Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File:                     9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier:          i8dHg8DUiOYe7PwayHHqS0Ysb3OocTbQjSi364ykuck=
Subject key identifier:   A8:F4:8B:AC:AC:5B:49:DB:8C:82:3B:FE:E2:B1:01:A8:DF:6A:16:73
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer:       /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial:       01962E2ADAFB7AC15C7528C5BC37A63450F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number:          0B97
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
                          2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: RmfIM99sSvhpxDz5SJE+V4O1MJ/Kr1KGiWmOOrdEIeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:da:fb:7a:c1:5c:75:28:c5:bc:37:a6:34:50:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=a8f48bacac5b49db8c823bfee2b101a8df6a1673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:ad:31:18:9a:dc:0d:cd:ce:c6:c2:0c:fb:
                    ef:f5:63:7b:f9:b3:8b:de:6b:9e:90:dd:ca:4e:d3:
                    3c:ec:23:a7:0b:99:be:ab:95:3c:12:e3:c0:c9:9f:
                    a1:9a:33:10:31:4c:c3:7a:a7:fb:cb:0b:f8:ab:73:
                    ab:e4:5c:75:8f:ee:07:a0:64:98:41:1f:e4:66:12:
                    2d:aa:85:79:77:88:01:69:b7:58:e0:21:07:28:54:
                    d8:02:79:58:c1:15:a7:f8:21:bf:fd:45:75:39:8e:
                    c4:01:74:cd:a2:02:5c:4c:3d:9c:ab:67:fd:2a:61:
                    f4:d8:c1:89:e9:43:78:ca:71:c1:a8:51:aa:ee:3f:
                    46:be:09:32:0f:b6:0f:aa:a6:3b:68:e2:c4:b3:10:
                    41:a7:30:06:ad:a4:c6:25:3e:e0:7e:7b:60:8f:bc:
                    82:54:b2:f4:3e:6a:d9:d7:7c:45:13:3f:05:43:4c:
                    0d:1c:6e:af:c6:cf:0f:85:7e:2d:c9:de:93:a1:50:
                    77:17:5f:f6:10:94:67:07:b9:fe:6b:4c:66:90:50:
                    6b:b2:56:20:1e:e9:f0:6c:1b:12:75:a9:d1:d4:ab:
                    84:ea:d4:14:e9:86:4d:e5:14:a6:0c:d4:c5:ca:e1:
                    78:92:94:8e:f3:4a:23:5a:5b:fd:a3:68:40:2d:55:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:8B:AC:AC:5B:49:DB:8C:82:3B:FE:E2:B1:01:A8:DF:6A:16:73
            X509v3 Authority Key Identifier:
                keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:7f:cb:04:4c:48:3b:20:51:4f:42:ec:7b:37:f8:93:5f:67:
         24:41:8c:ff:76:d9:bf:9b:4f:66:7b:25:70:0f:b8:df:35:47:
         fe:54:80:fb:bd:ce:ee:96:e0:0e:0a:e9:c8:3d:56:47:9d:14:
         79:2c:79:5c:ce:95:cf:8c:76:f1:97:75:44:43:2a:c2:55:01:
         de:8b:f7:21:27:db:27:dc:31:22:87:c9:a4:a9:2e:69:9e:93:
         72:30:06:71:78:da:e2:a7:23:e4:9c:1a:05:62:3c:c1:10:4d:
         6d:47:8a:16:b6:9a:2c:24:26:a5:12:f3:7d:4d:aa:f4:e7:97:
         10:30:79:91:33:f3:3f:bc:2f:7d:a2:9c:9c:50:90:cf:36:26:
         1a:24:9d:e0:73:58:28:8a:90:e3:4e:f7:24:a7:1b:6f:e3:82:
         cd:83:73:ee:7c:be:34:0e:f2:63:48:47:bf:6a:57:2c:66:46:
         e4:f0:12:ec:be:4f:bd:7e:ba:a4:94:60:43:13:19:01:b3:cf:
         4d:7b:74:e7:1e:de:dd:8c:93:39:c6:55:27:42:ac:c6:6e:e7:
         45:c9:64:44:87:41:fe:b6:79:ef:8c:91:ab:de:e4:e4:4c:04:
         d1:df:97:fe:41:3b:25:40:d3:dd:64:f6:39:fc:b2:a9:ec:f0:
         c2:b7:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----