:02:94:ea:d5:fd:8a:89:fe:da:c1:e3:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:4A:63:24:66:6D:82:CC:79:F5:50:55:1A:DE:69:8D:0B:9E:51
            X509v3 Authority Key Identifier:
                keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c9:8b:81:56:32:de:95:e5:3e:b9:6d:d4:84:4c:dc:f9:ac:
         1e:b3:26:24:2e:a8:0f:93:70:aa:c4:39:b6:88:b1:a2:d9:ea:
         fa:51:cb:05:27:ea:bb:71:8c:67:ac:d7:ea:03:d5:50:dd:3b:
         af:b8:4f:e3:4b:06:1d:ea:35:fe:20:4e:ce:89:a2:29:e9:d2:
         96:ef:42:92:69:fb:6e:d3:07:a0:4d:ef:df:8a:cd:72:be:b6:
         64:57:fa:eb:2e:d2:d2:f0:63:1a:77:71:23:99:6c:47:c9:6d:
         52:25:ec:4d:61:1c:f2:ef:3e:2f:c6:c9:2a:5e:c4:f1:41:76:
         4e:78:a2:dd:21:b7:09:ca:0e:f8:6c:e3:fa:73:15:c1:ef:6d:
         c4:24:f0:0d:53:03:eb:1b:e1:da:70:26:8a:2a:9f:47:ec:97:
         44:54:be:dd:cf:6a:76:9c:88:75:04:3c:b5:e7:72:65:d7:9c:
         66:8b:d4:64:7c:e4:26:f9:69:61:87:3f:51:92:f0:52:f2:87:
         45:b6:43:17:ca:3f:6a:96:d9:c1:e7:1a:8d:8f:65:cf:72:f9:
         d3:51:bd:e2:c7:06:a7:f3:40:7d:aa:38:d2:67:06:9d:25:35:
         10:90:96:eb:28:b6:ae:7c:ac:1b:33:96:a1:ea:35:2d:6c:ce:
         5f:5f:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----