Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File:                     9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier:          t/btmdDJlPF89FbyoYwE6H9/Lv0ygM/fgIp5yWM2OWc=
Subject key identifier:   2B:0F:99:19:C6:EE:B5:95:4A:22:0E:2C:6A:48:ED:48:A8:4B:BA:83
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer:       /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial:       01962FAB1EF8B2FD094129335C389BA55F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number:          10D6
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: SX+Gvu771OK73MxHxWf0952r0o2L9mibul8qQj0er60=)
                          2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1e:f8:b2:fd:09:41:29:33:5c:38:9b:a5:5f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=2b0f9919c6eeb5954a220e2c6a48ed48a84bba83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:ed:f8:ac:ad:c2:10:76:74:24:c0:ad:5e:
                    2a:ad:9f:bf:7d:9c:be:87:4d:6b:ba:fd:89:39:eb:
                    8d:89:cd:1b:32:69:30:23:ce:13:0b:42:3c:4e:6e:
                    24:2e:a9:3a:0e:3b:3a:75:4c:9c:1c:87:7b:0d:a1:
                    9c:a8:2e:5a:2f:e6:18:b8:2d:2b:55:e8:b7:7f:12:
                    5b:56:dc:7e:4b:75:5e:2e:96:f4:2f:83:ff:f0:25:
                    02:ee:3b:89:46:c8:93:52:e0:24:74:f6:50:1f:e2:
                    78:64:6c:6c:12:ea:5d:0b:77:70:43:2f:35:d0:66:
                    a3:2a:82:fa:61:9f:00:cf:a8:a4:f7:86:4d:76:5d:
                    93:05:e4:ff:22:c9:88:d6:69:9b:d8:f6:05:6a:31:
                    02:9c:57:b8:68:2a:81:e2:f5:37:58:b7:2a:fb:dc:
                    7a:e2:c6:52:fa:b2:e0:e0:5b:f2:19:11:21:ea:fa:
                    7b:df:7c:7e:88:68:98:ae:1e:97:c0:88:cc:15:78:
                    85:c0:8f:b7:76:ad:23:5e:bb:c8:c8:0a:ef:e4:90:
                    c3:05:5b:15:af:39:03:0b:49:5f:d1:e9:3d:f9:c0:
                    70:5a:8e:b4:26:4d:e8:42:0b:2e:9a:0d:53:c5:c2:
                    d2:e7:68:3c:52:d2:e0:1d:5c:83:94:dd:33:81:35:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0F:99:19:C6:EE:B5:95:4A:22:0E:2C:6A:48:ED:48:A8:4B:BA:83
            X509v3 Authority Key Identifier:
                keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5b:e3:c1:3f:fc:f3:18:5b:78:f1:ab:e2:f7:b0:19:ab:fa:
         62:ba:a3:f7:81:52:03:3c:78:3d:14:d4:66:11:7d:f0:89:de:
         ba:a4:c6:7d:ea:88:62:13:00:13:db:e4:c6:97:23:64:4f:a3:
         17:ec:7b:0a:ad:48:0b:10:e4:25:b9:bb:b8:58:81:fb:07:14:
         ff:3e:66:75:0f:aa:3a:c3:1d:15:9c:fc:9c:7b:f0:2a:6a:59:
         a3:ae:b1:07:ce:7c:06:c9:a7:2c:75:57:e5:ab:82:ef:c1:cc:
         c8:14:48:71:a2:2a:d7:fb:a1:da:7f:c6:00:77:20:7c:ba:6c:
         db:10:68:c6:c5:e7:ba:97:aa:c9:74:25:22:39:29:79:06:70:
         15:3c:51:00:44:23:47:be:3f:f6:83:97:a2:4a:65:a3:06:1a:
         02:b3:83:f1:be:02:ca:fe:0e:54:c2:ad:89:b4:ac:a5:0b:0c:
         af:15:a9:29:b0:72:63:e6:9c:3d:35:75:5e:89:bd:e0:e9:34:
         30:2e:80:a2:20:19:b6:96:e4:13:06:6d:24:6c:96:6e:3e:3c:
         42:8d:34:46:59:b2:81:22:fd:a7:a2:23:25:eb:f6:96:a8:ac:
         11:c7:84:2e:c1:a1:92:f5:59:3c:f6:ef:19:21:df:99:bd:d3:
         14:51:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----