Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File:                     koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier:          yZNGdPlyqw5UbX2aI8NmFap2I8ePZdvn9VjEpGM3tcs=
Subject key identifier:   5A:D7:68:FB:CB:83:F1:4E:05:E4:E7:EA:14:C1:3F:B2:45:DD:2B:B7
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer:       /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial:       01962E2ABEC2A3E9D9B9A198D32EBB974369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
                          2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
                          3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: 23CSinVDMP3nEJtIVTSAmL2uac33lPASJoykTSJk4wU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:be:c2:a3:e9:d9:b9:a1:98:d3:2e:bb:97:43:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=5ad768fbcb83f14e05e4e7ea14c13fb245dd2bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:2f:04:10:0a:1e:0a:1f:f7:94:a9:e7:5d:
                    62:90:01:f5:99:d8:90:86:e7:17:a7:95:ee:2f:c5:
                    ab:d7:9b:bb:3b:b8:40:5b:50:38:b1:e8:17:51:5f:
                    b4:4a:e1:3c:10:b8:65:47:40:30:34:e8:c5:cf:c7:
                    56:89:86:2c:70:fa:45:f8:f2:79:a1:0f:0e:25:1b:
                    b1:e3:f6:73:b9:88:78:23:c7:b3:a8:66:cf:de:77:
                    f4:f6:72:05:70:0e:fa:a7:a2:ed:16:7d:6f:15:8d:
                    8b:a2:72:a6:36:86:00:99:70:85:9f:92:18:2f:d5:
                    59:f4:58:2c:f8:2e:9f:26:de:85:07:5b:7a:6d:94:
                    32:74:06:b7:70:17:40:af:df:a0:8f:0a:52:91:8c:
                    ca:6a:2f:36:13:6d:c6:2a:78:11:35:98:1c:54:2b:
                    95:73:ef:00:96:80:9c:1a:fd:c8:ad:10:47:b7:ad:
                    e5:f1:63:e7:32:ab:30:6a:50:c7:e3:49:10:65:78:
                    e9:d2:69:8d:b2:48:25:2f:a2:8b:8b:71:89:23:83:
                    a9:25:e7:4e:e8:79:ee:0b:f2:40:87:4a:c5:3b:4e:
                    e7:2a:8d:b9:f8:a9:e7:5c:eb:4d:9d:a9:d4:88:11:
                    fb:db:f1:ba:9b:8a:c9:cf:b0:7b:56:95:84:f9:9b:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D7:68:FB:CB:83:F1:4E:05:E4:E7:EA:14:C1:3F:B2:45:DD:2B:B7
            X509v3 Authority Key Identifier:
                keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ed:5e:b7:b7:4c:14:28:a5:8a:6f:f1:64:15:dc:84:84:ba:
         cd:b9:58:09:7a:63:e0:67:b8:62:90:78:01:2f:dd:c2:68:68:
         9e:dd:ae:cd:30:c9:2f:d1:ea:45:2d:b4:4d:45:ef:12:67:b9:
         74:4e:fc:62:a2:cc:57:d2:0c:0d:ac:ff:33:49:e7:6f:7f:f4:
         ae:73:36:96:59:49:e8:5c:cd:09:48:a9:6c:dd:3a:e6:ec:86:
         ef:74:53:0f:21:04:65:fa:a8:86:ea:24:b1:c5:9e:37:15:4e:
         20:72:da:e2:36:a1:d9:81:33:18:e0:75:cf:0e:07:09:b7:bf:
         9e:10:e5:64:de:6b:b5:33:f9:64:11:8b:d0:c8:26:de:23:03:
         bf:ce:96:91:ce:b5:89:05:52:ce:b3:b0:49:81:ec:a2:1d:f5:
         ee:21:33:e1:bf:ca:0c:e6:e1:1f:eb:75:b1:95:6a:30:9d:a1:
         36:5b:57:75:d2:15:1b:de:cc:5a:f1:32:59:bd:36:4c:6d:06:
         13:ec:5a:79:a3:da:4b:c0:18:db:dc:21:9e:e6:c1:8a:68:55:
         d2:95:87:52:89:f2:32:e1:8b:b7:b5:65:56:12:fa:3a:68:e7:
         fb:a5:fe:a0:5e:93:c0:a9:e9:44:76:dc:3c:a3:1d:00:f1:a7:
         46:5f:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----