Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          DCsS+J+K7pF0M8cTUs0xgH59QwPVL9rOFiDJSaO9XZc=
Subject key identifier:   09:9E:21:B5:78:F1:D4:39:F5:94:0B:1F:BB:5B:9E:4A:81:4F:34:30
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       01962DF404E9AC0CFF485CECAB1A5CE13F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
                          2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: Lhl8NaMrdpmx6Wnki99ITIS2kq5o2sVLrVU4yl4N0fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:04:e9:ac:0c:ff:48:5c:ec:ab:1a:5c:e1:3f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=099e21b578f1d439f5940b1fbb5b9e4a814f3430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:5c:ee:b2:2d:37:74:96:e8:0f:1f:00:36:
                    41:d6:23:18:e5:13:5c:cd:91:97:47:64:32:d8:54:
                    ef:c4:7d:49:fa:fc:e5:29:3b:fa:e9:2c:5f:c1:9f:
                    c8:7c:3d:da:95:48:b1:68:2e:75:b2:5a:29:21:03:
                    c4:f6:cf:8f:64:0e:65:43:d9:b5:dd:54:41:09:fc:
                    23:be:86:e0:63:1d:1e:bf:bb:1f:b3:a5:a7:cf:53:
                    a7:86:64:f8:8d:27:c2:2b:f7:4a:65:b8:4e:8a:0b:
                    d6:84:87:75:43:96:2d:fc:a6:ad:ff:b9:60:93:2e:
                    79:b7:8f:75:32:82:15:b0:f7:a7:76:e9:8c:99:65:
                    3d:41:80:14:ef:ae:a1:ac:81:23:46:84:16:0b:06:
                    3b:e7:3d:fb:de:df:94:ee:f2:10:8b:d8:e2:d8:23:
                    57:1d:9c:ec:d1:71:a4:23:36:53:31:79:bd:97:a7:
                    3b:7b:ad:8c:a8:32:07:dc:51:64:d4:48:74:f0:a4:
                    dd:f6:42:a5:6e:a9:00:c4:97:c5:be:30:6e:4e:f3:
                    22:a2:e7:7e:b3:87:4a:80:e4:12:d9:86:4f:4b:13:
                    b0:3e:82:a0:af:ab:57:c2:d7:3e:25:9e:b2:8d:22:
                    ec:6b:95:b1:f4:20:f2:24:90:18:0c:05:b8:a1:61:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9E:21:B5:78:F1:D4:39:F5:94:0B:1F:BB:5B:9E:4A:81:4F:34:30
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:a2:7f:37:e2:d6:4d:d6:63:a6:d3:26:b8:32:65:e4:69:
         a3:af:12:ac:79:b5:cc:ab:02:50:9a:84:8c:7c:64:3d:8f:37:
         b4:76:03:51:49:68:8b:da:b1:77:f9:e9:55:d0:b4:fe:fb:5f:
         73:55:1a:15:82:de:b7:e9:de:da:35:cb:4b:3e:1b:03:5a:dd:
         68:fb:95:73:aa:9c:92:c5:9b:4f:28:b7:bb:0f:0d:01:b8:a1:
         7d:ae:26:d9:c0:3d:8d:97:4c:05:f9:ab:ae:bc:54:07:8b:02:
         df:cc:ce:06:8e:c3:6d:d8:ac:8e:58:fb:4b:ef:12:67:a3:61:
         2e:37:f8:32:52:34:53:82:80:f8:27:37:dd:06:68:89:00:93:
         e5:af:1f:5d:e4:bc:3c:8c:ea:7b:79:b1:ae:b7:38:55:f9:f9:
         c2:96:8b:bb:e4:ef:1c:98:76:1c:7a:61:3f:78:78:9c:86:aa:
         b5:b3:c6:6e:b8:0e:d9:60:6c:ec:1f:1d:25:d9:a8:a5:12:5d:
         c2:39:44:1e:34:51:42:4d:c0:4d:4a:32:88:cd:32:6f:21:e1:
         dd:98:a4:8a:06:c9:13:d2:86:dc:c9:84:94:b7:3b:ae:7c:f2:
         6e:89:31:f3:0d:24:2e:ff:6a:19:be:ab:b9:4b:4c:2f:7b:db:
         a2:2c:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----