Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File:                     E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier:          o0YNNLHTH7DGWsTlQRHEbpKPeUhx/QfkI+z7Wl36ET0=
Subject key identifier:   9F:31:9E:F6:4A:86:2C:16:CA:6F:AE:3B:FF:57:3F:31:C1:2C:83:38
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer:       /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial:       01962F0693CD50205588737503D2132D4719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
                          2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: OX1BPDVHLc1C+iwhn+HqwI5CPhlA3Sehnvkt8S0RZY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:cd:50:20:55:88:73:75:03:d2:13:2d:47:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=9f319ef64a862c16ca6fae3bff573f31c12c8338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:35:5a:73:ee:f5:50:b6:d7:c7:81:f7:2a:
                    0f:59:e5:fc:96:e2:f0:fd:24:9e:1d:9b:53:fa:21:
                    89:d0:61:35:2a:9e:18:14:34:e1:ea:d8:5b:d5:e4:
                    cb:6a:73:36:b0:c5:83:97:1d:45:46:b0:48:1f:75:
                    79:0a:42:df:2f:ac:2f:21:1a:33:2f:96:15:df:ea:
                    75:d6:a3:ee:76:6c:84:2e:bd:31:4e:c0:e6:08:4e:
                    4c:83:ee:54:fb:cc:2c:88:07:db:f8:43:bc:b6:63:
                    26:18:89:5c:6c:6c:38:ff:59:a8:ff:14:5d:10:85:
                    a3:1f:f9:0f:e9:79:6b:bb:04:c3:04:3e:a2:93:b1:
                    7c:72:77:b2:30:21:7b:dc:f3:99:5a:00:e1:8a:0a:
                    b5:cc:54:01:10:ea:e9:6a:42:29:b0:98:c2:98:44:
                    bd:a6:c9:ab:a9:58:fc:0a:6e:dc:03:e1:12:a5:03:
                    c3:74:06:eb:f2:19:4e:03:06:11:3f:91:e1:87:0a:
                    13:53:f4:10:9a:01:98:d1:2f:ee:e0:e5:97:ec:3d:
                    13:0e:9a:3c:52:60:4e:78:c7:db:3c:51:30:bc:bf:
                    6d:98:13:17:be:3c:ae:6c:03:90:7a:1b:c4:ec:1e:
                    5a:ba:c5:84:ad:bf:69:a5:43:ee:85:4d:fd:37:a3:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:9E:F6:4A:86:2C:16:CA:6F:AE:3B:FF:57:3F:31:C1:2C:83:38
            X509v3 Authority Key Identifier:
                keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1d:8e:31:65:1f:5f:ab:b2:dd:5e:e3:53:24:2c:17:4b:80:
         93:4e:c7:bd:cf:f6:3c:54:9f:c8:f2:59:f6:7e:51:78:ab:cf:
         a2:91:e9:b8:fa:27:9e:d5:1e:24:eb:f4:53:8e:91:63:6a:41:
         06:5f:0a:03:84:1b:4a:17:8f:2f:2e:4d:80:f4:e5:91:2a:cf:
         f8:ce:b6:0c:9b:61:d4:9d:bc:d7:6d:28:25:58:7b:85:ab:ed:
         35:b0:74:46:03:b7:80:10:56:3c:52:bc:7c:8b:18:9d:8c:b2:
         a0:eb:13:26:94:c6:73:d9:5a:f9:80:19:20:4b:a0:99:60:8a:
         da:8b:63:56:74:12:13:66:ac:a9:ad:3a:c3:e3:6e:c0:61:5a:
         cf:36:c8:1e:63:d7:ee:e8:2d:8b:17:61:7c:64:68:48:4d:20:
         bd:3e:9a:61:53:dd:ac:ee:ba:40:3b:c0:7d:39:08:2e:20:51:
         0f:24:ce:ca:61:0b:cd:ac:32:f7:df:c7:2b:a7:ed:83:3e:5b:
         4a:5d:0b:d1:b3:6e:7a:fc:3b:a6:f2:e7:e6:89:06:84:b2:24:
         42:22:b8:fa:5a:a6:6d:80:ed:eb:95:39:7f:16:d2:cc:79:37:
         42:54:04:2d:9d:66:6a:c5:aa:dd:f8:20:ba:4c:4d:73:62:c6:
         15:15:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----