Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File:                     ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier:          s/WEkTsEN4Eni2aa5wjY2pV+GpC8xHMKxN9DCfFCYxY=
Subject key identifier:   98:5C:63:D3:75:11:7C:C9:10:77:FB:23:1F:81:9F:4D:8E:AD:33:93
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer:       /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial:       01962ECF9844B75B1D36E385510F097D7F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number:          1009
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=)
                          2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: 5ZF2pWLur/HjhqJrmsQ10UWgedAMRcVco5cWNl1pANI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:44:b7:5b:1d:36:e3:85:51:0f:09:7d:7f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=985c63d375117cc91077fb231f819f4d8ead3393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:2e:df:d7:6e:16:fb:54:5b:1c:2d:63:66:
                    40:e5:3f:cf:74:5d:63:25:8b:13:f4:86:a4:3a:c2:
                    72:0d:f3:1a:0c:55:6b:6a:16:3d:2a:b1:5e:03:b3:
                    0a:87:f4:87:1d:a1:e7:ac:7a:52:71:c0:ff:9b:67:
                    80:81:59:3b:f8:ee:cd:a5:af:7f:9a:4d:ae:06:a4:
                    20:e8:d6:24:a9:70:63:ca:7b:a0:13:7b:3c:7e:85:
                    94:bd:d4:f2:b0:42:48:db:1e:91:9a:1b:e9:5c:b7:
                    a4:ba:bc:91:3b:03:03:31:58:55:bf:df:61:78:f0:
                    fb:ea:04:58:41:eb:08:03:57:8c:ff:ce:1f:30:66:
                    56:a1:8e:af:eb:8f:01:a3:ef:61:a8:1c:67:77:2b:
                    64:ab:69:1b:1a:63:1f:ff:f1:bc:cb:23:79:69:1b:
                    58:65:4f:14:7f:1f:f3:d6:bb:c2:1d:84:b4:e7:ee:
                    01:55:b9:9c:ae:09:34:23:ec:dd:ac:ae:13:09:2b:
                    44:aa:ba:30:b3:25:bd:79:f2:9c:59:b3:27:6b:18:
                    e6:8f:45:e9:5f:2c:dc:c1:94:f6:f4:3d:4c:14:01:
                    42:a7:c2:63:1b:b9:61:36:83:45:2f:d9:73:66:ab:
                    67:ba:1f:65:c5:39:64:a7:f9:28:6a:6f:8c:97:81:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5C:63:D3:75:11:7C:C9:10:77:FB:23:1F:81:9F:4D:8E:AD:33:93
            X509v3 Authority Key Identifier:
                keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:44:ee:bb:39:1c:b7:c1:56:00:b2:dc:9b:62:9f:17:28:
         01:a1:a0:23:e7:e7:44:31:2e:35:42:06:78:c9:7a:a2:36:4c:
         30:69:99:ba:25:3a:0d:f9:94:75:bf:8b:82:be:64:28:92:84:
         b3:34:55:8d:c7:47:54:56:65:29:f3:50:8c:a1:3d:7f:06:0c:
         9f:11:ed:13:e7:57:2f:9d:2d:a6:fd:ba:a0:80:6c:d2:93:c4:
         83:40:4a:a5:0d:0b:2f:db:dd:f3:4a:c1:3f:a2:fd:d9:a0:15:
         1c:d6:5b:de:e9:c2:32:35:8f:d3:8d:c8:40:a8:23:82:78:71:
         21:01:88:61:a4:70:51:49:5a:a6:70:93:aa:f3:3a:78:7f:75:
         d7:09:d9:94:e7:b8:af:a0:9f:a4:85:f0:54:48:0f:7d:5f:ec:
         9b:4c:51:94:d0:3c:7b:66:af:08:2f:7b:07:fe:8f:49:ca:90:
         8c:cd:28:80:cc:64:a3:6c:e6:3a:bc:89:d5:26:2d:5d:a2:82:
         30:f1:e7:e1:2e:f3:b3:35:aa:f9:9f:8d:df:20:23:0b:48:aa:
         ea:ab:df:93:54:d3:5d:0c:ed:ba:24:69:94:48:53:8a:f6:8b:
         4c:44:0d:3e:9e:ac:0a:59:1f:5a:90:ef:b5:28:5e:c2:4c:3d:
         49:90:f5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----