Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
File:                     i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json)
Hash identifier:          2BSe254h00ZG2Yg7f8GihcIJ+tHDBI3RrHIT19QrkPQ=
Subject key identifier:   76:4F:AB:90:8C:2A:3E:03:52:AB:D3:CF:8B:8A:98:F6:0E:91:2D:55
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Certificate issuer:       /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial:       01962F0740DAD61CD4C7EA62D79F112591A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
Manifest number:          0D37
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=)
                          2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=)
                          3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: mJpJ9BO54dgL+OhNyxyeUp54nU83i5TkWteO1rvGuAE=)
                          4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:40:da:d6:1c:d4:c7:ea:62:d7:9f:11:25:91:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=764fab908c2a3e0352abd3cf8b8a98f60e912d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:60:8d:dd:d3:b3:ad:77:6c:63:c3:4a:e8:
                    0c:c4:95:ce:93:a8:b2:7d:92:11:7b:62:62:d0:d7:
                    4b:5b:d8:39:8c:c3:d5:da:e1:c2:bb:ce:16:75:3f:
                    4f:95:32:b6:de:fd:04:ad:07:2a:23:40:ef:9d:f7:
                    93:64:5a:ad:98:ef:71:29:25:37:db:6e:a7:ad:22:
                    55:5c:14:03:46:32:89:03:48:20:18:a4:b5:15:f8:
                    2b:f4:65:99:96:b2:b1:4f:ef:56:b2:23:ab:19:c3:
                    32:1a:b0:3d:7c:6c:f0:42:b1:bc:a3:44:6c:ed:45:
                    08:a8:c2:cd:15:f4:32:a4:52:70:4d:d8:be:9d:fb:
                    d0:9c:a0:f0:18:78:c8:ea:b7:9f:c7:ae:83:51:2f:
                    80:fc:c7:1b:94:65:a1:de:8d:6e:29:61:8e:ff:c5:
                    08:43:78:f6:02:15:a4:f8:0a:80:43:7b:54:9d:9c:
                    90:9a:87:09:22:b9:25:0f:ea:0f:e5:26:e3:5a:e8:
                    4d:16:76:16:b2:e6:39:ed:c8:d2:67:2a:88:98:d8:
                    f0:43:0c:0a:7b:f9:ca:32:46:80:f1:82:91:a9:83:
                    51:03:19:85:3a:ab:5d:c3:2b:d5:35:09:b0:72:bc:
                    2d:b8:0b:69:be:db:e3:07:6e:18:fb:29:81:83:07:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:AB:90:8C:2A:3E:03:52:AB:D3:CF:8B:8A:98:F6:0E:91:2D:55
            X509v3 Authority Key Identifier:
                keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:6f:3f:2e:d0:7f:40:31:2d:8e:60:b6:b4:0f:f4:15:a6:f3:
         8b:ab:b3:b8:5d:42:5f:bf:da:f1:93:6a:84:fe:6e:ea:68:c6:
         ee:c2:5c:8f:e8:ec:0b:15:ab:79:ed:1e:93:85:6a:5b:63:7b:
         bd:0b:d5:15:22:de:02:58:52:9e:97:19:6b:6f:25:4e:c7:a5:
         b3:a8:59:56:ad:8d:ad:75:30:fe:7e:31:1a:94:bc:e8:f3:d1:
         99:6c:c6:c8:77:cd:ce:2a:5d:bd:6d:78:92:5c:4b:18:32:10:
         5c:aa:52:1f:20:91:d8:9e:ef:0c:70:d1:ad:78:f7:1c:10:00:
         e2:17:84:f2:3c:b5:2b:fe:d8:2e:60:66:02:3d:3f:30:40:43:
         6b:c3:84:0d:9e:81:a4:e5:f0:2c:f8:49:fb:c1:2a:1b:a1:e8:
         7b:94:b5:25:83:a8:49:a0:49:02:e1:29:ac:c4:1a:3f:8a:5e:
         3a:e8:ed:5b:02:94:b3:85:14:c5:c8:77:50:d3:0f:c0:24:cd:
         c8:82:ef:cd:9d:4f:10:44:4c:23:65:00:40:30:b7:cd:12:c9:
         af:5a:55:42:29:50:f9:59:0d:d4:c6:a6:a4:97:dc:e2:c7:26:
         89:bf:62:e1:1e:fe:1d:5d:4d:58:fa:ea:b1:15:57:5e:68:78:
         91:a1:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----