Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File:                     e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier:          +vFWpRDL8KifhV2X60dSyFG9OBs1V17MHkshHHQJtps=
Subject key identifier:   56:B6:96:7C:9E:F7:E9:31:04:E3:43:1F:FC:89:60:99:44:D8:99:B0
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer:       /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial:       01962DF3F9CDE966F6B2E05A5E1152FE9B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number:          08B9
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
                          2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
                          3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: C7LN818zxPBtMOxOhmIVkw/S9Y06BMV2+NuYdQ59ylQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:cd:e9:66:f6:b2:e0:5a:5e:11:52:fe:9b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=56b6967c9ef7e93104e3431ffc89609944d899b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:6d:0e:22:b8:b8:da:57:81:49:95:c0:c4:
                    2b:6d:b7:19:f2:91:a1:94:a6:3a:83:16:f3:98:f4:
                    88:7e:4f:6c:91:13:03:14:c3:b2:f0:f9:d0:8a:99:
                    56:8d:7e:76:25:49:0f:d6:a2:0c:7e:a7:57:bd:3d:
                    e3:fc:b7:65:d3:cd:e2:0b:c8:9a:0a:9f:94:cc:cb:
                    11:61:21:93:47:96:06:37:9d:d8:4b:13:40:d8:fd:
                    bf:ed:72:3f:d0:a1:a4:1f:74:4d:ce:74:4c:26:3d:
                    0b:5d:93:e6:43:92:b6:93:4c:82:dc:a8:38:1b:17:
                    19:4d:b6:fc:34:a9:eb:32:e8:89:d9:80:ac:82:ad:
                    b1:e2:dc:1e:56:f9:2f:61:3b:4b:14:d3:2e:4d:6d:
                    0c:e9:d7:f7:bb:bd:b0:a7:f5:9f:f5:ca:ba:9c:ed:
                    d1:30:9c:3a:da:43:1d:0d:91:cc:8c:74:f4:4a:d7:
                    22:33:4a:c3:8e:b7:5d:57:ea:a9:32:d2:1a:a2:55:
                    8b:14:13:81:95:d1:8a:1d:2f:9a:87:34:40:7a:3c:
                    92:50:3c:9a:ec:0b:68:23:d7:1a:7e:ec:9b:a4:e7:
                    6d:2e:41:f8:ed:b7:ea:f2:85:37:67:c6:31:c3:91:
                    d8:23:7a:19:1f:7d:a3:c6:86:bf:b8:a0:09:55:e9:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:96:7C:9E:F7:E9:31:04:E3:43:1F:FC:89:60:99:44:D8:99:B0
            X509v3 Authority Key Identifier:
                keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:17:85:83:0d:30:fc:3c:97:5e:e2:0b:d4:4c:97:30:fe:56:
         2d:43:f4:3d:f1:81:7c:05:2d:bf:74:32:4a:f5:ab:9f:65:f4:
         25:80:0e:f4:ac:fb:b1:5e:dc:6c:c4:18:5e:6c:ea:14:ca:75:
         23:d4:95:bf:83:78:0c:8f:e5:3c:af:97:32:fa:50:ae:eb:60:
         da:de:94:85:5b:18:8b:8a:4e:c4:08:dc:33:89:1c:64:30:f0:
         47:4f:5a:77:2e:e4:0f:bd:b2:17:04:7e:a1:e7:c6:ae:5d:aa:
         96:c5:b7:0c:00:f5:9f:e8:c2:0c:1b:88:bf:bb:db:30:bc:49:
         a1:b2:c3:5e:d4:8b:0e:0a:4c:46:c6:23:72:e4:e4:77:2a:2a:
         4c:6e:44:49:ac:50:39:85:0f:d3:e6:66:ef:a7:96:ff:9c:df:
         03:41:44:08:a5:42:e8:7c:45:44:ca:0e:65:4e:65:5c:ec:6f:
         59:ab:c5:64:a8:b4:c0:df:9a:80:1d:d2:af:38:a6:b1:8a:ef:
         48:a1:b4:34:bf:83:b5:da:9d:2a:d7:b0:af:dc:0a:7b:65:a4:
         39:7e:5a:75:d9:6a:f0:32:0f:cd:62:f8:1d:2f:f1:f3:d8:a0:
         9c:cc:17:e9:06:90:7b:7e:71:28:b6:8c:ea:13:8a:a7:28:24:
         4b:6c:e6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----