Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File:                     9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier:          1l+lQC120m4z7leLeP5CozQKrPpG/rNAumeYNnr4Nko=
Subject key identifier:   61:47:46:A4:B1:2A:1B:C9:33:05:84:FB:9F:D1:CF:97:B2:B6:77:3E
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer:       /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial:       01962F74B80F28D6D264E8208E4A1914D951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: iGaSxygLHFGU4tFaTJVsuhklcA1CNnPj2ORVuBKiwCw=)
                          2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b8:0f:28:d6:d2:64:e8:20:8e:4a:19:14:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=614746a4b12a1bc9330584fb9fd1cf97b2b6773e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:95:2d:11:28:11:62:2e:6f:8e:5b:92:89:
                    8c:a6:5e:a0:41:06:77:7e:fe:1e:b0:29:dd:ec:d1:
                    56:50:87:01:be:0f:e0:3f:15:6c:cf:08:9d:6b:f6:
                    d4:eb:6e:60:a2:5b:13:63:42:5d:60:ed:e3:fc:35:
                    46:ed:80:31:65:a1:0f:d5:9a:9e:ae:b6:7c:31:08:
                    b5:89:77:a9:cd:96:70:db:e7:1c:a2:42:06:ee:a7:
                    0c:60:59:af:e3:65:41:1d:4a:d6:9e:6c:48:87:ce:
                    2a:fe:49:76:f3:22:50:0f:3b:b2:12:70:9e:90:63:
                    9a:6a:0b:40:17:cb:34:a1:18:3e:87:43:ad:b1:40:
                    53:ba:f3:b0:ee:c7:3a:bb:0e:eb:a1:1d:4a:60:cf:
                    c4:7e:de:cd:62:71:c3:87:29:89:7e:26:e2:7e:3b:
                    e4:2c:72:71:54:21:73:05:6b:c3:1a:10:4e:29:7a:
                    09:8e:9b:71:b9:ca:4b:4d:c1:94:9f:51:ca:94:81:
                    4d:a7:b3:b5:5b:43:ba:3a:6e:16:4e:f6:02:66:3c:
                    24:a4:68:ac:b6:6e:f1:60:33:26:0e:1c:63:7b:79:
                    d6:fd:c3:fb:f6:00:ec:0a:aa:93:69:d0:89:0e:ce:
                    a3:70:c7:a7:81:54:63:64:7b:45:b2:12:f0:c4:c4:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:47:46:A4:B1:2A:1B:C9:33:05:84:FB:9F:D1:CF:97:B2:B6:77:3E
            X509v3 Authority Key Identifier:
                keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:8d:34:aa:14:a2:e0:3b:5b:94:9e:8e:1b:ef:c6:b8:c2:
         b0:2e:0b:98:02:63:47:42:77:1e:4f:ab:c3:d4:3a:7c:f3:40:
         be:96:7c:22:c8:94:c9:f7:f5:7a:33:90:cc:0f:c6:33:3b:c2:
         d7:05:9d:69:54:5b:c0:48:ea:0a:0f:e9:67:99:21:be:97:3a:
         67:a3:61:a7:ba:4b:34:a6:16:d5:53:fd:eb:d8:64:4c:f1:ac:
         46:54:6e:1b:00:9e:d7:42:c7:5e:12:73:a3:9d:4b:04:82:a0:
         4f:49:8c:73:f4:8a:7f:c3:7e:8a:0e:75:82:50:e0:8a:95:d2:
         f6:2f:ec:aa:3f:98:5b:23:cf:96:96:84:94:b4:af:fa:22:6b:
         be:83:34:f3:44:cc:8b:dd:96:09:4b:bf:43:32:2d:89:84:17:
         ee:32:3e:c5:a9:45:ee:ef:64:c0:45:39:b3:e5:aa:0f:f7:e8:
         47:86:2a:01:70:92:d0:30:d8:e7:8b:31:5b:47:22:78:5a:57:
         15:7d:b8:7a:5f:d9:bc:7e:52:ba:cc:9b:12:d9:2c:9f:0c:f8:
         e3:a5:da:62:98:3c:b6:07:c8:6b:01:1a:b8:70:2e:1b:c6:38:
         19:67:49:d0:17:e7:0c:14:c6:c8:27:09:f7:7c:b5:90:d8:bb:
         48:ab:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----